Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
File: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft (raw, json)
Hash identifier: 00rToqPbENnqxNQef3fjdiU2Dhz3dQhuLIoBDxZfk1E=
Subject key identifier: 4D:DF:1A:28:60:EF:19:71:4E:BA:61:42:20:FE:C7:D6:E5:A4:3D:BA
Authority key identifier: 7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
Certificate issuer: /CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Certificate serial: 019A01B5377193297EC900019417F64900AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
Manifest number: 0F74
Signing time: Mon 20 Oct 2025 13:00:44 +0000
Manifest this update: Mon 20 Oct 2025 13:00:44 +0000
Manifest next update: Tue 21 Oct 2025 13:00:44 +0000
Files and hashes: 1: 3DrlLWhGcsMv-s4viwJB1FYsGOU.roa (hash: s3b1rQsesdFt4DpbajXuJViVF04qZ0u1qGw5GYZzzXk=)
2: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl (hash: zDTwkVL/hPoBKkx/phLbo4/Q/4oe5eByUtnwE8wDDCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:37:71:93:29:7e:c9:00:01:94:17:f6:49:00:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Validity
Not Before: Oct 20 13:00:44 2025 GMT
Not After : Oct 21 13:00:44 2025 GMT
Subject: CN=4ddf1a2860ef19714eba614220fec7d6e5a43dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d3:7d:ca:02:e4:4c:8f:be:f0:3d:88:e4:64:
6d:3a:21:b1:d6:93:75:d1:fc:76:0e:37:0a:90:76:
0f:96:d1:b8:ff:ce:e8:3b:72:7e:6e:6e:31:ec:fc:
dd:80:cd:0c:87:8c:c7:1c:f2:5d:2d:5e:d3:d1:ee:
a9:53:2c:20:09:8a:68:5e:c8:b7:94:32:fc:75:46:
07:db:49:3e:72:c4:50:b7:1c:89:e1:c9:c2:04:1f:
c5:ca:57:ec:c9:3e:9d:df:a3:19:8f:93:de:6c:6e:
9c:b3:85:1a:14:c7:9e:ab:40:88:86:57:e0:b3:1a:
f0:da:61:0b:99:c7:c8:38:39:c4:ec:1d:f9:e8:08:
4d:a3:a8:36:11:e8:24:38:c4:7d:54:06:9d:3c:3d:
90:9b:12:f9:b9:9b:e1:c6:41:c9:21:40:97:59:2b:
e8:6d:76:46:36:ad:26:b9:24:f7:df:8f:bc:5f:bf:
81:e7:54:56:55:6b:8a:89:b2:62:7d:c4:c5:c8:d1:
8b:62:0e:16:ef:7e:36:d1:1a:c7:3d:fe:6b:da:fe:
42:5a:6a:3a:1a:d4:99:56:55:8f:01:84:7a:95:4c:
93:cc:c0:4c:71:9f:a1:ec:15:28:cf:0b:da:be:8e:
62:65:c2:c2:5b:cc:69:17:fe:22:f7:62:1c:4b:92:
26:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DF:1A:28:60:EF:19:71:4E:BA:61:42:20:FE:C7:D6:E5:A4:3D:BA
X509v3 Authority Key Identifier:
keyid:7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:3b:de:f4:c6:07:61:13:88:5e:69:08:4e:a8:75:1e:8f:0d:
21:1e:cc:5f:cc:05:14:16:5d:b5:9f:4f:26:18:ed:43:62:94:
03:db:7a:3f:27:91:fd:2f:08:ea:f8:31:f9:47:b9:ef:c1:25:
20:3b:b7:d2:8e:94:f3:4a:12:dc:f1:68:13:5b:2c:7c:f1:ab:
94:fa:2e:39:9e:09:74:cd:29:46:23:87:8a:52:da:ae:15:30:
e9:05:87:5a:5a:94:d6:2e:ee:20:21:9e:fc:c2:79:90:3e:7e:
6c:e3:eb:63:4b:c0:6b:97:d3:a7:b2:fe:2f:fc:d9:b3:73:f6:
77:53:60:5d:d4:28:55:e5:ad:f2:81:d8:b1:f0:15:6b:70:ff:
59:55:24:c6:e8:60:f2:5f:f4:71:54:57:63:d5:ce:a3:c9:b8:
51:d6:4c:d5:7a:89:9d:6e:97:01:a4:18:32:f2:f8:fe:4d:ff:
7e:c1:5f:f3:6c:88:1d:3c:a1:80:38:df:2b:05:51:5d:44:66:
cd:6b:56:2b:77:39:a1:ba:ed:33:17:b3:db:dd:0d:42:60:66:
73:40:d2:f1:7c:76:e5:3e:6d:a8:2c:46:db:30:c9:e1:4e:63:
3b:c5:18:72:de:d2:c6:9e:f7:7d:66:6b:38:7d:b6:de:34:c6:
19:8f:b1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:52:38 2025 by rpki-client