Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
File: rCGhE9G6AdEH_feRMIwKUfPQbdo.mft (raw, json)
Hash identifier: uGcrIrVGnBF4b008Q+A9DHB+Ww95+z1NSYGa6+G+xts=
Subject key identifier: B4:07:09:F3:D0:00:13:6A:42:19:1E:13:11:B3:1A:B2:2C:A4:68:DB
Authority key identifier: AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
Certificate issuer: /CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Certificate serial: 019A4F995FB89AA9172A017A23EC056F2B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
Manifest number: 05F6
Signing time: Tue 04 Nov 2025 16:00:42 +0000
Manifest this update: Tue 04 Nov 2025 16:00:42 +0000
Manifest next update: Wed 05 Nov 2025 16:00:42 +0000
Files and hashes: 1: 0Yi_JnLw94TXhrC5nYi7nz8aE9Q.roa (hash: PcfAm6zv9EFMWgISV3l4XmKFXD7W1Vvh/DKcICx2Ck4=)
2: rCGhE9G6AdEH_feRMIwKUfPQbdo.crl (hash: 6NvnE9PhCGbwkxbaSHl4K2O8Z8h5g3U3Eo7Dzmi4bzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:5f:b8:9a:a9:17:2a:01:7a:23:ec:05:6f:2b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac21a113d1ba01d107fdf791308c0a51f3d06dda
Validity
Not Before: Nov 4 16:00:42 2025 GMT
Not After : Nov 5 16:00:42 2025 GMT
Subject: CN=b40709f3d000136a42191e1311b31ab22ca468db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:78:10:4d:57:07:dd:2c:0a:a9:a4:0e:9b:ac:
a9:e3:02:52:74:e3:16:d4:d7:85:c5:01:a3:6b:26:
1c:a3:d4:a9:f1:b1:ab:59:eb:87:e1:bc:a6:ef:ea:
0b:82:0d:2b:c2:fb:4d:de:ea:cf:25:58:c7:4e:95:
a8:1e:de:08:e9:44:fc:7b:47:4c:dc:92:ce:d3:e3:
e5:a2:85:93:b9:a0:fc:f7:64:13:a0:ca:f5:a1:84:
8a:95:ac:d8:7e:5a:40:b1:6c:54:01:0f:7d:fd:b1:
6c:72:e6:ba:9a:bc:f2:a0:3c:3b:d9:31:5f:e8:6a:
c1:32:42:01:6d:29:d6:0a:fe:71:56:9f:c6:5c:26:
7a:a4:67:f7:dc:e9:16:7e:cd:d7:2d:8f:90:c6:7b:
2e:a8:15:9d:57:e1:62:be:85:53:0b:5b:c1:7d:b6:
ab:89:75:81:e9:10:1a:53:2f:a0:29:3f:d6:6a:97:
3a:be:67:a8:7a:e1:9f:d4:f0:0a:14:de:6f:60:42:
60:99:0d:74:59:7b:76:fc:a8:46:66:1e:18:38:ca:
77:d4:37:7a:30:de:0f:c9:7a:4b:5b:49:0d:00:c1:
df:46:b1:b9:a6:c6:81:d1:63:cc:a0:78:88:28:db:
68:71:fd:21:86:2a:e9:51:53:86:f5:e7:cc:61:cd:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:07:09:F3:D0:00:13:6A:42:19:1E:13:11:B3:1A:B2:2C:A4:68:DB
X509v3 Authority Key Identifier:
keyid:AC:21:A1:13:D1:BA:01:D1:07:FD:F7:91:30:8C:0A:51:F3:D0:6D:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCGhE9G6AdEH_feRMIwKUfPQbdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5893f7-b4f1-4961-9426-fd73b80833b7/1/rCGhE9G6AdEH_feRMIwKUfPQbdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:15:3a:a0:45:7d:82:57:80:98:56:cb:6f:17:3a:dd:41:72:
59:e7:67:ee:e7:f8:09:6e:58:08:38:85:8c:b5:43:99:d4:ae:
4f:29:65:af:e3:26:bc:ff:6e:e4:7d:94:18:86:c7:95:25:f2:
c6:ea:37:d0:f0:77:b4:8e:b4:c9:e1:4d:ac:64:33:5d:64:f1:
c7:7c:20:59:a7:5b:60:3d:25:75:58:6f:e8:e5:de:a9:16:07:
4f:89:76:b2:e5:34:ed:9c:db:26:a7:56:d5:07:17:da:3e:0e:
7f:cc:9b:9d:7a:32:4d:56:f3:de:89:7b:bf:16:76:2a:ed:f2:
80:50:4a:ce:52:48:b5:d4:a2:89:d5:fc:27:58:23:e1:20:12:
db:d3:cc:23:1c:e4:5c:53:d0:97:5f:2e:ce:a1:8a:58:2f:b2:
cf:51:fc:07:c4:7a:85:f0:9f:97:47:db:f2:7c:af:a5:7e:d2:
ab:e3:a9:37:1f:1e:d8:8d:b6:f2:d4:1d:dc:8a:72:1e:11:95:
91:17:45:d4:3b:86:34:88:0e:18:46:4f:5f:75:b3:12:5a:23:
b5:b6:3b:01:51:53:dd:5b:38:70:18:e9:30:44:52:6e:50:a9:
f6:9d:c5:3c:f6:c5:6b:52:2d:4b:b4:a7:74:94:f0:e4:c8:5f:
fa:cb:77:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:11 2025 by rpki-client