Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
File: fG3HOVgVrwRQSPTOORDQQAj_Onw.mft (raw, json)
Hash identifier: AfQonFHkI2HNrwEo1TpiZGLz6z33+gHxU9arZ0O6i3A=
Subject key identifier: 4A:A6:98:1F:B9:A6:61:EC:EC:1C:25:BA:D6:AD:CD:71:22:89:E5:47
Authority key identifier: 7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
Certificate issuer: /CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Certificate serial: 0199FB7CED517B182A6BB100595599459B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
Manifest number: 13C2
Signing time: Sun 19 Oct 2025 08:01:32 +0000
Manifest this update: Sun 19 Oct 2025 08:01:32 +0000
Manifest next update: Mon 20 Oct 2025 08:01:32 +0000
Files and hashes: 1: WWnUjL9xa5N7RsAiSnLThhNhQII.roa (hash: A7PEzwDFjxl/k3orxXArS56nuTh+qfj6pNUO4Y3XuLQ=)
2: fG3HOVgVrwRQSPTOORDQQAj_Onw.crl (hash: UFQHwbAnZZj9sRiS0hznsp/fLiGA2EXzlcsv6n7pkDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ed:51:7b:18:2a:6b:b1:00:59:55:99:45:9b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c6dc7395815af045048f4ce3910d04008ff3a7c
Validity
Not Before: Oct 19 08:01:32 2025 GMT
Not After : Oct 20 08:01:32 2025 GMT
Subject: CN=4aa6981fb9a661ecec1c25bad6adcd712289e547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:93:9d:5a:9c:7b:34:52:05:7a:7f:0c:e4:e1:
3e:f8:9a:ae:58:80:0d:5e:d4:0a:80:2b:b4:ba:83:
76:99:5a:1f:67:38:91:58:9d:54:2b:6a:1d:15:82:
6e:37:ec:1b:47:4c:b8:29:a3:26:e8:73:0a:45:f7:
46:11:d8:5d:83:c5:f0:61:02:23:f6:8e:f4:c6:8a:
c4:46:b5:ce:6b:4d:89:39:ac:54:60:43:41:92:32:
dc:b2:c2:e8:ae:4b:93:2f:31:63:32:96:d8:3e:92:
5b:7a:e6:2e:77:4a:92:fc:77:ac:8e:5e:e4:3a:d4:
30:c2:3b:ee:1e:6f:1a:21:15:d4:55:64:d8:e8:4f:
bc:64:e8:81:d1:c2:4a:2e:dd:1e:3b:4b:b1:ce:37:
ac:ee:2d:ed:6f:1a:0b:08:e2:3f:ec:32:cf:a4:35:
09:a3:09:be:e0:87:3f:30:35:99:64:e9:cb:30:96:
a3:e9:92:40:81:63:0f:ce:82:ef:63:34:d2:11:01:
b3:02:a4:b8:ca:84:f3:72:4d:16:5c:f2:3d:a1:a5:
e4:5d:70:83:bc:c3:8f:02:88:5c:6c:03:b9:6e:89:
71:01:63:fb:aa:66:c3:e9:93:62:f1:b9:d9:cb:0d:
5b:67:36:04:08:27:40:dc:b8:5e:69:40:7b:f8:ef:
f1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A6:98:1F:B9:A6:61:EC:EC:1C:25:BA:D6:AD:CD:71:22:89:E5:47
X509v3 Authority Key Identifier:
keyid:7C:6D:C7:39:58:15:AF:04:50:48:F4:CE:39:10:D0:40:08:FF:3A:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG3HOVgVrwRQSPTOORDQQAj_Onw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54687f-efa5-4620-8619-3155ba8cb74f/1/fG3HOVgVrwRQSPTOORDQQAj_Onw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:3e:b7:f0:ce:bb:03:b2:21:41:7b:d2:c3:96:fe:bc:c1:98:
49:56:8b:39:32:22:58:4a:88:23:a8:50:90:45:04:56:89:c8:
35:af:f3:f9:e2:44:e1:cb:33:85:be:62:9e:b6:6f:b3:9a:be:
b1:e8:ae:df:bc:f3:86:e4:1e:01:bd:21:b3:60:69:6b:80:06:
97:a6:0f:b1:88:52:e9:ff:07:23:db:d3:ea:3e:6a:35:d2:d0:
19:94:ce:85:fe:2b:b0:6a:39:b3:f5:4f:90:cc:66:55:e3:6c:
92:50:e3:4f:4e:9d:05:04:dc:21:05:ad:14:b3:0c:af:c9:32:
17:64:80:76:0f:f7:0d:22:90:1e:12:bd:85:09:c3:ab:60:45:
44:20:d9:72:6e:05:75:86:1a:f4:61:67:91:cc:a6:08:4f:d6:
a9:01:b5:79:50:dc:c8:29:a4:75:74:5b:01:78:d9:55:b1:04:
39:a4:96:69:1b:cc:51:3f:e6:eb:72:c9:99:06:4f:07:31:91:
cf:92:6a:d0:0f:a3:81:df:4d:99:4d:64:10:7d:e5:91:22:45:
e0:16:df:b4:29:9c:be:76:5c:d0:7b:5d:73:04:c5:31:81:f2:
ac:26:74:b2:b6:c6:b7:2c:c9:82:62:f2:3b:cf:f3:08:78:a5:
3b:54:07:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:16 2025 by rpki-client