Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
File: c0-mGwhlEDj6-B6_El7IRbGWGIM.mft (raw, json)
Hash identifier: j+WvzPAtlaNGdPQqyDUW2qL4y9+lnuZr3dEXpxdXcQM=
Subject key identifier: 6F:0B:C4:00:D3:A4:C4:37:2E:FA:66:2E:68:B4:FB:6A:4C:6F:99:C1
Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
Certificate issuer: /CN=734fa61b08651038faf81ebf125ec845b1961883
Certificate serial: 019A0D4B966EB201DAB8AD1C04D96FFF4C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
Manifest number: 07FA
Signing time: Wed 22 Oct 2025 19:00:48 +0000
Manifest this update: Wed 22 Oct 2025 19:00:48 +0000
Manifest next update: Thu 23 Oct 2025 19:00:48 +0000
Files and hashes: 1: Ef_L0S4-Bp45a4AhicIQvktRdz4.roa (hash: /8pqkPBMXDiyNztqWEzFfiF8Q4r48DyQf1X0AGe+tXU=)
2: KD8apQsVPJ4S-o7CJiMR0Jx51PQ.roa (hash: 8wRRkrMsyRGit65zp+ividrP3xMpOsDdKqxjsreQ+LE=)
3: c0-mGwhlEDj6-B6_El7IRbGWGIM.crl (hash: REoB/eooKPeHvaAt+8x0XkDD3BUYbC/0Yr3fM6yYGkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:4b:96:6e:b2:01:da:b8:ad:1c:04:d9:6f:ff:4c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883
Validity
Not Before: Oct 22 19:00:48 2025 GMT
Not After : Oct 23 19:00:48 2025 GMT
Subject: CN=6f0bc400d3a4c4372efa662e68b4fb6a4c6f99c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:18:04:5f:82:1c:6e:d5:49:b4:fb:c5:64:2e:
d9:f6:e3:d4:61:be:36:ad:8d:e7:8d:af:ed:28:d6:
3c:fa:5f:91:c3:93:8d:f3:e8:e9:60:9c:ec:4c:cb:
46:12:dc:f2:97:7a:e4:27:92:43:57:48:e5:ff:9c:
e3:68:37:48:a7:6d:3c:43:8b:b1:17:c3:4c:04:0c:
d8:fd:fa:6a:06:79:d0:dc:69:71:c3:39:79:93:95:
b7:49:23:d8:fb:52:51:c6:e3:6d:37:f7:1d:b8:a5:
30:f1:fb:dd:be:2b:6b:90:f4:0e:ee:a7:b3:97:11:
85:d2:e5:bf:a6:56:d2:3f:ab:8b:e9:fc:ca:30:5a:
c6:f8:b8:5f:3d:16:0b:26:45:c4:00:c3:15:0d:1b:
60:37:b7:39:7d:81:43:01:94:13:96:c5:a3:0a:d4:
94:82:fc:97:f8:3a:ef:43:a4:30:3a:70:a6:90:fe:
f7:e3:f4:a3:92:27:af:bf:8a:15:f1:6d:a1:4a:98:
78:af:03:81:1a:4f:10:ad:10:3c:5d:51:af:24:8f:
77:08:be:25:10:7c:5f:59:67:3e:ca:25:68:8f:04:
07:9e:88:4d:5a:eb:f7:b1:c9:1b:ff:e3:8d:24:b7:
99:20:de:f3:b2:3e:c9:b7:ae:1f:3c:c9:eb:1d:4b:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0B:C4:00:D3:A4:C4:37:2E:FA:66:2E:68:B4:FB:6A:4C:6F:99:C1
X509v3 Authority Key Identifier:
keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5c:3c:06:ef:21:0c:00:5c:49:9c:45:76:a2:0f:8e:eb:9f:
f8:f0:a3:e3:71:1e:f1:af:8f:54:49:e4:70:f1:77:fd:28:91:
dd:4b:92:3f:84:0d:6f:ff:c6:5a:a9:fd:ae:2a:60:65:93:56:
65:77:ef:95:38:ce:fb:ca:67:58:6f:3c:3e:a3:26:b9:d8:21:
60:f4:70:9f:8c:44:95:ac:47:89:3b:4f:98:98:50:79:25:62:
a5:79:f0:10:ce:2f:a0:bb:66:49:9d:8d:75:53:2a:3c:72:f0:
92:ae:4b:ed:79:f0:40:9b:79:a8:da:c8:8d:fa:dd:1c:c5:88:
94:65:78:ef:d0:b4:ed:f4:1c:5d:58:df:21:7a:98:01:3a:2e:
dd:c2:f1:a0:02:e0:e3:13:3d:0d:7f:fc:a2:43:ae:be:32:02:
52:b3:67:6c:40:60:92:93:93:78:23:4a:a3:86:f5:9a:37:4f:
e5:fc:95:fe:ca:44:66:46:16:28:2c:09:d8:91:fc:fc:11:b6:
3e:c3:aa:73:00:64:20:5e:e3:d9:6b:bd:59:98:2e:b0:98:83:
73:ae:a7:5d:23:c1:3b:5d:14:71:bd:f9:0f:80:3d:99:c0:09:
12:d7:cf:5f:22:8b:b0:ac:7d:5f:bd:49:d0:60:2b:8d:5d:cb:
27:01:18:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 23:03:44 2025 by rpki-client