Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
File: 7etEJKvYbW70jbnnZG9TnG0QyIY.mft (raw, json)
Hash identifier: l6G+p2hAvbB06A0M7SDhpS9oYHO7k94mr86I+NRH864=
Subject key identifier: 59:95:6B:22:72:83:71:B6:F5:B6:24:EF:2E:72:E8:13:76:1C:B1:9E
Authority key identifier: ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
Certificate issuer: /CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Certificate serial: 019A54BF6D3077B088FB088C106273695C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
Manifest number: 0855
Signing time: Wed 05 Nov 2025 16:00:22 +0000
Manifest this update: Wed 05 Nov 2025 16:00:22 +0000
Manifest next update: Thu 06 Nov 2025 16:00:22 +0000
Files and hashes: 1: 7etEJKvYbW70jbnnZG9TnG0QyIY.crl (hash: AQmiTzJgVG4F4htesFtzf7QCpXbXZc+TAnaCmr0HBnQ=)
2: kF-CXYhPs4TYflqMBcCGyzwLA7o.roa (hash: gnSWn3nUIqjsFFoH6d5rK0RwdbfhLh+8DTBzXarX5Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:6d:30:77:b0:88:fb:08:8c:10:62:73:69:5c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Validity
Not Before: Nov 5 16:00:22 2025 GMT
Not After : Nov 6 16:00:22 2025 GMT
Subject: CN=59956b22728371b6f5b624ef2e72e813761cb19e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:21:c6:a7:d1:11:f0:9f:f8:02:ea:a9:08:
c0:12:07:fe:f0:ee:ba:b1:af:c8:6d:73:98:1c:ed:
cc:e4:a6:2e:0d:a6:dd:83:e2:8e:aa:51:ef:9d:fd:
9a:87:e0:94:73:06:7f:49:a8:c3:29:8e:61:20:26:
f7:6a:04:58:51:0c:29:8e:51:f5:13:08:d2:8b:dd:
73:ee:0d:93:fb:23:9f:d9:a7:52:09:47:9b:b3:f9:
1f:83:df:b2:e2:d1:e2:ff:d4:e8:d3:30:b5:39:95:
7c:25:d7:76:e7:4d:c7:ab:94:c2:17:45:51:56:42:
e3:9b:7f:c8:a4:bb:e3:d0:fe:5c:3a:6f:fa:4b:0b:
36:b6:d8:a6:d9:f1:9d:2d:7e:65:5e:17:5e:b1:07:
1a:e0:34:08:06:56:d8:ab:bc:20:a7:aa:97:96:c2:
22:97:75:4e:8e:7c:b2:e4:e5:52:bf:65:7f:0a:70:
0e:d5:21:8b:bc:f3:bc:cc:6e:82:a9:74:8e:5c:4a:
f1:9d:df:da:8d:44:69:76:ef:22:82:5c:c9:e7:92:
c4:ef:10:ba:ce:a0:ec:b0:fe:ea:08:dd:cb:f4:1f:
8e:2e:1a:30:d3:6a:d7:db:cc:6e:35:50:7f:a8:cf:
7b:e4:3a:a9:3d:67:3b:c9:41:04:91:9a:57:d1:8e:
0c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:95:6B:22:72:83:71:B6:F5:B6:24:EF:2E:72:E8:13:76:1C:B1:9E
X509v3 Authority Key Identifier:
keyid:ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:63:b3:21:13:97:b4:8f:b2:39:1c:0d:e3:66:11:17:04:3e:
2f:dc:64:2d:ee:63:77:57:e0:d7:41:6b:c5:27:28:c5:d8:34:
73:4d:93:ca:9c:08:7d:16:d1:61:9b:ca:a7:84:b6:9c:51:34:
ef:4c:e0:8d:22:fa:c0:52:9e:e7:8e:3e:a0:88:f1:38:fe:f1:
39:b1:0a:70:57:60:fc:d1:69:30:dd:df:ab:ce:91:8a:49:e3:
c6:4e:26:e0:6b:41:53:d8:58:a1:48:17:64:ec:65:74:8e:a8:
a4:a0:0e:03:c5:6d:4b:c4:a3:38:e9:bd:30:a8:6f:13:1d:3c:
56:37:f4:a2:72:02:59:b1:a1:f0:0a:d9:67:4a:7c:6a:1a:6a:
d8:31:b9:72:32:9e:44:70:35:48:bd:52:d0:e1:29:a7:58:fb:
4b:b8:9e:6a:d1:67:b8:01:21:f5:4c:f4:15:8c:6a:b0:c9:34:
4f:34:3b:da:95:19:d6:99:3d:09:3c:13:ef:b0:94:fb:25:ff:
bc:6c:f5:0c:29:52:61:dc:67:e2:bf:56:0d:1c:39:af:d3:ea:
22:58:23:01:1f:78:a4:fa:40:35:3b:82:56:5e:3c:e3:ca:b2:
e0:47:bf:f2:25:89:e8:28:f5:5d:64:57:79:7f:d6:f0:54:aa:
aa:61:6c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:35 2025 by rpki-client