Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
File: f6gWozONMnQc1P_49J3bLMg4_cU.mft (raw, json)
Hash identifier: 6f19yJ1Za147907VFKRy4bKxBkEoK1xVm8hQs8q0omI=
Subject key identifier: 01:B7:67:B4:63:1A:7D:9D:33:97:47:79:9E:DB:91:9D:4E:33:F4:A6
Authority key identifier: 7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5
Certificate issuer: /CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
Certificate serial: 019A39ED217A692A53817765F7736BD960CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
Manifest number: 0472
Signing time: Fri 31 Oct 2025 11:00:33 +0000
Manifest this update: Fri 31 Oct 2025 11:00:33 +0000
Manifest next update: Sat 01 Nov 2025 11:00:33 +0000
Files and hashes: 1: R0Tg1S6YqpnwSmmNGg5sv_IgptU.roa (hash: W7Vg4tcIuHbVrHthiRGSMMWZT9gGTwwdzQz+ZIBO3NQ=)
2: f6gWozONMnQc1P_49J3bLMg4_cU.crl (hash: Xl3dXd+pNzU31/MwKsxdL+auuAmWsma2LC7q6WimAgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:39:ed:21:7a:69:2a:53:81:77:65:f7:73:6b:d9:60:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5
Validity
Not Before: Oct 31 11:00:33 2025 GMT
Not After : Nov 1 11:00:33 2025 GMT
Subject: CN=01b767b4631a7d9d339747799edb919d4e33f4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:f3:68:fd:d1:c3:c0:04:10:18:f4:f3:d1:
2e:d6:42:51:1f:a9:9a:26:99:c9:f5:b5:57:c1:05:
78:1f:0d:67:74:6b:73:a0:57:e5:b3:19:da:b4:6e:
57:76:ee:23:f8:5a:67:ef:5c:e4:5a:07:59:67:14:
dc:45:f7:59:a4:ec:10:d8:8f:c1:64:6f:72:70:37:
d6:9b:8b:58:c3:95:f6:50:08:70:b1:76:ac:a3:24:
fc:6e:97:e1:91:fe:31:6c:27:0c:7f:25:55:ee:af:
b8:ba:66:47:e4:a8:1e:b7:ab:cd:bd:3b:d8:6a:e1:
16:00:a4:d8:a6:00:8d:0f:c8:39:cc:31:84:bf:01:
99:f7:5b:b3:93:ef:f4:2e:b2:49:40:ba:9f:c1:9a:
af:79:25:70:af:fb:e4:01:8b:79:84:28:11:6f:f5:
7b:97:df:57:15:7c:21:83:3f:4d:8c:a0:82:f0:ce:
2a:3e:96:6b:0a:b1:49:d1:a9:07:3f:6f:cc:6b:0c:
e1:da:17:45:bf:a0:61:32:e6:6c:5c:5f:90:e3:ed:
9b:f3:4c:83:e2:9f:fd:b3:fd:e6:2e:55:1d:bc:81:
49:91:03:65:3f:46:2c:bc:5c:6f:ba:ac:96:eb:12:
7f:15:b1:8d:be:24:4c:42:aa:ce:70:42:1a:e6:b0:
97:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B7:67:B4:63:1A:7D:9D:33:97:47:79:9E:DB:91:9D:4E:33:F4:A6
X509v3 Authority Key Identifier:
keyid:7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5b:1a:9e:47:a1:8c:46:48:41:a6:23:68:f1:c9:62:aa:aa:
0a:a0:4e:1f:45:cb:5f:c7:4f:77:1a:e7:40:43:fa:99:0b:7e:
3b:97:c6:97:e7:48:f8:de:dd:84:57:b5:9b:9a:39:96:73:b1:
4d:a6:bd:2c:e2:a4:62:1d:71:c8:b8:b0:ae:45:1e:70:ce:89:
a3:7e:0d:33:e2:cb:29:d2:7d:51:73:de:7a:84:86:0a:90:0d:
3e:94:b4:ce:82:4e:95:ef:16:06:6d:1f:1e:c3:ae:a1:74:7c:
51:51:d0:ad:f8:0f:62:bc:54:58:03:b3:d8:c5:77:8a:d6:47:
7e:a5:ab:ce:ce:57:74:f0:6b:08:74:e9:c3:32:d5:c9:8c:d6:
2b:ee:db:54:1e:e8:7e:89:75:6d:96:8f:3d:49:a0:3d:7c:54:
83:3d:d9:b0:11:45:bf:ff:e4:14:85:4b:61:9d:53:9b:08:01:
ca:d1:8e:0a:eb:f3:b1:13:70:db:2a:b2:d4:0c:1c:06:c9:53:
6c:00:da:3d:bc:44:fa:48:be:89:03:09:fc:0f:84:66:2c:61:
1f:3e:c7:bc:ce:60:07:7c:a9:b7:52:b9:b5:4e:d3:1b:2c:cc:
37:a8:73:63:12:3f:9d:fe:ff:88:92:41:74:64:ab:0d:14:84:
0e:6c:d1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 18:49:57 2025 by rpki-client