
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json)
Hash identifier: CGbgBHeeAHJ3nEsSDIWnhmMMNcIWGSyBHyLDls0LOLc=
Subject key identifier: 3D:A4:C6:92:80:4D:90:85:BB:16:B7:FF:E3:91:46:1C:69:96:F7:4D
Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Certificate serial: 0199FC21ADB9F238350934EB045BA45A490F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
Manifest number: 0FBB
Signing time: Sun 19 Oct 2025 11:01:29 +0000
Manifest this update: Sun 19 Oct 2025 11:01:29 +0000
Manifest next update: Mon 20 Oct 2025 11:01:29 +0000
Files and hashes: 1: 1skXawq2SahvYTA2mnEOEbVR1u8.roa (hash: nHycrkajnYAr9VibtJNGtsv2Ftb47ENenxgpTd+DfzI=)
2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: 8rrwGZiEs+z7w7kL8zDc9+JJKrHnmxSa1ZqKmTHvOEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ad:b9:f2:38:35:09:34:eb:04:5b:a4:5a:49:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79
Validity
Not Before: Oct 19 11:01:29 2025 GMT
Not After : Oct 20 11:01:29 2025 GMT
Subject: CN=3da4c692804d9085bb16b7ffe391461c6996f74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:dc:28:aa:8b:93:a1:f9:33:7e:3e:38:85:
07:eb:bd:0b:1e:72:fd:7e:52:c5:0b:5a:10:d9:82:
d8:cb:e1:5c:37:29:4f:8d:64:96:13:6d:d3:39:6f:
a7:3c:09:e6:1e:4e:20:68:7a:4b:ae:3e:0c:6a:08:
1e:56:92:18:d6:e3:57:7d:b8:67:dc:c3:89:da:c4:
6d:4f:28:10:5b:1e:dd:ca:99:59:aa:3e:89:21:94:
62:85:bc:47:35:ae:27:cc:94:48:50:f9:ba:a5:b8:
50:0c:89:fe:2c:cb:a2:02:a4:a8:c0:74:4e:21:f9:
de:d5:4d:35:c7:7e:9f:7b:1d:f9:35:d0:85:a5:97:
c0:ab:55:28:d5:78:57:20:b7:13:d3:48:bf:a7:d3:
88:3c:43:11:b1:c0:ec:48:84:d3:bf:2c:60:33:4f:
a9:d1:49:d8:2b:24:1d:e4:5a:6e:c6:82:e2:d7:81:
56:95:4d:78:ef:67:60:f0:cb:82:f5:20:3b:19:df:
65:69:af:77:4b:97:c5:be:43:92:26:91:d9:73:63:
e3:b8:0c:06:0b:6e:e4:36:4b:78:06:8c:aa:07:e8:
3c:11:f6:b4:14:b4:a5:31:1e:12:00:39:c2:83:8d:
fb:66:36:ae:27:73:ed:97:6f:b2:6c:6f:d4:c7:3f:
03:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A4:C6:92:80:4D:90:85:BB:16:B7:FF:E3:91:46:1C:69:96:F7:4D
X509v3 Authority Key Identifier:
keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0d:80:de:ee:1a:b0:9b:54:5f:5b:b8:2d:25:40:67:99:17:
15:62:df:c4:d8:ce:ea:9d:f1:c8:9e:6f:29:be:19:5e:09:9e:
95:12:b7:ae:56:a1:c7:fd:cd:23:39:41:8a:82:8e:e0:8f:a3:
f7:02:ca:f8:ac:8a:ba:b1:5d:20:40:f9:a0:bb:03:8a:02:34:
0e:29:0f:5b:5c:28:8d:82:67:16:e4:3f:b8:bd:98:a2:ed:70:
4e:69:64:69:d6:bc:a2:42:d8:3d:16:34:24:dd:ac:78:28:b7:
c6:8c:af:2e:cb:10:83:f9:fb:1c:64:77:db:b7:45:6d:54:86:
5c:6a:77:da:83:7f:9b:fc:3b:39:e3:8c:6f:8a:68:70:bb:ec:
36:6b:4c:1b:44:a3:63:09:70:19:bb:bc:5a:1e:bb:10:fb:ae:
03:6d:14:1b:12:68:fc:60:7a:eb:cc:44:bc:97:6d:1b:93:98:
ba:53:f3:af:98:cf:65:63:99:a3:20:6c:67:85:42:2a:a6:41:
f8:71:29:98:72:23:06:85:a5:72:ff:57:98:04:05:41:1e:e9:
ab:c6:d8:29:b0:ec:8c:c0:19:de:34:c6:6f:e9:fa:b8:4f:b5:
50:5d:05:e2:cf:36:ec:83:7c:73:35:e4:b8:63:36:7b:7b:07:
23:f5:a4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:40 2025 by rpki-client