Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
File: _7yuKykMgB1X0J0CWpNI4WcG8YI.mft (raw, json)
Hash identifier: JFu676hK42KajRk/DMJeMAOQ3jlxkC5OIjeqs78/fUA=
Subject key identifier: 61:20:0D:0C:5A:4E:40:CE:78:6D:0F:3D:FD:73:3B:E6:1F:FD:7F:DD
Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182
Certificate serial: 0199FC5884395B0A2E1E222793E7819D8EE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
Manifest number: 1643
Signing time: Sun 19 Oct 2025 12:01:23 +0000
Manifest this update: Sun 19 Oct 2025 12:01:23 +0000
Manifest next update: Mon 20 Oct 2025 12:01:23 +0000
Files and hashes: 1: 8wTHmWo4SSJsVc0t3sJFniZg3X0.roa (hash: nwCEElQrpQEsbcFPrYoePVQv66vMAWow/x3hFkCdNgc=)
2: BS9tKB-yEzTuSlcr0sNlNMplJ-U.roa (hash: +wyGsgZf3mkT04YYiaLjKGX/U5oOsHBvxk3RajkpCvY=)
3: _7yuKykMgB1X0J0CWpNI4WcG8YI.crl (hash: fDNfvNzvXJ//v2GXBdOufon0+2KjeyhsrZCoyZuPNmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:84:39:5b:0a:2e:1e:22:27:93:e7:81:9d:8e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182
Validity
Not Before: Oct 19 12:01:23 2025 GMT
Not After : Oct 20 12:01:23 2025 GMT
Subject: CN=61200d0c5a4e40ce786d0f3dfd733be61ffd7fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:56:c4:18:5b:94:49:d7:82:c9:1f:32:71:
12:0f:59:5b:b4:c5:0c:ae:71:7d:fd:22:14:25:98:
cf:50:0f:5b:69:da:a3:81:66:1e:63:34:cf:73:16:
e0:5c:cc:76:1a:ac:dd:bf:82:fd:e4:a6:2f:0f:2c:
4f:67:7b:98:d7:92:63:bc:f3:57:04:ce:b5:13:5a:
59:88:2f:ac:8c:4d:73:5f:81:a0:9a:e3:b1:27:9b:
76:c7:bf:12:bc:4b:be:a4:49:d3:ba:9b:7b:10:4e:
23:0e:5a:d2:ec:9e:87:84:1e:8d:2b:59:11:c0:2d:
33:9b:77:2c:0e:00:ad:1d:95:27:3c:c2:27:97:09:
8d:83:df:db:4f:d5:2e:a3:44:9c:1b:c4:17:a2:34:
bf:7a:08:6d:44:79:57:7f:fe:79:92:09:58:4d:b7:
0d:bb:9f:dc:f2:f1:a1:0b:bb:bd:55:c1:1b:65:bb:
87:51:98:0e:dd:6a:fd:be:41:18:d2:57:e5:af:f5:
f9:e5:2c:25:3d:b0:20:80:d3:28:4a:f3:f7:05:83:
af:05:fa:95:18:e4:4b:29:85:a6:47:15:de:9c:6a:
79:86:4a:33:0c:34:a8:12:c1:e2:1c:c9:5f:40:e7:
22:b5:d4:a0:11:bf:b7:18:be:47:99:0a:a7:3d:1a:
35:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:20:0D:0C:5A:4E:40:CE:78:6D:0F:3D:FD:73:3B:E6:1F:FD:7F:DD
X509v3 Authority Key Identifier:
keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:eb:a1:75:85:f1:33:49:2f:0b:bb:4c:78:f5:4d:71:6b:94:
12:9f:31:a7:26:05:fb:2b:f1:ff:83:f1:b0:cb:87:6f:6c:9b:
3b:fe:fc:2d:26:f6:42:06:8a:e6:1b:dc:a7:70:6b:a4:98:79:
18:05:93:29:e0:29:7c:85:50:44:be:6b:c7:02:14:ff:0d:7e:
19:35:00:59:59:9d:52:0f:26:af:5e:ec:1d:03:c8:be:56:78:
63:00:f1:e6:a6:0d:6c:2f:99:58:0d:e8:9e:18:d3:51:b3:1b:
ae:0d:6b:f7:c5:04:50:6b:dd:90:ff:e0:c1:98:c6:bd:38:37:
52:64:96:0b:19:20:3d:e6:7b:42:b2:ea:fe:db:d3:f5:86:36:
7c:e4:5c:c0:b1:04:fe:4a:d8:b0:2e:11:1c:69:e1:04:ec:50:
a3:57:b5:46:64:85:d5:29:2f:ce:d7:ed:3e:24:f7:c9:84:3e:
1d:ad:86:a9:2f:62:cb:79:e3:5d:3f:60:4f:7f:80:60:21:b7:
18:61:f6:4f:04:6d:be:f5:54:90:35:0c:a2:b2:96:f3:e6:a0:
de:b8:cc:10:f4:d4:87:36:23:85:2f:40:ad:fe:68:1d:d2:4b:
3c:be:0c:72:92:05:21:35:47:58:62:ed:e0:b7:0f:07:14:9d:
64:b7:b2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:57 2025 by rpki-client