Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
File: exPgVmn1VmYr7FZk4QFln5Zsgmo.mft (raw, json)
Hash identifier: SGFOvhHRU+ImHIpm12Vh70aCiek8xeyfNaWvZ4ggBwo=
Subject key identifier: 59:C5:55:A6:5E:29:82:1E:F8:A3:10:89:03:10:14:E9:AB:91:42:29
Authority key identifier: 7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
Certificate issuer: /CN=7b13e05669f556662bec5664e101659f966c826a
Certificate serial: 019A21E51F8D511C8E099A2976200D282F06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
Manifest number: 0DD6
Signing time: Sun 26 Oct 2025 19:00:55 +0000
Manifest this update: Sun 26 Oct 2025 19:00:55 +0000
Manifest next update: Mon 27 Oct 2025 19:00:55 +0000
Files and hashes: 1: HyKdTkKV5STn1J4Rxe8JxbMCpv4.roa (hash: 6If9g5ZI4fy1JxA85rEnX+2Sovu9Js7JocSs132zGS0=)
2: exPgVmn1VmYr7FZk4QFln5Zsgmo.crl (hash: XII6H7GljFllWec59ETA2kHDzoP26y4Owa9ue2twLgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e5:1f:8d:51:1c:8e:09:9a:29:76:20:0d:28:2f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b13e05669f556662bec5664e101659f966c826a
Validity
Not Before: Oct 26 19:00:55 2025 GMT
Not After : Oct 27 19:00:55 2025 GMT
Subject: CN=59c555a65e29821ef8a31089031014e9ab914229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2f:2f:92:16:db:6f:5e:67:59:7d:b0:f1:f4:
56:ce:b2:b0:0f:cd:ae:23:de:08:f5:66:13:4c:c0:
df:07:6d:e8:ad:d8:c4:bd:c8:7d:b6:ee:14:de:98:
41:91:ef:0d:63:80:69:e4:db:eb:c2:d3:66:8e:86:
5c:7d:c8:e3:02:48:b2:9d:f6:c7:56:a9:37:25:c6:
6a:5a:6e:5d:f3:94:69:eb:21:40:44:31:b1:e8:a4:
fa:e9:0e:31:eb:7a:55:6d:68:ff:f4:9c:7c:8c:a7:
30:83:91:4a:19:f4:0a:f5:12:2d:5c:cd:4a:30:34:
52:77:1f:ef:79:bd:49:f6:6e:f1:2c:b8:d7:ff:e4:
0f:be:9d:25:fd:ec:81:4c:d6:34:53:fe:99:3e:2c:
1f:42:9b:ac:f1:0f:18:19:8f:7e:59:9a:2b:2e:ef:
d5:6d:8c:58:0f:d3:9f:a0:2f:f0:62:ce:55:c2:1d:
f5:74:b6:c6:40:ec:f4:3d:ba:a7:89:40:a3:d3:02:
6f:df:ad:65:ce:14:d6:5f:dd:df:75:68:a0:b9:fa:
59:64:17:23:4b:65:9d:99:aa:10:96:aa:84:83:85:
ce:bc:3d:cb:d3:ae:d7:58:10:a9:f7:f4:d6:cf:a4:
31:5c:e5:54:74:7c:e5:04:56:cc:83:21:3c:29:99:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C5:55:A6:5E:29:82:1E:F8:A3:10:89:03:10:14:E9:AB:91:42:29
X509v3 Authority Key Identifier:
keyid:7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2d:b9:4b:98:7d:7b:99:90:ea:2e:7f:1c:12:68:f2:79:1b:
db:9e:89:bc:47:ac:88:6e:01:f1:99:21:24:e4:95:94:49:e6:
b8:b3:c6:85:82:be:3f:28:a0:d4:59:1f:44:01:a7:ab:70:db:
c7:7e:da:67:14:5c:2c:50:30:a9:83:f5:a8:8a:83:00:01:d9:
fe:9c:c3:30:5e:e7:64:c6:32:f5:26:8c:77:c0:a5:25:78:f8:
e9:a7:5b:fb:1c:33:89:d3:a7:20:8d:34:d8:a2:f9:b2:ca:58:
45:a7:42:c5:14:07:ea:c4:33:73:7b:f9:5b:6d:79:87:7e:0b:
6c:9a:62:c5:f6:da:96:c9:cb:90:bd:c5:bf:44:18:22:1e:be:
c3:d8:32:03:d1:42:26:00:ee:10:33:0d:ce:f4:5f:5a:b8:9c:
2f:d1:81:4f:49:24:b8:0f:d0:ae:eb:6c:67:2c:a1:e3:f4:67:
fd:07:7e:2d:9d:1a:a8:20:34:3b:1b:f6:69:39:26:53:9e:42:
59:ba:91:24:c0:87:3d:92:67:e9:0c:02:89:19:56:e1:6a:e3:
7f:b3:4d:26:55:a2:eb:46:58:0a:7d:20:cc:b3:06:d4:e8:66:
3c:0b:1d:20:0c:34:64:35:e9:c0:3c:1f:4e:cc:1d:40:f1:33:
42:aa:48:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:18:27 2025 by rpki-client