Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
File: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json)
Hash identifier: yn5N/51zn8aaXZSzZ0AQvfDwc82HIJEKA2wzkGuavMY=
Subject key identifier: A7:7A:C5:BC:70:BB:85:52:E3:12:CC:1A:F2:9E:38:0F:39:78:22:80
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Certificate issuer: /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial: 0199FD6AE7D47F683ACA271A9D447D446C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 17:01:05 +0000
Manifest this update: Sun 19 Oct 2025 17:01:05 +0000
Manifest next update: Mon 20 Oct 2025 17:01:05 +0000
Files and hashes: 1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: 2M2huhk/wzzxOwSpVIQBFlMFI/DS0be2nVhR7OxkxtQ=)
2: 2sMuB3L4wKNk6KQ1vUkgecapqPs.roa (hash: a+lo4xla0hStaCSeWZ2tmrm8LUp0PkG7cZXb4aMXUeo=)
3: CANBUB1YKbCmA7ScoDWaXGtX2uc.roa (hash: aie8Fma/xfSFGEQSDW4nRAqWZZILRzEAkJDRNa0r8qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e7:d4:7f:68:3a:ca:27:1a:9d:44:7d:44:6c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Validity
Not Before: Oct 19 17:01:05 2025 GMT
Not After : Oct 20 17:01:05 2025 GMT
Subject: CN=a77ac5bc70bb8552e312cc1af29e380f39782280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:ff:28:30:3a:a3:c1:75:3c:6f:83:5d:75:
65:b4:c5:24:0f:93:7f:5f:6a:6e:68:0f:be:09:72:
8e:f0:bb:70:35:d8:8e:78:81:5d:6c:9e:f8:d9:c9:
4d:b2:eb:16:f5:21:e4:28:ae:4f:d5:5d:88:1b:19:
31:b3:bb:66:dc:c1:6e:cb:41:54:3d:31:26:f5:8f:
58:cf:76:33:ff:e5:ed:36:24:0f:e2:c0:a5:85:0e:
d6:3f:47:65:16:5e:cd:e0:ef:1f:15:9e:3a:03:d1:
f9:c2:25:0d:ef:ae:45:1e:d9:d5:8e:78:d5:80:7a:
9c:b1:b7:46:21:77:18:e8:10:0f:8d:b4:bd:88:e1:
2e:ca:f8:a9:69:f9:b7:ea:f9:6e:c3:37:69:d3:a3:
73:6a:cd:1d:10:97:55:19:1e:59:f6:fb:d2:97:49:
1b:76:96:e6:f5:a2:18:bf:c9:27:27:85:d6:85:e9:
87:b8:fd:51:57:ae:99:a9:85:76:49:72:b6:86:a1:
06:50:9b:83:ec:3b:f5:30:0c:84:79:fb:2d:95:71:
68:a3:7a:ac:ef:8d:7a:f3:2a:fe:0f:d3:f2:c2:de:
46:6c:ad:6b:ae:1f:9d:a6:6c:f7:13:3a:ff:a3:22:
40:58:a2:ba:e4:b4:22:76:38:72:5d:89:40:76:5e:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7A:C5:BC:70:BB:85:52:E3:12:CC:1A:F2:9E:38:0F:39:78:22:80
X509v3 Authority Key Identifier:
keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:7f:34:29:bd:7f:dc:37:79:de:3c:e2:49:15:6e:2c:0a:97:
6c:ce:90:1a:cb:dc:84:1a:9f:7a:5a:52:6e:32:3a:ef:b4:0c:
18:d4:1a:34:5b:27:e5:67:55:06:cd:6a:8d:d8:a6:b1:b2:1d:
26:8b:75:e7:19:ce:6c:23:bd:d9:07:2a:23:54:cc:be:98:f2:
76:5e:57:59:28:92:3c:5f:85:43:2a:c2:cc:92:7d:0f:8e:17:
22:ef:c2:3d:76:7c:76:74:6a:49:63:46:a3:62:40:8b:56:b3:
29:e1:fd:d3:8a:b4:fe:f4:ce:fb:ca:7d:8e:f4:5a:7f:c5:05:
8b:49:4e:41:0f:97:04:d9:27:c9:aa:dd:ec:6f:1b:16:6e:71:
ab:78:f3:19:e9:13:5e:f3:1d:9c:91:83:26:dc:e1:0f:7a:58:
04:6a:92:d5:6d:be:8a:02:b7:8f:e0:d4:c7:2e:b6:6e:93:5c:
ef:7e:9c:35:f9:f5:32:43:9b:a0:fa:3e:3f:52:12:38:38:f8:
7b:1f:4d:22:5b:1b:93:c8:d0:ca:c4:b1:bd:0c:a2:aa:3b:df:
eb:f9:ae:82:e7:8d:2b:27:d5:97:38:53:ea:9e:c2:f2:db:6c:
a0:54:02:04:0a:90:ab:06:7a:47:05:4c:cc:9f:bf:04:69:44:
6f:f2:68:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:44:32 2025 by rpki-client