
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
File: FAd8W3ds23z3vDXWtELjZ3arDG4.mft (raw, json)
Hash identifier: HikNFR6EoSSOzdFaI+gj/evlZeIfNcxJ1N8L8tU6RcA=
Subject key identifier: 2B:53:33:AE:3F:26:10:C0:4A:16:CD:71:F6:8F:E5:5D:11:0F:56:3D
Authority key identifier: 14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E
Certificate issuer: /CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
Certificate serial: 0199FBEAAEE5A73C183777D746787C25C186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:25 +0000
Manifest this update: Sun 19 Oct 2025 10:01:25 +0000
Manifest next update: Mon 20 Oct 2025 10:01:25 +0000
Files and hashes: 1: FAd8W3ds23z3vDXWtELjZ3arDG4.crl (hash: 7AXjeKqRCOfe7vHxjyPY3LRBzwHbp1/i587Clb3PZX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ae:e5:a7:3c:18:37:77:d7:46:78:7c:25:c1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e
Validity
Not Before: Oct 19 10:01:25 2025 GMT
Not After : Oct 20 10:01:25 2025 GMT
Subject: CN=2b5333ae3f2610c04a16cd71f68fe55d110f563d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:d8:42:bc:a4:74:d8:73:68:77:95:bc:a7:
ab:01:e6:85:21:bd:74:94:ba:ef:fc:26:d4:fa:64:
61:81:95:1f:bc:34:b3:1d:82:37:b4:44:d9:d1:8d:
d6:80:e6:8c:40:d6:0e:4e:56:18:8a:bb:d3:4d:f0:
a3:e6:fd:da:a7:c1:66:89:7d:26:fc:bb:88:bd:76:
a1:10:34:6c:f6:40:41:fe:3c:8c:ce:41:b3:4d:dd:
93:eb:03:14:40:f4:af:e0:5f:f4:85:b5:39:9c:ae:
98:34:63:db:a3:25:a8:95:61:bb:7d:37:f5:65:0d:
00:1a:fc:75:37:71:c2:09:f4:f1:c6:82:31:db:03:
a9:f8:02:f1:8b:1f:26:e9:dc:11:1d:03:f8:62:12:
24:ad:c1:b5:90:a9:d7:92:4f:90:41:a0:c1:19:ea:
28:9f:ca:ec:0b:c3:8a:65:97:43:5e:d4:0d:72:42:
a6:8b:c3:3f:cf:8c:90:6e:a4:3b:e9:bc:56:4f:ce:
42:0b:62:31:f4:37:a7:5c:ca:b5:4c:a7:98:83:c1:
3a:7a:fd:ab:25:45:05:33:67:14:eb:a2:1e:e3:b7:
1c:ba:6d:8d:02:23:f6:3a:44:f6:2a:3a:e4:61:28:
90:0d:cc:83:3d:09:60:b6:d2:2f:51:fb:76:6b:e2:
e8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:53:33:AE:3F:26:10:C0:4A:16:CD:71:F6:8F:E5:5D:11:0F:56:3D
X509v3 Authority Key Identifier:
keyid:14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:07:12:9e:a8:68:f1:27:dd:b9:de:90:28:09:a9:5b:b1:75:
3b:94:cb:2e:94:8d:26:c4:3a:f5:93:bd:f6:e0:2d:d4:12:77:
b8:2c:e3:89:42:7c:8b:09:e7:ea:6d:71:6e:1e:8c:f3:cf:a2:
9e:a0:b5:3f:17:98:17:c0:1f:c2:31:67:56:a8:04:e5:73:cd:
64:78:84:95:6f:68:8c:a3:b1:22:99:2f:86:08:3a:0d:e7:b5:
e9:50:4b:c5:cf:a0:e1:56:b1:7e:d6:e5:07:ad:d1:ac:d3:ea:
42:3b:d7:b6:16:c8:34:4a:70:b1:fa:95:bf:14:0e:4b:62:c3:
10:d6:bd:8b:0b:1e:b1:95:54:92:9c:69:e7:31:54:ab:ea:d9:
51:e3:fc:ca:5a:94:b6:15:2e:1e:05:97:08:f1:d5:e2:0e:70:
91:db:9f:d4:25:33:76:ab:70:12:63:c4:44:14:15:fc:93:d3:
b9:8f:d3:4d:1d:64:82:58:b3:60:59:ec:e9:ff:1f:88:73:92:
59:bc:dc:15:be:67:37:2a:3e:57:e2:a3:64:29:84:63:3e:4c:
eb:25:c9:c5:ef:cc:61:19:d5:e9:80:95:50:00:e1:49:61:f4:
d8:c2:50:cb:42:1f:96:4f:7c:af:bd:d9:99:9c:ca:11:1d:3e:
11:b3:1a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:31 2025 by rpki-client