Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: qCG/n6N/BaMQYbQdLy0+CxX5YX3vPPOf8qbf1oS6cVg=
Subject key identifier: 79:36:9F:27:7C:B1:A8:5C:05:81:4C:3E:EE:24:24:83:46:39:E8:AF
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 019A5375DDF416C9F3DE37559E8E858619A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 1714
Signing time: Wed 05 Nov 2025 10:00:24 +0000
Manifest this update: Wed 05 Nov 2025 10:00:24 +0000
Manifest next update: Thu 06 Nov 2025 10:00:24 +0000
Files and hashes: 1: FhiaygjAF_1CRSj0CN-vLLhuasg.roa (hash: SeFF3k4+NSW9uVrbVWJXjtkwiHNZBfGKLzdPBZ23zYE=)
2: REJSEHBqBmUbahN6hVMSYy6LHI0.roa (hash: M3m09unuab4iohEbcy0njc+8m8Kysxgeqz3sy5tQvW4=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: GVqZ+3af6/4HxfoNiejiMXrg1xAJbB/9GnnDKyjZ8yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:dd:f4:16:c9:f3:de:37:55:9e:8e:85:86:19:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Nov 5 10:00:24 2025 GMT
Not After : Nov 6 10:00:24 2025 GMT
Subject: CN=79369f277cb1a85c05814c3eee2424834639e8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c6:5e:ed:52:38:8d:91:7b:11:e1:c4:0e:15:
20:3a:b2:d3:e7:d8:b8:2d:b8:be:4a:ed:f5:c7:13:
68:e2:dc:53:ba:bb:e9:c1:9a:af:67:de:30:d5:41:
7c:9c:5d:cd:81:a8:a3:0e:5d:83:e9:d4:3f:23:92:
e9:06:c7:c5:e9:e0:b8:be:31:b9:13:98:2d:97:64:
77:7e:35:db:97:6c:ea:16:ef:e3:78:0b:5f:2f:e1:
bc:c1:0f:fb:b3:84:15:19:02:47:de:6b:6f:be:da:
8e:4d:ee:9e:d0:7e:4d:52:1f:21:4c:c0:4a:54:5a:
f6:dc:16:32:55:27:ca:22:7d:22:c1:cd:40:7f:d1:
db:0e:db:07:74:be:c9:b1:05:7b:43:87:d1:a3:72:
a7:5a:a1:52:0d:6d:00:a3:80:b6:92:e7:4f:42:3d:
d9:cf:72:0f:82:17:1f:50:68:5a:4f:0f:46:d7:3c:
81:70:89:b7:75:a1:26:fb:c7:49:cc:b7:de:f2:37:
28:e8:33:76:eb:48:20:f4:dd:77:bb:55:4a:23:06:
95:a1:2a:d8:a5:f3:d9:3a:95:a8:49:f2:fc:3e:02:
bc:5c:22:90:d6:26:97:37:2a:d7:f0:d5:d1:0a:f1:
53:57:b8:e1:42:96:83:ba:78:9c:da:0d:51:76:22:
50:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:36:9F:27:7C:B1:A8:5C:05:81:4C:3E:EE:24:24:83:46:39:E8:AF
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e5:8f:03:ba:a7:ee:30:d5:07:1a:95:b0:7e:f7:18:af:1b:
58:a4:c2:ec:b2:10:00:44:41:ab:4e:c2:0b:d6:1b:52:fa:f2:
39:ae:b8:ea:e7:57:a9:fb:19:37:c0:3a:5d:bb:99:13:d5:c1:
f6:05:63:af:c0:fe:37:4e:a9:c7:b6:ef:7c:3c:5d:2c:63:78:
8f:7e:f0:34:a9:72:b7:ff:5c:28:bd:0b:91:b5:87:d6:6b:71:
25:ed:b9:a2:36:cf:a1:bf:61:7a:49:41:e4:4d:80:0e:f0:22:
da:a5:f6:22:d6:b2:2d:1e:a1:c3:09:77:08:74:60:ba:5f:2a:
9f:71:df:ae:ea:a9:f0:7a:c6:1f:31:44:86:a6:c1:1d:9f:e8:
e6:72:f7:ae:29:57:70:64:91:b9:4e:c1:32:74:bc:5f:99:01:
cc:13:b6:1e:5c:15:e1:95:b1:ae:66:94:16:4f:f0:c7:64:1b:
5c:0e:8c:54:f0:bf:d6:37:b6:df:d6:14:ce:ea:13:62:d0:8b:
17:4f:a7:57:87:6b:86:12:8d:72:97:16:d8:6c:3d:59:e3:03:
cf:35:91:2e:17:a4:30:f5:90:95:91:10:13:39:e2:d5:30:19:
6e:28:7c:a0:7d:e8:a1:aa:6b:f7:9a:c3:97:a4:67:0d:9b:56:
71:21:df:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:20:38 2025 by rpki-client