Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
File: 79rqxvigN0g5cw_IVnlXCeGO2RY.mft (raw, json)
Hash identifier: x/9cxR4nRPkxjw0aAQvqolts+sA3N/CUPaKS35O68S0=
Subject key identifier: 40:C6:49:1B:95:A3:57:F7:92:4E:0E:0D:1B:0A:DF:3D:5E:34:4D:C4
Authority key identifier: EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
Certificate issuer: /CN=efdaeac6f8a0374839730fc856795709e18ed916
Certificate serial: 0199FBEC0E508D1CF6A487B8975822B53831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 10:02:55 +0000
Manifest this update: Sun 19 Oct 2025 10:02:55 +0000
Manifest next update: Mon 20 Oct 2025 10:02:55 +0000
Files and hashes: 1: 79rqxvigN0g5cw_IVnlXCeGO2RY.crl (hash: uFji5GnaTE6ORogyFMWf6RqUlod1Hg4O0m1a3RXY2RA=)
2: jBd9B-QxZd6kSJHakHtwWCRpb8g.roa (hash: D/BN6zrh/Ppu12+wqVsmd0mbM1Dy48uvpuG5EGpyN0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0e:50:8d:1c:f6:a4:87:b8:97:58:22:b5:38:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efdaeac6f8a0374839730fc856795709e18ed916
Validity
Not Before: Oct 19 10:02:55 2025 GMT
Not After : Oct 20 10:02:55 2025 GMT
Subject: CN=40c6491b95a357f7924e0e0d1b0adf3d5e344dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:d4:41:b5:8e:59:ab:b2:9f:bb:32:75:2b:
7d:f3:62:4c:84:c2:22:9f:70:8e:30:11:d4:d8:59:
b5:5b:e7:88:57:91:1c:50:c3:70:c3:2f:ec:6f:3d:
40:fc:c3:50:73:55:18:dd:1c:10:8e:0b:ab:ac:cd:
11:17:10:d1:84:ed:30:6b:2f:b7:85:39:6a:a3:6d:
d0:cc:c8:47:03:81:f6:30:2e:22:fc:6d:c9:24:49:
fd:9d:e6:c3:c9:45:1c:27:d4:91:4f:41:ab:9e:40:
29:b1:23:1f:0b:1d:08:7c:b4:e6:fb:5e:4b:50:44:
ac:7b:60:7b:62:11:c5:db:f4:ad:5e:63:54:d5:06:
3b:9b:6e:b1:0e:88:c1:60:87:96:88:af:9d:de:30:
a7:7c:4c:c7:a8:91:4f:2a:0e:79:84:37:f5:6a:5f:
c3:a1:8f:c7:91:d6:00:07:ef:68:13:3a:dc:68:3d:
56:5d:08:8a:6e:bc:83:4d:72:7d:43:e7:7b:22:0e:
b1:fc:05:9b:96:21:64:e6:6c:35:a4:d6:c2:92:bd:
d5:73:99:b1:36:d4:d4:3f:52:0b:8b:b9:5f:21:5a:
1e:f6:e7:8b:9a:53:31:51:5d:fd:5f:4f:ef:c9:81:
f7:af:a8:57:0a:3f:0d:81:79:81:52:11:f9:36:bd:
63:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C6:49:1B:95:A3:57:F7:92:4E:0E:0D:1B:0A:DF:3D:5E:34:4D:C4
X509v3 Authority Key Identifier:
keyid:EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:0e:f7:cd:0d:e3:25:7d:dc:b1:9a:ab:a2:e7:b0:e3:a6:1c:
3f:73:eb:7a:66:94:5a:0b:74:52:63:9b:f5:c2:fe:17:44:df:
86:99:f2:63:00:fc:86:c4:54:59:91:10:37:f4:1a:13:d9:4f:
f8:dc:ad:c0:5b:b4:9b:ac:c1:0f:7a:7e:12:30:74:ff:ac:c9:
44:d2:59:9b:ad:09:5e:c1:02:6c:11:aa:6f:2e:b8:13:9e:b3:
da:df:62:22:3d:bf:04:da:19:92:77:44:ab:97:4b:2b:6a:5d:
82:4e:b0:c0:c8:9a:a2:59:b2:23:1c:34:54:dc:c7:0f:a9:2c:
80:a4:87:f6:88:31:5a:a2:ea:0b:50:ea:5f:b9:a1:22:0f:a8:
71:be:70:11:89:ef:5e:0b:1d:76:d6:5b:99:a0:65:fb:08:60:
9d:0b:4c:1e:8a:2a:ef:e5:2b:b3:88:eb:09:d2:bc:a7:4d:5a:
a9:43:b5:1a:50:ec:cc:00:83:dd:3a:a5:95:6b:96:68:f6:81:
7d:13:c1:40:24:64:37:38:53:f9:0d:47:f0:df:d0:ce:84:19:
91:bf:c1:3b:93:f9:cc:3f:14:f8:7d:7d:06:16:b6:91:8a:09:
ea:57:7d:13:e4:43:b1:53:7d:fc:de:15:d1:7f:e2:cb:c1:12:
0c:8b:dd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:25 2025 by rpki-client