Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: SQCrq1FurbJF2hsxJzlY1QEuVbUkOD/Ni0CN2H7Ljcw=
Subject key identifier: F5:39:5C:5C:60:FD:5D:1C:08:E9:8E:27:85:FB:1A:0D:5D:2D:C1:13
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 019A4EF52D25C14DA56CC4A48F3FE0865378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:21 +0000
Manifest this update: Tue 04 Nov 2025 13:01:21 +0000
Manifest next update: Wed 05 Nov 2025 13:01:21 +0000
Files and hashes: 1: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: vrhX5l/neaEXXQyJcvntqDLZdKm0lki/glZZmNcUXxo=)
2: fwhTjjRIhEdJ6uOffHkJ9IbiBcc.roa (hash: uAg9kNvS0wjEdBKrNfsh4Pl1caTWWUTWPoPoJJEyRFk=)
3: tmBvyCU9dS1RGbck9AhZ77ixbZ4.roa (hash: LYRTheb+KiohViLX8r9l59ZvW37F3uyl1qPERmyYOaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:2d:25:c1:4d:a5:6c:c4:a4:8f:3f:e0:86:53:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Nov 4 13:01:21 2025 GMT
Not After : Nov 5 13:01:21 2025 GMT
Subject: CN=f5395c5c60fd5d1c08e98e2785fb1a0d5d2dc113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:83:e1:dc:6b:26:fe:aa:36:be:d9:45:64:
4b:a8:56:83:cc:1a:e9:32:41:08:de:8b:9f:20:cf:
b1:6d:56:ab:d7:f2:ab:5b:5b:71:44:46:b0:63:0f:
ee:ce:ba:06:09:01:8b:c7:b8:71:85:03:69:c5:54:
d1:a5:f0:82:82:64:6c:3e:f6:ff:88:de:96:c5:f5:
85:bf:3a:89:35:be:ea:7d:60:ac:a8:b9:ba:ae:89:
21:7f:62:91:d0:90:a6:8a:92:2e:2f:e2:77:6a:54:
93:94:f2:1c:a0:bc:a4:b2:5a:8a:80:c4:47:74:39:
a9:d5:c3:1f:47:51:e6:88:52:44:a2:ab:a9:12:ae:
ca:39:3f:3e:1d:1c:b0:a7:ff:82:6b:01:3c:59:c7:
c3:b6:0a:87:17:9c:e4:ed:33:ee:e8:72:d2:39:d8:
84:a0:24:99:81:e4:16:f1:9c:0c:99:33:dc:d8:0b:
4e:5d:0f:83:fc:e0:d4:ca:20:ae:26:5b:1c:93:62:
eb:69:d2:79:1e:94:0b:4b:8f:01:74:a2:73:ff:cc:
36:a4:60:2a:c6:bf:06:48:7d:ad:43:8a:6f:41:ef:
6b:46:d4:f9:e4:a9:a7:d5:b5:52:e8:7d:2d:1e:da:
f9:e5:22:f6:03:8b:11:1e:be:76:f9:16:85:89:ee:
fc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:39:5C:5C:60:FD:5D:1C:08:E9:8E:27:85:FB:1A:0D:5D:2D:C1:13
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:02:c4:92:94:4d:08:27:19:69:d8:d4:66:4b:5c:56:f5:11:
1d:10:0f:2e:c1:c7:1b:39:32:80:44:fd:fe:6f:d8:5c:97:3f:
1b:bf:ca:4c:d7:9a:38:1f:61:d9:2d:c1:07:c9:0e:d7:cd:a9:
54:a2:64:ba:16:ac:7f:62:79:3b:03:4d:f6:af:46:b5:a4:18:
a4:c7:75:0d:16:bd:fb:eb:80:6c:d8:50:2c:65:ec:34:24:27:
ff:0c:45:9d:bb:73:77:2a:bf:8f:bb:71:32:e9:9a:57:87:db:
43:79:c0:98:63:a6:27:00:5c:66:72:91:0b:0b:47:a1:38:0a:
82:0b:2f:82:ed:75:36:c3:7b:17:2d:b2:7a:74:80:af:67:94:
f6:ad:82:9b:0b:e6:85:e8:89:1c:4e:fe:10:55:5c:b7:11:65:
22:07:17:2c:04:ab:1c:13:5e:3f:2c:7d:58:8d:ac:23:46:69:
17:5b:38:a4:8d:53:80:df:0f:a8:10:58:ed:05:cb:a0:62:bc:
26:b8:cb:83:31:ca:69:b2:94:7b:a4:54:2c:4e:63:f1:71:70:
f2:b4:1c:74:a4:e1:fe:a5:a0:b6:5c:00:17:cc:a6:69:53:dc:
e1:b8:03:3d:44:d4:45:a5:8c:ba:3d:66:32:7e:77:2a:58:b4:
25:3c:88:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:05 2025 by rpki-client