Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
File: FdaRyV0UuLzeZpKgMgzA4odWsFk.mft (raw, json)
Hash identifier: l4H5oMM5FXlGQrV0rXTLEetePfSLz32VyzGGPe82rUM=
Subject key identifier: BA:B6:07:71:AD:89:CA:13:A2:68:B4:2C:DC:2D:D1:89:A7:EE:3F:CC
Authority key identifier: 15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
Certificate issuer: /CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Certificate serial: 0199FB0EDB31D3FD79748BA98A3987258C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
Manifest number: 050F
Signing time: Sun 19 Oct 2025 06:01:18 +0000
Manifest this update: Sun 19 Oct 2025 06:01:18 +0000
Manifest next update: Mon 20 Oct 2025 06:01:18 +0000
Files and hashes: 1: FdaRyV0UuLzeZpKgMgzA4odWsFk.crl (hash: p90qCr9IsT+MxZlfJaDigvwCKR5VuGYoO4eNefpoo/w=)
2: l3kIS-H41zLKlD417TNejtnJFY4.roa (hash: FXoM//hoNobYIufdMl7hBHWJsSDmxoPmDOYAZonvSC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:db:31:d3:fd:79:74:8b:a9:8a:39:87:25:8c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15d691c95d14b8bcde6692a0320cc0e28756b059
Validity
Not Before: Oct 19 06:01:18 2025 GMT
Not After : Oct 20 06:01:18 2025 GMT
Subject: CN=bab60771ad89ca13a268b42cdc2dd189a7ee3fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e6:11:63:83:a2:64:3e:08:66:df:90:9e:37:
e1:6a:06:e6:b1:c9:09:fc:77:13:65:59:3a:64:1f:
f7:94:6a:6c:15:7b:86:1d:20:e9:ee:95:0b:de:27:
da:55:18:83:d4:1c:7b:f8:f2:10:1a:df:4c:82:dd:
41:e1:d5:8b:84:34:67:c0:c7:c9:7e:6c:16:66:f2:
71:aa:d5:44:d8:48:f7:01:2b:b7:9e:32:dd:24:5d:
22:6f:58:d6:12:b5:71:4f:fc:6a:51:21:8c:bb:01:
54:51:f0:f5:8d:48:ce:a3:83:db:57:44:5b:2f:8a:
56:f4:d9:21:a9:cf:8e:d8:6c:22:3a:e8:e9:57:f8:
ec:65:05:39:82:a1:cf:28:55:79:d9:b9:bb:f0:bc:
4a:4b:e6:5b:13:01:3a:39:17:a0:9d:b0:60:31:45:
37:c5:3e:59:24:dd:38:3d:d9:e1:72:82:95:5a:c6:
94:e4:05:67:80:60:98:20:0c:7f:d9:81:3d:74:d1:
ab:1f:ea:51:e2:40:f9:16:22:3f:5d:bd:e6:cb:86:
0c:91:b8:cc:27:b6:14:4f:fa:2d:17:de:e5:90:70:
b3:fb:25:c0:c6:69:51:29:99:c2:b2:ae:92:32:6e:
62:0e:5d:d8:64:87:42:d9:7d:0a:57:dd:49:54:21:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B6:07:71:AD:89:CA:13:A2:68:B4:2C:DC:2D:D1:89:A7:EE:3F:CC
X509v3 Authority Key Identifier:
keyid:15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:37:29:8a:47:9c:ff:cb:8c:6e:fd:d6:d7:fc:bf:e7:c4:22:
e0:a1:a3:e1:5a:03:65:3d:ab:dc:83:80:5e:59:73:d2:09:21:
3e:6b:a3:fc:fb:2b:87:b1:b0:07:11:cf:9f:30:6b:4e:d8:88:
f9:ce:d0:dd:44:91:a1:49:de:b0:92:87:04:73:d5:08:58:ea:
05:fb:57:dd:a3:83:25:b7:c5:2c:93:5c:4f:e6:b0:d1:d5:67:
20:9a:c9:0b:a1:40:00:f5:0f:6c:af:da:8c:15:68:8d:30:46:
07:f2:9d:4f:bb:40:54:1e:4a:64:e2:ab:59:01:b5:59:fd:66:
e4:49:f1:12:46:fb:f9:fb:a5:5f:cb:91:f6:01:90:40:20:8b:
da:20:94:22:dc:99:50:17:a2:5f:28:af:9b:60:ae:2e:de:63:
cb:68:37:e3:1c:d5:14:62:4a:ec:05:83:b1:b3:37:a9:74:07:
8b:af:67:46:03:22:d6:d3:ac:49:97:35:60:8d:5e:01:6d:e3:
7c:1e:a7:d3:6b:d8:d5:2b:e5:b9:1a:2c:91:ec:59:4b:46:cf:
82:eb:96:a9:65:73:dc:dd:e9:fc:54:25:6e:57:1f:ee:d3:38:
6d:9f:5f:02:35:09:2e:be:9e:dd:0d:ff:ab:ba:65:56:c1:3f:
da:ac:20:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:45 2025 by rpki-client