Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
File: c7gWQOG2T1HSun149nd8BW0RVL8.mft (raw, json)
Hash identifier: pA2kvjZG56FCmd5Xe6h42XKRhMrh2cpZU7MoUKHGvKQ=
Subject key identifier: FF:A5:66:7A:21:0C:62:C7:94:57:CE:AA:4A:4A:E0:1C:79:09:69:E3
Authority key identifier: 73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF
Certificate issuer: /CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf
Certificate serial: 0199FC5847F7047E3B887A56F701EF4DBF40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:08 +0000
Manifest this update: Sun 19 Oct 2025 12:01:08 +0000
Manifest next update: Mon 20 Oct 2025 12:01:08 +0000
Files and hashes: 1: 3rVvEb5TD5sUIiR8g28gQB62SZ4.roa (hash: I97/quPKUPqVv98vrZrzthe6vPPP5kOtjCTGVwTGxJg=)
2: c7gWQOG2T1HSun149nd8BW0RVL8.crl (hash: dATsvhTQ6NFBierBXs8yiFvREDOAP5Y65eXr3iCCSJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:47:f7:04:7e:3b:88:7a:56:f7:01:ef:4d:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf
Validity
Not Before: Oct 19 12:01:08 2025 GMT
Not After : Oct 20 12:01:08 2025 GMT
Subject: CN=ffa5667a210c62c79457ceaa4a4ae01c790969e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:62:7c:0d:9b:0d:f8:6c:32:18:f1:b4:97:21:
80:32:ea:00:e8:a7:42:da:76:74:a5:3f:95:fe:f4:
f2:bd:68:83:7d:bb:87:dc:87:ba:f1:34:aa:7a:4c:
fd:fc:3c:e1:20:84:c0:23:f3:e0:5f:7a:46:8a:b0:
ae:de:21:ca:5f:22:0f:69:b0:c3:75:30:f2:30:1d:
76:07:2c:7c:73:4d:74:51:30:c1:48:34:91:b3:c5:
14:b3:aa:a4:2f:8d:d3:c4:3a:09:3e:85:d0:d2:56:
64:33:22:fe:d7:d7:59:00:06:1c:72:27:4b:e6:79:
89:14:4a:92:3e:e1:35:f3:2b:57:55:2a:cb:33:95:
28:af:d2:be:6e:bc:77:9e:99:d6:aa:92:7f:26:3a:
65:50:bb:99:9e:23:96:3e:92:02:70:c4:f6:60:54:
eb:e7:3a:07:4e:f0:a1:53:12:a4:a0:8a:99:ce:ff:
63:07:d9:3d:e1:f7:95:4b:00:56:f8:92:ca:09:75:
88:0f:4e:f4:22:34:82:ba:9d:78:ee:ab:4c:cf:11:
aa:e4:a2:a7:5a:03:56:98:4f:ba:2b:e9:ec:cb:11:
cb:a8:86:cf:ee:d7:33:ea:e6:dd:5c:13:00:d7:ce:
d6:a4:97:d4:fc:ca:c6:30:09:fc:17:21:12:1d:78:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A5:66:7A:21:0C:62:C7:94:57:CE:AA:4A:4A:E0:1C:79:09:69:E3
X509v3 Authority Key Identifier:
keyid:73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0e:d7:ee:28:9f:26:8e:a2:6d:3f:ed:4f:bb:39:b5:e7:6c:
78:5b:6a:b6:8a:25:7d:ac:2c:5e:6c:20:14:35:9d:e0:ca:13:
6f:dc:5d:6c:37:cd:e0:9f:7d:af:0c:d6:b3:c1:af:51:e4:3b:
de:dd:9c:d6:f1:e1:a1:31:b0:7b:9a:85:8e:e8:7f:c0:27:4e:
c2:e1:2d:2c:e2:70:63:ea:55:eb:66:60:9e:a4:dd:e2:45:b7:
31:7d:ee:c0:93:a6:5e:cd:e4:63:8f:fe:a0:6f:c4:8a:db:7a:
21:c5:45:db:d0:73:a6:af:81:10:47:44:e3:30:00:7b:7e:40:
08:d8:a4:de:8f:49:44:14:8d:b9:a9:f5:88:c8:45:60:3d:12:
3b:5a:17:df:e4:01:22:ee:5e:4a:ce:e3:4f:d6:d5:0c:4b:07:
74:61:18:cb:b7:bc:ff:8d:a8:69:85:08:4b:7f:d8:16:69:bb:
9f:91:e7:d8:d3:ff:ee:a6:fe:6c:df:48:d1:f4:04:4a:a1:4c:
73:15:a5:4a:b2:d0:34:22:ea:f6:91:1d:61:f9:85:56:9b:48:
b2:ba:c2:ee:ee:49:9c:3c:6c:db:a3:f1:67:79:fe:ec:eb:f7:
a5:99:cd:41:b7:9e:15:86:c1:13:33:75:44:52:47:8f:ed:21:
18:0c:69:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:09 2025 by rpki-client