Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
File: fgRhmrDxIJtw8QWYxplEvzTb8jI.mft (raw, json)
Hash identifier: c+WkRcgfVv7Z8RBArBziEXkMsvfueguYVG4k94jZWdA=
Subject key identifier: 75:F1:46:84:80:D4:38:DD:B5:12:A2:7C:BE:17:19:B8:67:CF:17:22
Authority key identifier: 7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
Certificate issuer: /CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Certificate serial: 019A56E4FCF77526BA370BACE49D741EEF16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
Manifest number: 1450
Signing time: Thu 06 Nov 2025 02:00:38 +0000
Manifest this update: Thu 06 Nov 2025 02:00:38 +0000
Manifest next update: Fri 07 Nov 2025 02:00:38 +0000
Files and hashes: 1: 787yu0Xx7LAqYI4eV6FlvWwe4sU.roa (hash: 0rdw2IxnG2UduKLMx9SDd9m8DvhrTv12ADsR6eydjg0=)
2: V7t1MzfzXgW3Q66a3IOYRULIxX8.roa (hash: 9ljAarH2vMiPbFaBcASuSrcoh5ApRcxsoYC+Da4pdfQ=)
3: fgRhmrDxIJtw8QWYxplEvzTb8jI.crl (hash: 8690ZcHxvgkPihp01bxqg31huNEeOJkztU4HdAKpBK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:e4:fc:f7:75:26:ba:37:0b:ac:e4:9d:74:1e:ef:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e04619ab0f1209b70f10598c69944bf34dbf232
Validity
Not Before: Nov 6 02:00:38 2025 GMT
Not After : Nov 7 02:00:38 2025 GMT
Subject: CN=75f1468480d438ddb512a27cbe1719b867cf1722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:a9:24:42:d6:28:24:5e:37:bf:21:f1:7c:
fe:2b:55:d1:3a:98:9a:62:52:9d:29:fd:b9:bc:15:
e2:01:e3:e5:6d:59:f9:08:85:e9:bb:40:82:39:d8:
70:ce:5c:b8:60:9e:db:a7:2f:27:fd:b3:9d:85:93:
c9:7d:28:df:e7:06:c7:51:2d:f8:29:09:5d:b1:7b:
63:1f:17:d4:28:83:da:50:bb:fa:7f:40:43:92:7e:
1b:aa:99:cc:2a:7d:ab:eb:e4:1d:a7:97:86:93:56:
ad:1f:d8:80:e7:9d:ce:1d:8d:75:23:6c:34:5e:c0:
5b:89:e7:5b:80:0c:6f:bb:4f:8a:76:5b:2d:11:a1:
97:60:50:22:1d:e4:9d:78:3e:a1:b0:77:39:ee:75:
ef:aa:f4:ba:61:3f:77:c1:b3:e3:e4:30:8b:da:5b:
2f:99:3a:02:6e:0e:e9:07:a9:e4:e3:51:a9:92:a7:
df:d7:6e:14:07:2e:15:29:81:cc:43:a4:55:97:db:
57:90:27:d1:95:04:dd:8d:74:95:5d:a3:2f:6d:8f:
a7:83:12:b4:9e:6d:51:f1:e7:83:43:65:d3:fe:88:
ef:17:d2:d2:a5:c4:dd:26:73:9f:ff:9b:cb:74:7c:
d2:ac:94:8a:77:7b:d4:1d:a5:1e:85:ac:f6:ea:9f:
43:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F1:46:84:80:D4:38:DD:B5:12:A2:7C:BE:17:19:B8:67:CF:17:22
X509v3 Authority Key Identifier:
keyid:7E:04:61:9A:B0:F1:20:9B:70:F1:05:98:C6:99:44:BF:34:DB:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgRhmrDxIJtw8QWYxplEvzTb8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/453efc-f193-427b-a498-17903a302ec0/1/fgRhmrDxIJtw8QWYxplEvzTb8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f5:8f:05:b4:2c:69:6b:b6:ec:34:ef:f8:8f:99:47:22:20:
16:d1:ec:f3:00:d6:6e:72:ae:30:83:2c:dd:43:6f:d6:cb:46:
b4:d8:9f:da:19:f0:15:40:f0:cd:03:d0:6d:11:d3:2c:1f:03:
c6:5b:fd:8b:9b:05:13:2c:77:74:82:f8:02:d4:71:bf:3e:36:
d0:2e:cd:5c:3e:b0:7d:ef:dd:9a:b4:17:39:7d:b6:32:94:de:
6f:c8:0a:4b:5c:05:e7:81:b9:16:03:de:74:a8:ce:fb:6b:4f:
77:45:66:be:66:c5:72:36:dd:74:cc:1b:6d:30:de:68:8b:1c:
fb:0e:dc:b9:4f:93:f9:2c:f7:0d:d0:42:5c:e3:cb:92:17:31:
af:80:51:e5:8b:42:53:f5:ce:3d:e0:9a:a4:1e:e9:f4:dc:a7:
d9:9f:5f:a6:2b:ca:0f:66:88:e6:bb:f0:ad:96:17:46:c4:34:
27:3f:ee:a4:b6:72:03:38:21:fd:54:57:57:07:0a:08:7c:0f:
91:72:32:69:42:c6:8e:bf:71:b1:dd:e1:8f:b5:9d:09:75:43:
3d:97:1b:da:1a:50:17:33:46:10:2f:bd:b2:65:1c:22:19:52:
51:b6:43:70:58:64:16:af:d2:51:95:fe:c7:ea:8c:85:fe:d2:
16:d6:24:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 05:53:41 2025 by rpki-client