Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
File: exPgVmn1VmYr7FZk4QFln5Zsgmo.mft (raw, json)
Hash identifier: GVATTyRBQp9P7diwNzlnNup3Qqh/k8hUCc6WlSslH44=
Subject key identifier: C4:36:75:8B:87:A8:A7:34:7D:44:86:3E:0E:ED:11:A2:16:6D:C3:AE
Authority key identifier: 7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
Certificate issuer: /CN=7b13e05669f556662bec5664e101659f966c826a
Certificate serial: 0199FB45D8AA8676BE73E55B66B343A9C2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
Manifest number: 0DC2
Signing time: Sun 19 Oct 2025 07:01:22 +0000
Manifest this update: Sun 19 Oct 2025 07:01:22 +0000
Manifest next update: Mon 20 Oct 2025 07:01:22 +0000
Files and hashes: 1: HyKdTkKV5STn1J4Rxe8JxbMCpv4.roa (hash: 6If9g5ZI4fy1JxA85rEnX+2Sovu9Js7JocSs132zGS0=)
2: exPgVmn1VmYr7FZk4QFln5Zsgmo.crl (hash: +MCILrFaxLuVE7eKShcioQXypnQEnD38R7wdrI22Weg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d8:aa:86:76:be:73:e5:5b:66:b3:43:a9:c2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b13e05669f556662bec5664e101659f966c826a
Validity
Not Before: Oct 19 07:01:22 2025 GMT
Not After : Oct 20 07:01:22 2025 GMT
Subject: CN=c436758b87a8a7347d44863e0eed11a2166dc3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:74:eb:2b:52:b1:72:45:13:a4:14:da:b5:
c6:b6:6c:be:72:fc:2a:89:02:9f:67:45:ff:f0:25:
4a:82:c7:c9:60:0b:89:f3:8b:36:a5:8d:42:11:ad:
cb:5f:38:d4:01:ce:50:a7:34:7f:a3:fe:6a:be:16:
d3:93:a2:9c:0a:c3:74:b7:d7:a0:30:6f:91:fe:74:
c0:01:4d:e8:3b:8b:9e:ec:6e:65:f7:5d:00:e4:6d:
72:c0:ae:61:a3:6e:37:e2:0f:f0:c2:2e:7a:77:1d:
da:75:93:df:ab:11:92:fa:32:9f:0d:7d:fc:e7:da:
7a:df:b7:4b:ad:9d:44:6d:c4:7c:8c:15:b0:12:d9:
13:19:42:23:e3:f6:6d:fd:25:3f:f2:9b:b2:a8:07:
be:b7:59:45:c7:15:21:46:25:31:69:0f:dd:21:b9:
c6:71:49:8b:ab:88:ea:7f:d3:48:f7:93:6d:ee:15:
30:74:9d:8f:a2:5c:cd:d5:28:c0:42:26:60:4c:31:
13:e1:96:8a:07:35:b7:fd:c4:49:55:b5:6b:69:cb:
3e:3b:29:fa:f2:9c:a3:f0:39:ee:af:a1:ce:18:45:
72:9f:d3:7e:8a:1a:e5:e4:ca:9c:30:8a:6f:20:1f:
df:97:4d:83:a4:d9:9c:fc:e2:3c:b2:a2:7f:0e:4c:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:36:75:8B:87:A8:A7:34:7D:44:86:3E:0E:ED:11:A2:16:6D:C3:AE
X509v3 Authority Key Identifier:
keyid:7B:13:E0:56:69:F5:56:66:2B:EC:56:64:E1:01:65:9F:96:6C:82:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exPgVmn1VmYr7FZk4QFln5Zsgmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f7761a-fc38-475c-8a11-94c73346c0ea/1/exPgVmn1VmYr7FZk4QFln5Zsgmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4d:a5:83:a1:7c:fd:e2:7a:2e:c9:e0:ea:57:55:92:a9:1d:
30:21:bb:56:34:d9:83:a9:01:89:50:3a:b5:b0:81:17:d4:ed:
6a:80:5e:8b:5f:ff:84:c3:7b:21:df:ce:5f:38:fa:d5:56:9f:
d7:cd:c7:d6:06:a7:8a:02:ca:f5:78:f7:44:44:ef:25:9d:83:
29:1b:ed:d0:c4:aa:09:70:38:6d:5c:86:7a:e9:4d:cd:a9:e6:
f3:52:bb:6a:21:0c:80:aa:73:37:61:20:f1:40:c4:59:ff:43:
93:59:13:0a:28:55:eb:af:67:e1:f8:fb:e9:b6:0e:d7:96:c5:
dc:6d:73:e5:dc:01:f2:0e:81:a8:93:87:2b:4d:bf:29:24:99:
4e:6a:81:d7:44:8b:ee:bc:11:14:1c:1f:11:e9:c8:5d:1c:58:
b8:d4:7e:62:da:17:79:48:d6:41:44:91:44:96:4d:8e:5f:ea:
bd:a7:f2:59:d5:40:8d:ff:76:43:8f:7b:b6:84:7c:9a:a6:bc:
b0:f3:6e:62:6e:63:32:97:fd:09:20:1e:67:8b:e7:ac:4c:c0:
82:ea:0d:c4:b6:03:36:6e:3d:c7:e6:b6:41:aa:e0:2b:5c:52:
eb:f1:44:41:86:38:cf:bc:62:4a:8a:c6:c4:3b:3d:0c:4c:62:
0e:49:8f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:30 2025 by rpki-client