Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
File: g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json)
Hash identifier: Ci1lDvzl2RcxWG0X+NpCoBDJ9BuAksugURNT5m7Kx+c=
Subject key identifier: E8:51:86:1E:61:E3:6E:32:38:B7:0C:73:7A:4A:5F:F0:F3:79:43:B8
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial: 019A5150BC24696341C5CFA7ECBDAE9C76A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 00:00:36 +0000
Manifest this update: Wed 05 Nov 2025 00:00:36 +0000
Manifest next update: Thu 06 Nov 2025 00:00:36 +0000
Files and hashes: 1: fYK373nYUB0XvmUvg-oovkxaiNE.roa (hash: xzFxyXs3TjE095d1PcNasH+Goh3HeA3NihMPCGecT0o=)
2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: WIzg/54ffWngP9tH0KjIJLWbTsdm8estdqPdC+OjSpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:bc:24:69:63:41:c5:cf:a7:ec:bd:ae:9c:76:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Validity
Not Before: Nov 5 00:00:36 2025 GMT
Not After : Nov 6 00:00:36 2025 GMT
Subject: CN=e851861e61e36e3238b70c737a4a5ff0f37943b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ee:97:01:3b:5b:dc:a2:1b:30:14:a0:75:64:
05:f8:d9:e7:18:fd:b4:eb:cd:8a:6b:8c:55:02:b4:
22:c3:ef:08:87:97:fa:7e:84:11:4f:42:c4:1d:ad:
45:9d:81:df:d8:fc:68:ac:9a:9a:02:26:68:e5:e0:
bd:3d:50:5d:01:02:0e:c5:44:57:cb:75:26:c1:ed:
23:a7:53:5f:22:e3:5d:c3:7d:aa:38:1b:39:11:30:
a4:40:21:c1:8b:e4:e4:d2:20:a6:38:90:b0:30:1d:
79:f5:f4:0e:44:e1:e4:b4:51:de:74:83:ca:b5:d3:
ff:39:41:cf:3d:ca:61:83:18:db:d8:6c:cd:24:8e:
ef:1d:18:25:6b:bd:85:71:a7:09:29:53:ab:31:f8:
ef:7a:46:a8:3f:dc:80:a1:a7:28:d8:d8:3c:ce:6f:
8e:54:a6:cc:d8:ed:6b:15:01:47:82:14:ee:62:a5:
0f:86:b1:6c:27:f6:bd:d9:1a:6a:53:2e:0e:b6:64:
b3:62:b5:60:90:44:0d:05:d5:58:fb:c8:a3:c1:0f:
7e:ee:c4:f3:56:da:6b:18:54:50:43:c4:20:4d:20:
c7:bb:cf:af:c7:72:44:1e:8f:85:d3:d4:13:02:51:
61:89:95:a2:b3:1c:68:33:a2:96:a6:a5:5a:e2:17:
56:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:51:86:1E:61:E3:6E:32:38:B7:0C:73:7A:4A:5F:F0:F3:79:43:B8
X509v3 Authority Key Identifier:
keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:11:08:8e:98:a6:41:f1:f7:60:8c:49:9c:6c:76:fe:64:70:
2d:56:9f:cc:f7:2b:8e:98:82:a2:8e:db:30:c0:84:e7:82:3a:
db:01:04:96:72:f7:69:40:cb:16:b5:83:db:54:97:ea:4c:7c:
98:4b:2e:4a:a7:36:61:2c:f9:0f:7c:4a:54:d8:3f:01:10:e1:
64:d4:d5:50:8e:3d:18:bf:25:0c:44:13:33:72:d6:df:96:16:
85:2a:1a:fa:5f:f2:a5:83:3d:bd:fc:d3:af:f3:6a:45:fd:b4:
85:41:24:65:a5:ad:20:23:f9:72:22:99:d3:a5:5f:7c:fc:9b:
f1:1f:ea:cf:52:5c:78:46:42:86:3c:7f:db:94:1d:76:b4:6e:
7f:46:ac:68:d5:c0:2f:63:98:90:22:0c:67:9b:8e:b0:8a:41:
81:e2:93:03:88:1d:db:f7:4f:9f:db:3b:a4:e2:d2:9d:7c:28:
e0:92:3d:fe:77:d0:0d:50:f1:dd:e6:92:f5:61:62:c2:40:cc:
f7:c7:9b:95:d4:21:b9:52:da:96:be:e2:a2:86:3c:b5:61:64:
05:e2:7f:b9:4a:7a:b3:1c:cf:d8:d5:0a:e7:93:7b:e9:75:65:
db:da:6d:ef:f6:1a:d4:f9:b7:72:d1:3c:c1:f8:ff:bf:3b:ec:
6b:4f:09:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:18:43 2025 by rpki-client