Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
File: fG9Mjzo3f0bFUiAJZ4841hVxxso.mft (raw, json)
Hash identifier: x4EJ+7E3z+Hi1kz/FddFVtJQbCZlRtS9dbge7Xm83us=
Subject key identifier: 79:57:4F:F9:56:5B:56:AB:45:E0:7C:23:84:0A:48:B7:24:F3:43:60
Authority key identifier: 7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
Certificate issuer: /CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Certificate serial: 019A541AF8896158E84181CCD5276478BB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
Manifest number: 0B86
Signing time: Wed 05 Nov 2025 13:00:44 +0000
Manifest this update: Wed 05 Nov 2025 13:00:44 +0000
Manifest next update: Thu 06 Nov 2025 13:00:44 +0000
Files and hashes: 1: B7oKCLtj5wVT7Rx672od7NSTVbM.roa (hash: zBd0U1lEA6sR+ArBNpdCg/lk4ok0wNXK1hGjWgT7oxA=)
2: fG9Mjzo3f0bFUiAJZ4841hVxxso.crl (hash: eKZer6eAo1vFk9hXAbSl153vUiF13gcxhq/+qLwr7oQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:f8:89:61:58:e8:41:81:cc:d5:27:64:78:bb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Validity
Not Before: Nov 5 13:00:44 2025 GMT
Not After : Nov 6 13:00:44 2025 GMT
Subject: CN=79574ff9565b56ab45e07c23840a48b724f34360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0c:11:5e:4c:54:3d:59:96:51:1f:b4:4e:01:
04:e5:b4:95:df:b5:68:8d:50:d4:72:bf:7f:be:a3:
df:b0:d8:06:ab:5b:19:d5:4e:c8:0e:c9:4e:d8:16:
c2:57:9f:25:49:51:4a:07:69:34:fe:1b:93:e0:40:
8b:a0:76:38:85:18:7d:62:0a:81:14:d0:d4:cd:0e:
17:cc:1b:0d:59:92:d8:d4:81:d3:07:f9:7c:88:f8:
fa:67:f2:fd:44:4b:96:cc:b0:7a:4b:10:30:87:c0:
ae:64:28:dc:d8:1f:1a:fa:bd:65:c6:06:39:59:39:
38:f5:d0:51:90:c5:38:a2:33:da:95:38:c1:a0:1e:
44:8b:48:d4:50:d9:8a:89:0c:ee:74:22:60:a3:2a:
06:91:7b:fd:04:83:db:e5:5f:0d:a4:6e:41:0d:a2:
25:14:fe:37:b1:a0:8c:1c:a6:74:3c:b1:1d:d8:c4:
50:7e:20:f8:b8:96:d9:65:59:cf:b1:3a:b4:2e:27:
74:29:56:b4:a1:2c:92:0b:ba:85:cc:aa:ad:9c:c2:
e4:d5:ca:3d:8c:95:09:82:c1:86:7a:50:6c:25:df:
29:c8:bf:fa:52:c4:87:e6:9b:84:e5:56:57:92:4f:
76:78:15:73:1e:e9:eb:f8:af:09:bb:f6:d1:ff:af:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:57:4F:F9:56:5B:56:AB:45:E0:7C:23:84:0A:48:B7:24:F3:43:60
X509v3 Authority Key Identifier:
keyid:7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:da:b5:f3:d2:b3:77:02:aa:16:1b:f7:4b:4f:9b:9f:2a:85:
4e:3e:4f:9a:8f:d6:12:91:52:e1:30:c4:ee:b5:fa:2c:07:dc:
37:e0:a0:8f:8d:a5:31:68:c8:71:62:1d:fd:18:b2:f1:fb:a3:
7c:bd:f7:9f:7c:d4:79:cc:e8:5c:29:45:77:e7:dd:90:24:f2:
bd:cd:3f:0c:d8:7d:de:d8:a8:8c:7c:ea:ca:7e:cc:d6:30:21:
87:94:88:26:5c:3f:3f:e8:70:91:49:29:b3:f4:89:09:d1:1e:
82:09:a3:ce:ac:f6:5d:5a:b8:86:cc:99:38:91:c2:ba:d2:92:
90:92:63:19:3e:a1:1d:f8:bc:ec:90:c5:16:9f:fb:b5:82:1e:
45:3c:d3:53:31:68:d4:3b:f5:76:60:f9:c1:c9:68:5b:1e:1e:
ea:b5:a4:56:0b:b4:79:e6:d9:11:58:aa:14:55:81:d2:3a:2f:
5f:61:b9:84:59:13:a6:23:a1:61:d1:1e:a9:26:a2:d3:b7:d2:
b8:bf:a0:81:86:a6:bf:1a:0a:41:d2:1e:ca:b8:36:7e:38:4e:
6d:a5:54:1a:e5:0f:34:53:5b:e5:ac:7e:09:74:5d:7c:d7:eb:
25:ed:84:98:ab:29:72:4f:a4:22:cb:95:26:f4:64:f2:a5:3d:
80:3d:6b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:45:12 2025 by rpki-client