Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
File: SVls7MId0CZ3pyfvN_BolUbqUJc.mft (raw, json)
Hash identifier: calEpE+ACsTDKmEJI8uBnqhjZePwI77qbUP8u410duk=
Subject key identifier: ED:A7:B6:C9:CC:34:3C:B8:36:0B:13:B5:8D:66:40:63:29:C9:B9:EF
Authority key identifier: 49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
Certificate issuer: /CN=49596cecc21dd02677a727ef37f0689546ea5097
Certificate serial: 019A4E869EE921F5877EFBAC9C68FEBE9403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
Manifest number: 1718
Signing time: Tue 04 Nov 2025 11:00:36 +0000
Manifest this update: Tue 04 Nov 2025 11:00:36 +0000
Manifest next update: Wed 05 Nov 2025 11:00:36 +0000
Files and hashes: 1: CgdiB-LvALW6eF8te_abb7XhHzw.roa (hash: FMmsOk3IFJDqEQcmSu8en9nadePYE7fdzLtSrsLGOLw=)
2: DheYS6kXlTHMFO59gGUyPsW4eds.roa (hash: n/9tk9beMA1XkkvC1xAFHfiOMzHgwQU8810EuXnnbI8=)
3: PBiMn82gChQHdPPkS-Oqs-Fnbh8.roa (hash: egCOLbWqDbWYCFc5/6lxhgVs+rP+45wHq+Te93L2gCw=)
4: SVls7MId0CZ3pyfvN_BolUbqUJc.crl (hash: oNRqV3VPcT5YC8VtIO0jlmjW/egvgRwbCiMHMTpCk9c=)
5: heiFtANLkWlLrNLuIvdxl9kb0CQ.roa (hash: TnGpURbkXAESJ2Gk47wlG4sEj84D3SKrlpwSgF/8yys=)
6: jj0FH0DBvDqihM_PehNtHmRi9os.roa (hash: YyltTND33n/AiLCX9ViD6/mj27hWtc2LPtOCmOwTReA=)
7: lH-qHFc7crMLSf4GUnVsxi7d5S0.roa (hash: mgWBS9e4WAOzI2AGy8eUIJvq5GzFNK7+k2P1TPWDi18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:9e:e9:21:f5:87:7e:fb:ac:9c:68:fe:be:94:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49596cecc21dd02677a727ef37f0689546ea5097
Validity
Not Before: Nov 4 11:00:36 2025 GMT
Not After : Nov 5 11:00:36 2025 GMT
Subject: CN=eda7b6c9cc343cb8360b13b58d66406329c9b9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:56:02:57:54:bf:72:5d:d5:98:b8:87:3e:
98:9f:78:2a:16:ec:4f:78:db:6f:e3:19:17:16:56:
2c:81:8c:82:05:3e:19:49:19:b1:45:48:53:6e:ed:
bc:4e:60:60:a7:2c:14:b0:5e:d3:cf:01:4c:84:f6:
b5:3a:96:03:c5:64:da:21:9a:3a:ca:a1:29:fe:5e:
2c:d8:bc:af:e4:39:7e:70:68:f4:f2:e2:be:a4:ce:
b2:3c:4c:7a:1d:d8:07:bf:5c:f4:fa:c4:98:fb:4e:
24:1d:06:51:68:d1:41:03:9b:5c:4f:47:47:60:1a:
0a:56:fc:e3:41:d5:12:08:a3:13:d6:95:e9:05:d1:
2e:11:1c:21:92:15:aa:37:7b:e5:b9:5c:fd:1b:ca:
f5:2a:7b:57:e4:73:05:33:d5:60:ca:2f:31:57:6e:
28:3e:93:e7:9b:43:e4:63:ba:e9:41:86:fc:f7:61:
9c:97:14:4d:a9:b7:da:04:a0:c1:3d:b9:90:8b:8a:
9b:79:d9:5d:47:1b:98:ab:03:17:37:4a:15:66:6e:
52:b7:93:b1:a9:cd:6b:51:06:8d:de:05:db:ac:aa:
e4:7a:a1:a3:2a:4e:8c:c5:24:49:e6:b2:ae:74:5f:
3f:eb:1d:98:23:0b:cc:4b:71:3e:49:60:55:19:ac:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A7:B6:C9:CC:34:3C:B8:36:0B:13:B5:8D:66:40:63:29:C9:B9:EF
X509v3 Authority Key Identifier:
keyid:49:59:6C:EC:C2:1D:D0:26:77:A7:27:EF:37:F0:68:95:46:EA:50:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVls7MId0CZ3pyfvN_BolUbqUJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/SVls7MId0CZ3pyfvN_BolUbqUJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:82:78:62:7b:d3:92:5c:12:f5:d5:57:69:78:55:fc:5d:21:
e1:28:94:6c:fd:93:b0:95:81:67:01:58:8c:80:a7:18:cd:ec:
a5:f0:9a:b3:59:79:46:7d:ec:34:c9:21:f4:59:9b:c9:13:03:
ed:3d:35:b1:94:f3:b6:97:5c:57:fe:6b:e0:b7:00:b2:01:d8:
07:42:0d:2d:35:0a:94:bb:f5:f2:98:3d:4a:6d:87:df:2c:c7:
d8:d5:bc:9f:0b:4d:df:2a:5b:3b:83:a4:93:bf:fb:7e:00:c2:
bc:16:a4:6a:17:4b:b8:32:21:3a:d6:ca:64:20:dc:8a:db:b7:
b5:69:1f:f9:ec:be:66:14:71:a4:b4:59:67:a4:be:83:bb:f5:
49:6a:31:f0:35:e4:a5:2c:ba:69:a5:ec:31:79:81:09:6e:8a:
4d:6c:23:6a:0c:8a:af:bc:e7:23:8a:6e:b0:07:77:96:1d:e1:
72:1a:b5:12:69:fe:d9:a3:da:aa:84:de:3c:96:ea:35:1b:04:
f1:ad:20:98:be:3b:fa:75:d2:ba:10:70:d4:ea:79:ec:be:62:
91:7b:81:e5:3b:d8:ff:93:d4:74:3e:6e:d9:34:7d:68:5c:66:
f3:d6:ec:98:0a:00:19:93:2d:12:1f:bb:ab:c5:87:79:d0:7b:
65:14:37:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:51 2025 by rpki-client