Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: 8Rd6+h/KabykSqf0iItQy5AvUCZAh+43v7LtwGHtNNE=
Subject key identifier: CF:A5:8E:71:9F:C6:50:4D:F0:63:21:81:FC:6A:26:20:65:64:A8:06
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 019A526354FE26AD70D2881BA4E5F4D0A63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 1717
Signing time: Wed 05 Nov 2025 05:00:32 +0000
Manifest this update: Wed 05 Nov 2025 05:00:32 +0000
Manifest next update: Thu 06 Nov 2025 05:00:32 +0000
Files and hashes: 1: TUphJ-jTdc6RyopsPbQVUooNovI.roa (hash: 5SMLcPW5pd+tHnvqH88hThCDDFketkICiSOllb1LCN8=)
2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: wAtn9o/lZX4/YDLoxY0EwLpSk/Cue6wyyn9wSOEjGP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:54:fe:26:ad:70:d2:88:1b:a4:e5:f4:d0:a6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Nov 5 05:00:32 2025 GMT
Not After : Nov 6 05:00:32 2025 GMT
Subject: CN=cfa58e719fc6504df0632181fc6a26206564a806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d2:fe:8c:0e:06:f0:59:ac:b3:b8:c1:cd:c7:
26:82:13:41:04:c7:60:4b:99:aa:f8:a8:6a:62:fa:
39:88:6c:6b:71:39:be:86:e0:6f:df:36:04:03:16:
73:31:87:90:e7:6a:83:81:b5:45:8f:f4:29:7d:69:
ed:c7:12:18:67:c2:ac:3f:ac:48:92:52:83:b9:fd:
ce:52:20:1e:7b:2f:06:62:08:2b:f5:87:c9:4f:58:
3c:b2:f2:bb:67:8c:be:bb:fa:72:24:98:04:31:db:
59:43:92:b4:f2:2e:0e:2f:f8:a4:00:e0:00:34:0b:
e4:8e:2f:fe:46:d7:e8:d2:8c:8f:54:fc:cd:92:ef:
d9:37:3c:fc:fd:00:f2:0f:64:d4:30:ec:cb:a5:03:
df:18:6c:a3:8c:fa:07:10:f6:bd:5c:03:32:2b:be:
d9:4a:22:fe:de:cc:c4:69:19:60:b3:ad:6b:13:ea:
c4:27:9e:58:e9:4c:b8:c5:69:c9:b5:64:5a:d0:98:
f7:7a:d1:6a:45:63:d4:a6:d2:44:90:a5:8d:20:45:
bd:62:cb:cd:fc:41:42:4d:b4:27:b1:18:87:2a:11:
a5:bf:0b:31:a6:24:11:7c:84:e2:57:d1:31:41:66:
2a:c7:9b:f9:51:38:96:15:ea:67:6d:4e:9c:07:4e:
d5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A5:8E:71:9F:C6:50:4D:F0:63:21:81:FC:6A:26:20:65:64:A8:06
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:90:be:8b:02:0b:37:d8:13:5d:2c:be:40:89:17:99:b3:42:
c2:ad:b0:40:78:37:50:bc:9b:c0:62:00:b2:e8:88:1d:61:d2:
87:75:0a:ef:e2:cd:2c:04:85:6f:aa:59:01:93:8d:81:37:e1:
a9:e3:a9:a0:92:0b:8a:f2:44:c1:f5:36:ab:14:7b:19:1a:6b:
ba:91:9f:d0:dd:fb:e7:f1:e8:eb:23:a2:7a:3a:d9:77:f1:49:
e7:e6:b1:48:53:47:99:ac:90:5c:e5:ae:93:a1:6b:b0:40:13:
90:b2:a1:73:6e:7e:7b:9a:4c:59:75:7c:6d:78:bd:ed:68:46:
d6:86:af:99:4c:c2:8e:cd:c6:6c:ad:b2:c9:cb:0d:69:2a:55:
c4:e3:c1:88:8a:32:5a:88:23:de:f4:ff:c8:eb:95:c9:a4:e2:
af:a7:ca:6a:38:02:c5:77:4a:0c:31:e2:39:53:f6:8f:23:c8:
85:fa:d8:23:e3:4b:8d:45:ba:94:79:a5:91:29:9e:5b:6f:cf:
73:b2:a0:94:6b:40:7f:ea:5e:34:db:b4:38:63:13:4f:94:d2:
86:c3:0f:d1:4b:26:39:e1:0d:60:7b:3c:ae:82:6d:4e:3d:8f:
5e:72:fc:f3:f8:b8:54:45:13:94:03:08:9c:83:82:f8:75:17:
fe:1e:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:18:51 2025 by rpki-client