Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
File: fggLq1W_NHMYjCDHNmpssETHGVw.mft (raw, json)
Hash identifier: Je2C/P1LDSE8+zdD5kY3YSapF7Qfpy3vevBnvzchrXw=
Subject key identifier: C8:73:78:86:89:32:3A:C6:60:C0:29:5D:3D:63:D2:35:80:A9:A9:91
Authority key identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
Certificate issuer: /CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Certificate serial: 0199FD6B6450D8D757A0A8EFD0B3D24960E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
Manifest number: 1187
Signing time: Sun 19 Oct 2025 17:01:37 +0000
Manifest this update: Sun 19 Oct 2025 17:01:37 +0000
Manifest next update: Mon 20 Oct 2025 17:01:37 +0000
Files and hashes: 1: 8m52WXmC6DqVDLH9lI-6WR69u6s.roa (hash: 0BZo5xqp89NE8ExAG9qblE2VcBVND0AxeF/zdrSRKa8=)
2: fggLq1W_NHMYjCDHNmpssETHGVw.crl (hash: 62TywAE1iJQKT/mOi3/cMMG+vIN4fm/U2k+9orFBHR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:64:50:d8:d7:57:a0:a8:ef:d0:b3:d2:49:60:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e080bab55bf3473188c20c7366a6cb044c7195c
Validity
Not Before: Oct 19 17:01:37 2025 GMT
Not After : Oct 20 17:01:37 2025 GMT
Subject: CN=c873788689323ac660c0295d3d63d23580a9a991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2d:85:6e:a6:d0:39:0a:f0:9e:fa:ba:f1:cc:
d2:de:ac:e4:5a:93:94:80:47:90:d7:66:5f:89:6b:
43:4c:8c:19:09:b7:37:c3:14:cb:3a:14:ea:ec:cb:
3b:24:c6:69:cd:ad:53:74:89:7f:7f:3f:93:10:de:
ff:9d:28:0c:4d:5c:d0:f8:a2:8d:a3:ad:53:f5:36:
fc:32:77:14:57:55:45:54:dd:81:c4:64:36:3f:2a:
a3:66:93:0b:d5:ce:b5:3f:67:75:77:87:47:1f:56:
e6:7a:d8:5b:02:aa:76:35:fc:32:45:c2:28:f3:65:
ba:5c:f9:f9:e5:b3:e9:ca:97:d2:9e:9a:65:b0:83:
ec:c7:37:da:7e:0c:ce:81:10:f6:90:57:82:50:84:
d5:ee:fd:53:9b:9d:46:80:79:44:13:aa:fd:91:ef:
93:ad:e7:2f:cc:0a:33:03:c5:55:d6:15:91:c1:50:
63:cd:52:19:42:3d:bb:9f:1b:d7:f9:66:df:d9:5e:
54:38:52:52:41:44:0f:f5:a5:09:fa:1d:46:96:4a:
70:bc:0a:32:76:92:06:c4:56:9a:96:6b:15:7b:c0:
c5:aa:c2:18:38:20:35:8f:ca:e3:33:ff:6f:8f:db:
c8:4f:85:e2:ca:73:1a:b5:6b:23:ee:73:62:5e:c0:
29:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:73:78:86:89:32:3A:C6:60:C0:29:5D:3D:63:D2:35:80:A9:A9:91
X509v3 Authority Key Identifier:
keyid:7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:42:d1:2f:67:6d:f0:5e:49:61:43:39:50:19:bc:83:8e:ec:
c1:d8:b5:18:da:f9:8b:84:1f:40:54:6f:4f:95:66:d7:d4:3e:
d7:c9:cf:88:ad:4c:46:cf:93:eb:6f:3f:4a:0d:5f:1b:96:c1:
34:22:f8:8d:66:ca:25:ad:ea:32:33:e5:5b:af:2b:66:5d:a5:
ac:25:92:b0:b1:52:37:c4:42:22:b3:4b:42:3e:88:74:36:a8:
b5:34:b4:a3:11:19:c1:3a:23:99:14:2d:69:7f:69:eb:6c:eb:
ec:23:6d:71:d9:9c:df:bf:ac:06:2f:a8:08:68:76:f4:54:77:
92:20:2e:9e:49:30:c8:40:7f:2e:d8:a1:95:39:8e:b6:2f:b7:
15:f8:96:d0:55:52:97:1a:a4:ad:88:27:81:64:d5:ba:de:07:
4b:e8:44:bc:0a:0c:57:e2:1a:67:c1:40:51:4a:fd:56:2e:b3:
48:b0:67:d2:89:e4:dd:2c:42:d6:45:38:26:b7:69:fd:11:20:
6c:7e:67:36:fb:d1:13:bc:bc:e0:bd:fc:11:fd:b3:da:fb:df:
7f:a3:b7:ca:07:80:9f:d9:9c:dd:05:6e:31:20:bb:a4:0c:9d:
76:f3:0a:62:27:80:05:a9:97:7d:bc:52:4e:d7:f8:b3:bf:84:
ce:cf:39:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:18 2025 by rpki-client