Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
File: fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft (raw, json)
Hash identifier: hWz9h7HE5ZQ1ImcOCT0VKQmU6Pp9j0PvkgsbK4ONajE=
Subject key identifier: 43:4F:32:57:65:33:2B:13:51:AA:E0:92:A6:8F:1E:53:AA:34:1A:7E
Authority key identifier: 7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
Certificate issuer: /CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Certificate serial: 0199FF594B48CAB56E2B3E4BF030C987E1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
Manifest number: 03F0
Signing time: Mon 20 Oct 2025 02:01:05 +0000
Manifest this update: Mon 20 Oct 2025 02:01:05 +0000
Manifest next update: Tue 21 Oct 2025 02:01:05 +0000
Files and hashes: 1: fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl (hash: kgr7UcOjeGkHSfuHTab/jqLRKrA38WC+ctJeU1hhQBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:4b:48:ca:b5:6e:2b:3e:4b:f0:30:c9:87:e1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dc55ddda414240269f05bf8e8cd708135dd7de5
Validity
Not Before: Oct 20 02:01:05 2025 GMT
Not After : Oct 21 02:01:05 2025 GMT
Subject: CN=434f325765332b1351aae092a68f1e53aa341a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:cd:63:14:ea:3b:97:03:4e:f3:63:32:f3:
a8:86:85:6b:77:cc:33:37:3e:df:a2:28:90:42:9f:
10:65:b8:49:ac:1a:4d:88:5c:ca:ba:16:8d:95:bc:
1c:d6:fa:7d:59:82:2f:c4:67:50:2c:a3:0e:56:0f:
d5:e2:c2:45:51:18:b2:66:29:39:3c:30:33:4d:ca:
0b:ce:13:af:06:49:17:36:d8:64:a3:ae:75:7c:a0:
9a:08:c0:ff:2b:ed:7d:14:17:53:c2:ae:a9:0a:95:
84:ca:02:bf:a2:fa:1b:13:69:d1:7e:93:22:c6:f6:
fb:ea:d1:2e:11:31:b4:91:22:5f:29:62:b5:75:31:
3b:0e:36:67:0b:d2:0c:eb:e2:f0:f5:af:d4:ef:6e:
d3:c5:12:43:ce:06:98:eb:a6:e4:ca:92:9a:70:50:
18:29:27:3a:22:d2:dc:11:69:14:ca:8c:a9:ee:93:
63:25:71:ed:cc:d8:32:25:c0:fd:95:eb:0f:01:31:
6e:34:51:86:6a:d5:12:2a:37:46:c2:0d:6c:e4:d9:
13:18:e8:95:d2:36:d1:4d:b2:aa:85:64:c6:83:ea:
0e:3e:e1:0b:d1:cf:a0:3e:d7:26:be:9e:c9:8c:c1:
6b:52:b1:cd:7c:cc:ed:20:c6:02:61:08:a4:11:6e:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4F:32:57:65:33:2B:13:51:AA:E0:92:A6:8F:1E:53:AA:34:1A:7E
X509v3 Authority Key Identifier:
keyid:7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:19:6c:97:2a:c8:c6:c3:0f:69:94:36:2e:43:1e:e1:e9:7c:
c7:15:1c:a8:98:48:3a:8b:39:5d:eb:c6:e1:d8:4a:5d:c3:d5:
f3:f3:04:3c:5b:40:fd:a5:cf:9a:c9:01:68:bd:55:bd:74:0d:
b2:60:f9:ca:c6:4e:a4:bc:3e:90:e0:4c:2d:88:7a:8b:58:31:
17:42:75:1f:97:f9:65:e3:1a:5b:6f:7b:5f:cb:65:b3:16:7a:
5a:cc:2d:ab:81:c3:0b:ae:ac:8b:e0:da:05:3a:2a:20:34:21:
78:b5:53:d4:7a:d8:24:b0:c5:2e:0e:da:54:ef:9d:42:77:81:
5a:b6:4e:87:d2:29:ed:50:ef:12:2d:00:1f:11:be:d3:84:18:
36:6c:dc:41:75:2f:58:32:7c:17:32:95:9d:51:ee:e9:33:d1:
55:df:6d:36:0d:af:63:e2:5e:f0:4d:44:a9:a9:2c:cf:ba:84:
9e:69:41:0c:96:13:fb:b7:06:50:80:52:04:ac:b3:94:24:71:
43:3f:42:df:cb:da:5a:07:36:c3:06:9c:46:b0:5d:5e:45:c4:
87:34:7d:a7:02:ab:8c:c4:88:ef:f7:91:9e:d6:66:36:f8:4e:
50:74:a1:d6:cc:41:11:70:cb:03:8e:79:6b:28:7c:bc:3a:3b:
7b:19:d6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:55 2025 by rpki-client