Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: WoJ+NdoRnX16mCi+T1BdV4grnC0knruwWQvNQXAbFv4=
Subject key identifier: D6:D0:70:BF:65:C3:CC:76:2C:9A:A6:44:CC:06:88:96:B4:2D:D2:21
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 019A1B7519E1D5AC8FD3A8AB8A51E485D31F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 16F7
Signing time: Sat 25 Oct 2025 13:00:50 +0000
Manifest this update: Sat 25 Oct 2025 13:00:50 +0000
Manifest next update: Sun 26 Oct 2025 13:00:50 +0000
Files and hashes: 1: FhiaygjAF_1CRSj0CN-vLLhuasg.roa (hash: SeFF3k4+NSW9uVrbVWJXjtkwiHNZBfGKLzdPBZ23zYE=)
2: REJSEHBqBmUbahN6hVMSYy6LHI0.roa (hash: M3m09unuab4iohEbcy0njc+8m8Kysxgeqz3sy5tQvW4=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: UOO64Ujw4GkSv/ZjU4gYAEEovW8G1Wzon9TTTUjIg/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:75:19:e1:d5:ac:8f:d3:a8:ab:8a:51:e4:85:d3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Oct 25 13:00:50 2025 GMT
Not After : Oct 26 13:00:50 2025 GMT
Subject: CN=d6d070bf65c3cc762c9aa644cc068896b42dd221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:68:08:a1:ae:40:6c:83:b4:92:7f:0b:e6:f2:
f5:95:be:46:e3:bb:01:03:1e:7c:73:ca:b0:90:9b:
e0:52:cf:19:ab:3b:dc:bf:69:76:a9:d0:f7:9f:87:
f8:b7:3f:39:3d:b3:ad:8f:64:0a:77:24:ea:e8:03:
7c:65:20:ff:82:a3:65:91:89:f6:4e:41:9d:38:e5:
38:fb:5e:c7:18:62:68:6f:e1:0a:ac:1f:d3:50:f9:
80:f1:2b:f6:e0:35:e9:af:49:0b:7e:34:13:ab:9d:
ec:64:8e:db:80:48:1a:4e:d6:76:0c:d6:cc:a3:62:
1c:e7:55:65:08:c4:43:23:f5:50:5b:6d:91:5c:db:
6e:be:ba:7b:90:06:11:5b:22:4c:42:de:87:9a:dc:
47:f0:fc:64:fe:75:71:e7:6f:78:c0:15:16:9a:2e:
d6:e5:8c:ee:0f:17:d3:c1:ab:27:c1:d2:90:2f:fd:
b4:cb:6b:bd:39:2c:43:63:14:14:37:b1:19:cb:1b:
a1:ba:2e:df:ee:25:3f:b4:82:45:fa:cf:18:fc:37:
e5:1f:4d:98:75:21:bf:ae:b9:2c:2b:de:22:69:ce:
12:ef:50:72:3f:df:70:30:14:a7:24:41:0d:f9:3a:
58:63:95:72:e3:bd:54:a5:8d:21:0f:a6:bc:43:9e:
a0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D0:70:BF:65:C3:CC:76:2C:9A:A6:44:CC:06:88:96:B4:2D:D2:21
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ae:5c:01:28:c5:20:48:ea:7e:b8:dc:67:28:86:9b:27:e2:
02:f8:bc:10:74:7b:67:0f:76:5d:30:ea:34:3b:87:a3:83:a3:
44:f7:6d:5b:b8:3c:10:98:78:09:f5:36:86:dc:b7:78:db:21:
98:91:14:48:d7:4d:08:f6:cf:dc:c6:ae:96:5e:f0:4f:20:6a:
2a:6e:e1:47:3f:ca:1e:bc:c9:c6:a3:3f:e1:c4:bf:3e:f8:41:
9f:13:96:0b:38:c4:5f:7d:be:6e:ef:a7:52:a7:9f:5a:1d:41:
f4:f9:25:c6:2a:23:db:f7:60:1e:65:41:7c:85:ea:5e:be:bf:
64:f9:b8:3a:ab:9c:1b:68:93:7d:66:6e:67:8b:64:b3:54:9b:
05:8a:b3:61:cf:ce:f4:68:d9:83:47:ab:46:44:32:06:56:18:
82:53:fe:7d:53:59:2c:be:59:c1:d4:b5:8d:3c:a6:21:ff:d7:
b1:d3:8f:ae:fe:0a:67:70:b1:88:82:f8:29:63:31:6c:b2:90:
f7:96:5a:29:46:67:2b:0d:eb:98:d0:d3:16:07:88:de:0d:98:
db:13:86:c9:87:f3:f1:60:c0:46:fd:a5:81:94:37:55:4e:61:
d6:df:d9:ad:e0:70:a7:db:88:08:0a:5f:7a:62:80:42:76:e6:
81:97:a5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:04:29 2025 by rpki-client