Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
File: fG9Mjzo3f0bFUiAJZ4841hVxxso.mft (raw, json)
Hash identifier: RAh9mtqEE+41TUbal60hOGIBRVeDpA0HStdiZispTdA=
Subject key identifier: 76:B6:6F:22:B1:E0:BF:57:48:9E:E9:47:DC:FA:CA:40:81:A3:2B:80
Authority key identifier: 7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
Certificate issuer: /CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Certificate serial: 019A71132DB75975DE541522CD3CBB1F2A2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
Manifest number: 0B95
Signing time: Tue 11 Nov 2025 04:01:13 +0000
Manifest this update: Tue 11 Nov 2025 04:01:13 +0000
Manifest next update: Wed 12 Nov 2025 04:01:13 +0000
Files and hashes: 1: B7oKCLtj5wVT7Rx672od7NSTVbM.roa (hash: zBd0U1lEA6sR+ArBNpdCg/lk4ok0wNXK1hGjWgT7oxA=)
2: fG9Mjzo3f0bFUiAJZ4841hVxxso.crl (hash: Ju71uQs5d1C/ZlsE3mTj4B4Gr4HZwFkHB5z3OhfqeSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:2d:b7:59:75:de:54:15:22:cd:3c:bb:1f:2a:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca
Validity
Not Before: Nov 11 04:01:13 2025 GMT
Not After : Nov 12 04:01:13 2025 GMT
Subject: CN=76b66f22b1e0bf57489ee947dcfaca4081a32b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:54:e3:6c:f6:bb:aa:32:7f:0c:bf:c7:8f:09:
9e:ac:25:f4:cd:14:32:5f:35:25:61:68:50:05:79:
19:18:a7:eb:6f:95:a3:68:6c:e9:cc:f7:5b:26:dc:
da:dd:a3:56:a0:51:b8:66:1f:b1:55:98:df:3c:21:
19:0d:f0:7f:4d:22:5c:76:44:7a:ad:84:74:01:0a:
9a:b6:4d:a8:29:2b:0a:33:c8:4b:b6:8f:c3:02:fb:
f2:9f:9d:4a:7e:28:ce:ae:ea:cb:72:ae:88:29:15:
8b:92:49:dd:db:57:b5:87:b4:ac:c2:69:40:f6:5c:
a3:24:b7:23:f0:de:a4:ed:ae:18:92:87:43:e4:8b:
58:ea:f2:4c:a5:1e:de:cf:46:c4:a1:71:f2:6c:4c:
0c:0b:ae:93:c7:a6:43:07:f2:ed:1d:54:3e:02:b5:
f3:29:b6:5d:5e:97:d6:05:b1:56:6e:6d:a9:d5:b7:
90:fd:71:10:6f:76:6f:dd:4f:f1:5d:b1:ae:3f:f0:
7e:a6:a6:ac:73:98:00:da:a0:2d:48:9f:8b:c6:ee:
f8:03:00:b1:90:1f:81:7c:ea:59:d2:84:56:39:d9:
4e:66:04:79:b1:e5:9d:63:8d:28:e8:c6:6c:e7:fa:
3c:26:92:6b:2b:d5:2e:89:ac:5f:81:9a:a8:bc:9a:
f8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B6:6F:22:B1:E0:BF:57:48:9E:E9:47:DC:FA:CA:40:81:A3:2B:80
X509v3 Authority Key Identifier:
keyid:7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:43:74:a3:26:fd:50:7f:e0:8c:47:a1:dd:3c:18:da:a8:3b:
cc:dd:d5:35:e4:e7:59:33:76:d1:9b:16:51:9a:f5:d6:d8:30:
f0:4d:17:29:5b:3b:87:30:a2:f9:5d:d4:1f:3b:70:d1:1e:91:
f7:74:50:6e:2f:24:48:d7:db:7d:79:51:35:6e:9f:61:29:4e:
65:98:17:6d:41:83:a2:ef:73:62:fc:97:78:c7:76:26:fd:99:
a4:06:d4:a1:6c:9a:1b:fc:a0:85:af:9f:36:a0:0d:09:39:dd:
a4:3a:20:e9:92:21:f9:74:c1:64:79:3e:ed:b2:2e:23:f9:45:
ad:23:11:6a:e0:61:d3:94:bb:ad:15:bc:a7:d7:00:9d:82:f2:
0f:76:28:bf:9d:0f:7f:72:39:ef:4a:a7:74:2e:a6:70:6d:6f:
64:ff:e9:36:f4:49:23:e3:cf:c9:b6:a8:b0:7c:f3:01:9c:35:
22:32:2d:9b:2c:21:ba:6a:89:62:f2:b4:c8:ae:29:fb:ec:45:
36:4d:65:fb:cf:91:1f:e5:04:d1:1e:ea:b8:58:6a:51:50:d5:
ab:8b:85:fb:8d:f6:14:9f:cc:84:c2:db:c7:f9:aa:f1:2e:dc:
0a:3f:a6:d8:56:10:d7:cc:11:05:d4:10:a1:8f:08:47:03:01:
3d:02:76:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:12 2025 by rpki-client