Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
File: fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json)
Hash identifier: UOx/EEQnoJmlYnH6hwqABN3fh9hvZh+6N/9xircRSvU=
Subject key identifier: 16:EA:DA:26:E4:1D:6D:14:29:49:5D:11:E9:6A:20:00:86:00:A9:18
Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
Certificate issuer: /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Certificate serial: 0199FAA1233550FD660327DF75CA8C9E3205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
Manifest number: 5D
Signing time: Sun 19 Oct 2025 04:01:28 +0000
Manifest this update: Sun 19 Oct 2025 04:01:28 +0000
Manifest next update: Mon 20 Oct 2025 04:01:28 +0000
Files and hashes: 1: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: L8tZH0VG2QxOdhZn0bLj9RadNj/Kq8XJXWCBvQZclCY=)
2: zIaCxLUjq21dOPZ6oricOQf9_f8.roa (hash: lDpgOF97BKIlMEFYdLb+3oy7Ebe7Mk1d7MHbR+tgmKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:23:35:50:fd:66:03:27:df:75:ca:8c:9e:32:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Validity
Not Before: Oct 19 04:01:28 2025 GMT
Not After : Oct 20 04:01:28 2025 GMT
Subject: CN=16eada26e41d6d1429495d11e96a20008600a918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a8:c5:23:02:71:a1:85:af:2b:19:8f:bb:9f:
e6:32:5d:16:aa:72:42:e7:a0:e1:3c:a0:c2:41:98:
c3:e8:50:7a:1f:dc:71:04:8a:d2:ad:22:22:53:42:
92:e6:ec:af:42:02:89:31:05:1d:73:68:d3:3f:61:
39:63:ac:70:5d:84:b1:b4:c8:87:6c:3b:77:52:5a:
65:c5:9c:56:06:6e:db:39:0f:27:d8:12:dc:69:fe:
b5:df:a7:b8:f7:e0:0d:91:f6:93:68:74:b4:0c:cf:
a7:21:5b:4b:38:73:2d:75:c3:90:41:e4:ec:e9:63:
42:87:6b:f6:ae:05:99:87:75:cc:57:04:95:ff:89:
ce:91:bc:c6:03:92:a4:4a:d6:19:7e:4e:68:55:c7:
7c:f5:c7:3a:2d:26:25:6a:9e:8f:f3:a9:c6:f0:69:
7e:51:11:70:74:ca:b8:85:05:f8:cb:00:03:39:31:
73:92:32:5e:80:ba:7f:04:69:ce:2a:fe:04:01:aa:
8a:70:d4:27:c8:58:cf:98:73:db:30:54:b1:5f:5a:
14:2a:a2:68:89:7a:c7:61:61:b8:6c:af:04:ed:ed:
fa:ae:be:5a:82:35:42:f4:27:9e:e2:cf:b2:bc:b7:
f5:a7:90:ac:4e:59:6e:71:d6:80:37:ab:63:0f:b8:
f7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EA:DA:26:E4:1D:6D:14:29:49:5D:11:E9:6A:20:00:86:00:A9:18
X509v3 Authority Key Identifier:
keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:93:b0:8f:d4:74:58:f6:7b:08:16:e0:d8:9c:4a:3f:dd:01:
01:a7:ec:62:63:9c:83:70:62:1e:a0:12:94:cf:48:33:ed:a7:
e9:56:f6:f6:42:5b:3f:0c:08:1a:d1:1a:74:bb:d7:96:02:2c:
f9:85:10:d2:86:03:13:41:bb:cb:38:9e:3f:7a:ec:a3:3a:51:
40:22:f9:a0:14:12:20:71:55:51:c8:fa:ba:e5:7e:34:b3:43:
cd:12:84:35:f1:bf:cb:2d:bb:39:e5:b2:3a:d2:09:3d:ca:53:
2d:ed:78:07:59:f2:cb:9b:aa:15:dc:d3:38:74:31:2e:a8:4f:
42:bd:04:fe:42:8e:70:97:71:53:49:9c:2c:a8:02:a9:e2:55:
23:f0:95:f9:a4:bb:75:bd:24:ea:e4:dd:cb:6b:47:af:c7:9f:
67:7a:19:16:3d:09:cf:8a:a1:e3:be:63:97:a5:8d:2b:7f:e6:
49:8c:7d:04:3e:b6:f5:c2:96:38:b6:42:f7:1f:cf:dd:60:6c:
db:e1:fb:d9:bd:e1:b5:0d:f0:d5:c3:7c:ea:84:a1:2f:ff:95:
10:d2:f4:55:01:ac:39:30:1b:14:59:d3:4c:78:b2:5c:67:04:
08:3b:ba:4e:26:a1:da:70:5b:24:8a:b7:79:bb:19:ee:e4:33:
b2:f5:46:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:50 2025 by rpki-client