Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
File: fp2uVBo7fD77bdZkadCH6F9179o.mft (raw, json)
Hash identifier: 1ze5FfZJoqThgWDA+Kn2aQXlPAQ/Kgor4D1Gxd5fOyM=
Subject key identifier: F0:D1:83:1B:48:94:E2:E2:64:6E:9D:4A:90:C8:FA:04:F6:58:8B:16
Authority key identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
Certificate issuer: /CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Certificate serial: 0199FBEB30E4888EACA18AE6F52444443436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
Manifest number: 0343
Signing time: Sun 19 Oct 2025 10:01:58 +0000
Manifest this update: Sun 19 Oct 2025 10:01:58 +0000
Manifest next update: Mon 20 Oct 2025 10:01:58 +0000
Files and hashes: 1: fp2uVBo7fD77bdZkadCH6F9179o.crl (hash: ub9IUKXTQny6UIhNgMrZ8k7OP3G2GLjrrH1j5a+KFZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:30:e4:88:8e:ac:a1:8a:e6:f5:24:44:44:34:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda
Validity
Not Before: Oct 19 10:01:58 2025 GMT
Not After : Oct 20 10:01:58 2025 GMT
Subject: CN=f0d1831b4894e2e2646e9d4a90c8fa04f6588b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:20:b4:e1:ce:1e:b5:9e:b7:f4:db:e0:9e:
92:13:7f:39:ce:17:bc:e1:2b:fa:12:12:66:21:24:
ec:ca:7b:67:2b:75:76:92:56:63:38:7d:7e:ce:06:
58:aa:cf:30:83:92:80:14:dd:10:1c:6b:a6:fc:7c:
51:cd:dd:56:e4:8c:3b:fc:67:39:cd:a2:87:2c:c1:
ae:46:dd:0e:0a:23:f7:8f:a8:d5:3a:2c:65:41:53:
8d:f9:a0:db:a7:18:c3:ce:48:20:12:73:36:dc:0f:
c8:09:e9:ca:ab:4f:2f:2a:97:1a:b4:5f:7c:b4:d2:
b9:c8:74:b8:8b:22:77:61:8c:fb:2e:80:0f:93:c5:
f6:c6:fa:b5:50:39:77:6a:22:f2:df:9e:36:2d:30:
3b:6f:13:dc:83:bc:53:7b:36:a7:d0:2b:76:bc:68:
27:7f:16:ae:0a:23:02:16:e1:54:ac:4b:78:ee:15:
71:ac:00:c0:57:88:52:2d:f2:50:f1:12:53:3f:da:
95:e4:c7:ef:2f:4c:25:a5:a5:fd:2c:97:e8:22:97:
73:1e:dd:42:1f:3e:1d:5a:85:7f:39:bf:33:60:73:
f9:af:e3:39:fd:8d:63:8a:a9:a6:16:96:f2:f6:3d:
2e:e2:62:12:1a:45:9a:20:3f:28:82:b6:6f:8a:9a:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D1:83:1B:48:94:E2:E2:64:6E:9D:4A:90:C8:FA:04:F6:58:8B:16
X509v3 Authority Key Identifier:
keyid:7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:01:fc:54:88:30:82:d9:38:88:04:09:34:23:3c:f6:c3:30:
7e:f4:3b:0a:ff:21:ee:eb:47:d6:63:57:76:85:36:14:eb:a5:
70:03:e5:72:55:32:e1:8d:04:85:e0:9b:af:84:a3:3a:18:eb:
54:e7:48:6a:03:29:9a:e3:3b:40:f1:5d:1a:54:84:11:76:de:
f0:6a:12:a5:ed:fe:19:27:83:50:a8:75:95:e7:65:5f:bc:ed:
4a:e8:cd:4a:3f:c2:28:a5:f4:1e:8d:5e:23:9e:b7:d4:d5:da:
94:14:ca:a6:e9:ec:06:1c:d7:d1:fa:10:5f:e2:48:a4:c1:75:
68:63:4d:9c:3c:72:19:7b:5d:5f:ec:d5:38:85:c1:4f:0a:d3:
41:c9:4e:8b:c4:2f:47:7f:a2:97:17:94:8e:82:56:28:85:3f:
9f:89:5c:a8:f1:70:39:24:0a:a3:ee:13:4e:a0:41:ab:d2:a8:
bc:6b:37:68:17:97:cd:ae:62:6b:82:95:20:28:c8:31:2e:c5:
f1:6d:71:5e:3d:33:91:7d:37:4d:f6:8a:5a:73:0b:35:cd:7f:
4f:5a:38:28:42:9c:ef:1a:02:ee:a4:c0:63:dc:e6:a4:bf:de:
8d:e7:1a:22:61:2a:b7:ae:e5:13:b8:d9:07:89:93:74:4f:b5:
33:64:5f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:40 2025 by rpki-client