Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
File: fG3HOVgVrwRQSPTOORDQQAj_Onw.mft (raw, json)
Hash identifier: eZ8xpexUdBPrMfSV+8Vu1odczPDkIm0vI9dyz2sFPLU=
Subject key identifier: 46:1B:A9:6C:B0:A2:BC:0C:81:3B:F6:B6:D4:BC:2F:E8:12:2F:3C:18
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 019A29D4EECDB4207CC93A793A95EF4D0532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
Manifest number: 13DA
Signing time: Tue 28 Oct 2025 08:00:11 +0000
Manifest this update: Tue 28 Oct 2025 08:00:11 +0000
Manifest next update: Wed 29 Oct 2025 08:00:11 +0000
Files and hashes: 1: WWnUjL9xa5N7RsAiSnLThhNhQII.roa (hash: A7PEzwDFjxl/k3orxXArS56nuTh+qfj6pNUO4Y3XuLQ=)
2: fG3HOVgVrwRQSPTOORDQQAj_Onw.crl (hash: A8pOm05B/8yH06mPvsJarLen8sgqvvm1nKdrnDSAEJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:d4:ee:cd:b4:20:7c:c9:3a:79:3a:95:ef:4d:05:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: Oct 28 08:00:11 2025 GMT
Not After : Oct 29 08:00:11 2025 GMT
Subject: CN=461ba96cb0a2bc0c813bf6b6d4bc2fe8122f3c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:5e:93:7d:76:9e:61:8a:de:06:35:46:1b:
95:c0:15:c4:65:28:c5:fd:81:f2:db:66:01:e8:c4:
dd:93:50:b0:38:80:52:ab:59:30:5e:88:32:a6:94:
cb:e3:71:d0:b0:96:f8:25:80:6b:ac:25:cb:8a:b4:
84:23:cd:37:ab:9e:8a:3f:d9:1a:38:b9:54:2e:a3:
ca:ce:67:d8:31:d5:e5:04:1e:42:7b:58:56:32:41:
b0:28:43:5a:ac:15:37:67:9c:eb:e6:82:c8:f5:86:
a9:08:75:bd:3e:d6:07:f8:d9:cc:35:bb:98:47:0b:
f7:a3:8d:88:6b:86:55:50:4d:7d:d9:ad:c4:57:48:
e0:7f:aa:fb:50:e5:3a:75:c7:dc:71:be:a2:a2:c8:
c5:45:64:4e:c5:c5:d8:df:22:2b:69:c1:4a:1f:92:
00:9d:f7:e4:dd:cc:c6:fa:0b:ad:fd:d8:76:34:e3:
c6:58:27:e9:c6:51:c8:fb:4a:71:62:47:e0:e2:33:
54:aa:84:ef:e8:d6:d5:a5:b4:3b:ca:46:d5:3f:5b:
07:b3:dd:1d:69:16:c3:1f:bf:dc:66:d5:fb:6d:31:
7b:84:1d:83:bb:a4:c8:58:be:91:e1:ad:2b:82:95:
26:9d:e3:7f:ca:f4:fe:5e:a0:6a:b8:a0:11:3e:00:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1B:A9:6C:B0:A2:BC:0C:81:3B:F6:B6:D4:BC:2F:E8:12:2F:3C:18
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9c:09:30:cf:71:4d:22:c8:75:38:93:b9:7c:fd:c4:7d:ac:
08:8e:db:59:c1:95:e9:f6:4b:26:cb:26:2f:d2:e3:ac:b9:64:
c7:39:09:66:11:a6:51:68:5c:69:42:4d:36:4c:33:5b:20:b5:
39:69:15:bf:89:fa:7f:c2:b5:5f:aa:37:86:aa:05:af:29:86:
ac:4f:8c:de:85:6e:c7:c7:9f:c8:0b:64:70:13:1e:6e:e1:b3:
41:27:7f:44:e1:90:60:9e:bf:76:68:e8:65:f7:2e:a9:88:f4:
ca:2c:02:d3:3b:d7:27:54:fe:92:91:c4:4b:53:bb:cd:17:16:
b1:ca:b1:f7:82:41:75:f5:2b:44:89:d1:e3:b4:48:16:15:a3:
2a:31:0c:f7:76:26:cd:a8:38:ec:b0:73:5c:ca:b6:96:cd:8a:
31:97:89:fa:e1:5f:af:9a:11:91:d0:3b:3d:a7:27:ba:9a:24:
51:7f:d9:81:28:bb:e5:2e:13:a1:d5:fc:40:41:7e:0e:71:62:
bf:7d:1e:aa:b2:05:c6:21:8c:33:49:73:cb:41:2a:fa:31:84:
ea:c4:ae:78:08:4a:1e:71:2f:93:fe:56:e2:ce:2a:66:40:99:
cc:d8:09:25:2e:0a:45:c9:1d:a2:1c:d0:6d:77:0a:32:67:00:
3d:8b:42:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:46:43 2025 by rpki-client