Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
File: fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft (raw, json)
Hash identifier: k6sEgBcIDd7Vrk2342Kc4whvSluSoo1viXXOrO7/SPs=
Subject key identifier: 42:53:85:28:93:0C:88:E5:8D:77:AF:06:A4:20:35:0C:74:4D:B7:2C
Authority key identifier: 7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7
Certificate issuer: /CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7
Certificate serial: 019A28559CC0CD1F220B4A5A1B30239D771D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
Manifest number: 1701
Signing time: Tue 28 Oct 2025 01:01:30 +0000
Manifest this update: Tue 28 Oct 2025 01:01:30 +0000
Manifest next update: Wed 29 Oct 2025 01:01:30 +0000
Files and hashes: 1: OpPpxUjjJRbQSkZ5yK3fu3iEhS4.roa (hash: APIMRZhycs7ZGgKvvm0YHWiJuJg7Ia1Dh+8uoSTLKNA=)
2: fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl (hash: 08p5dLjjzM7qd8xzO/OAeL7uH1b02NcTyIP0NEiVacM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 01:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:9c:c0:cd:1f:22:0b:4a:5a:1b:30:23:9d:77:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ccd0cacfafa2e0d31495dd950f76af5f98ba5d7
Validity
Not Before: Oct 28 01:01:30 2025 GMT
Not After : Oct 29 01:01:30 2025 GMT
Subject: CN=42538528930c88e58d77af06a420350c744db72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:c3:9d:62:e1:da:2a:b5:7e:02:a4:42:d2:
b6:a9:bf:9f:8b:0e:5a:d5:a1:da:25:ce:ba:ca:b4:
86:22:5a:7e:d3:b7:a5:44:b2:9b:62:6a:4e:5a:e8:
76:2c:99:a4:40:1a:a1:24:72:c1:ae:55:5b:dc:49:
ba:f9:21:d8:8e:8c:0f:f3:eb:71:c3:b5:f5:86:a5:
a2:d0:c2:2e:e7:68:82:25:31:cc:89:db:b6:91:e8:
7a:eb:2f:23:1a:80:2c:5b:1e:94:24:fd:26:d7:8f:
6a:3f:80:9f:47:e1:51:44:e2:23:2e:af:89:31:b1:
fd:c1:22:3e:c6:f8:9c:3d:1c:d1:7e:cb:6f:29:ea:
11:1f:de:5a:03:bb:3f:7d:f1:a1:e9:65:c4:3a:e5:
b2:ff:47:a2:03:02:d5:42:41:8d:62:65:d4:02:2b:
2d:bf:b3:0b:77:27:1c:13:73:dc:63:b5:2d:14:8e:
fa:42:b6:7b:0d:01:92:52:f5:cc:0d:40:01:8c:2e:
2a:86:a8:7a:99:bc:8e:32:01:00:2e:3a:9f:8e:91:
45:98:67:b5:fe:e5:49:01:21:c0:37:2f:c2:ad:e3:
a4:65:d5:eb:0d:8e:1f:70:18:e6:19:17:2b:65:3b:
91:75:df:24:6a:ba:13:ff:12:49:a2:8c:ad:9f:96:
f5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:53:85:28:93:0C:88:E5:8D:77:AF:06:A4:20:35:0C:74:4D:B7:2C
X509v3 Authority Key Identifier:
keyid:7C:CD:0C:AC:FA:FA:2E:0D:31:49:5D:D9:50:F7:6A:F5:F9:8B:A5:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/be5dcf-cb05-461a-868e-439fc8f9b386/1/fM0MrPr6Lg0xSV3ZUPdq9fmLpdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:20:43:58:83:3c:e5:e3:cb:e4:ae:9f:c2:f7:ab:8e:b5:32:
d5:6d:6b:69:2b:20:61:f5:f5:89:4e:d8:4d:a0:f2:fc:d6:7d:
96:bb:bf:28:d7:17:1a:a4:87:1f:30:c1:d2:c0:24:1c:88:52:
90:85:74:3d:69:1d:65:41:5a:19:03:e0:07:e3:ea:68:45:a7:
bf:e5:b4:73:73:10:ad:58:81:b9:57:5b:bd:20:9f:2d:80:ac:
d5:33:4f:e4:ff:18:76:84:56:d5:72:1b:5e:b8:84:d8:b5:3b:
b3:48:cc:43:54:9b:88:16:da:65:95:64:38:e3:f2:2e:a0:e2:
a1:93:16:11:39:dc:ac:5c:2a:22:fb:b1:a8:e3:00:48:37:d0:
95:6d:c1:fe:b8:a9:27:0c:2d:e9:81:32:12:dd:a2:b4:0d:7e:
07:f6:1a:2f:4e:13:8e:bd:2c:a8:48:eb:7c:ce:12:9a:7e:d5:
a4:b9:91:86:7d:64:aa:4b:a1:0c:76:d4:ed:20:97:c1:0a:4b:
d9:8e:71:74:fe:21:64:0d:9d:af:1b:51:45:66:16:2e:97:0f:
31:46:9b:7f:93:8e:02:8d:c6:4d:09:d4:17:85:9d:5a:79:27:
f0:ea:b9:d2:2c:a6:c4:7e:ca:db:26:d5:7e:8d:8c:2f:c3:4a:
ca:5e:32:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:18:38 2025 by rpki-client