Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
File: 97wp81OFLRgNI0EJl9DwR-wXeNM.mft (raw, json)
Hash identifier: iyizPIo9GUPR0+W3kB6gwvTXcye5P6hbzNJtiqTtErs=
Subject key identifier: 62:F9:23:A6:06:A3:D4:BA:31:3D:5C:8B:0E:61:D4:0A:CE:28:3F:49
Authority key identifier: F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
Certificate issuer: /CN=f7bc29f353852d180d23410997d0f047ec1778d3
Certificate serial: 019A5150671AF4BE9EF5CA1F98262A422458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
Manifest number: 16A2
Signing time: Wed 05 Nov 2025 00:00:15 +0000
Manifest this update: Wed 05 Nov 2025 00:00:15 +0000
Manifest next update: Thu 06 Nov 2025 00:00:15 +0000
Files and hashes: 1: 97wp81OFLRgNI0EJl9DwR-wXeNM.crl (hash: 9Md8l1ayROVG9648L4+mVeeL52YJzzk9F1FyJN7uWlk=)
2: VAC_6RsE2oq5MD0lqmXv6KCzwDQ.roa (hash: TCLZUvDrgjrJ7J3tgeNK3Sq6QP0EDUXeSD5NVO6xxj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:67:1a:f4:be:9e:f5:ca:1f:98:26:2a:42:24:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bc29f353852d180d23410997d0f047ec1778d3
Validity
Not Before: Nov 5 00:00:15 2025 GMT
Not After : Nov 6 00:00:15 2025 GMT
Subject: CN=62f923a606a3d4ba313d5c8b0e61d40ace283f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:44:5c:f6:fd:1e:c7:ad:49:a0:95:d2:a1:
da:97:2f:41:6e:09:cc:a8:c7:7c:46:e5:92:83:6c:
e3:99:e5:db:c1:da:7f:ef:1d:1e:75:6d:0c:02:f3:
6b:92:30:ee:c3:ef:53:97:24:45:a0:1e:a3:93:ab:
9e:76:bc:61:6f:b8:11:47:e5:19:09:66:06:45:d5:
75:73:b5:c2:47:04:7a:a2:6a:ec:44:15:f1:c1:89:
42:e2:8b:97:9a:67:44:01:7d:6d:58:dc:50:ff:e7:
92:bb:50:2e:75:4f:41:8c:a1:da:ce:87:45:3e:f0:
7d:05:f4:c7:f2:b3:22:0b:0c:7e:47:a4:58:13:db:
7e:26:51:79:ad:e1:5a:d8:05:ce:7e:fb:7f:05:23:
28:80:23:8e:90:50:c7:d3:32:5e:ca:7a:19:2a:eb:
34:44:4d:e6:6c:43:a1:68:00:49:da:65:93:c3:d5:
1b:95:cd:bb:ca:e9:3a:ed:eb:32:cc:48:1d:28:87:
58:4b:c7:a8:86:73:7c:e7:f5:48:c5:fa:38:94:44:
5b:49:b3:29:97:dc:83:9e:f8:28:e8:89:a1:9f:02:
76:fe:53:90:78:7d:d9:44:ea:0f:25:ef:e2:8e:dc:
bb:24:5f:fb:48:f9:7f:a1:2d:18:bc:8d:e6:7c:56:
4b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F9:23:A6:06:A3:D4:BA:31:3D:5C:8B:0E:61:D4:0A:CE:28:3F:49
X509v3 Authority Key Identifier:
keyid:F7:BC:29:F3:53:85:2D:18:0D:23:41:09:97:D0:F0:47:EC:17:78:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97wp81OFLRgNI0EJl9DwR-wXeNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7ed08b-492d-44bf-9e4e-fe573b023fd2/1/97wp81OFLRgNI0EJl9DwR-wXeNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9a:a7:ed:e9:9a:6e:90:11:47:df:b4:cd:c1:37:b1:26:37:
95:be:db:0a:16:1a:8a:ff:71:61:d0:82:d9:75:1e:56:bb:d1:
c2:dd:39:55:fd:bb:c3:f3:a8:18:be:93:52:4b:c5:3f:08:0e:
76:c7:3f:5e:ce:7e:9d:86:66:58:ff:29:06:1c:8f:bb:eb:fa:
b4:c3:e3:08:1b:5e:d2:b9:b7:57:9b:b4:e9:6c:8b:0a:42:82:
da:da:3d:fc:6b:5f:82:0a:a4:19:79:6c:34:72:32:2c:78:b0:
f9:73:96:ef:78:5d:6b:9c:32:77:d8:d0:63:30:cf:d5:ea:ce:
6d:9b:52:95:28:8c:b8:ed:be:10:6a:da:6f:b7:3b:9f:31:17:
a8:f6:ca:1e:a6:75:77:bd:68:a2:96:26:d6:de:e1:c6:b4:69:
51:56:87:db:07:75:c9:49:75:e3:01:10:66:42:6d:8d:81:27:
bf:3f:4e:4d:d0:f9:94:b6:1d:69:ff:3b:a1:53:e8:8d:16:7b:
05:4c:5c:1a:ba:5e:a8:89:3d:ff:6f:a4:35:67:f4:b1:17:32:
53:b6:db:af:32:89:77:8e:f5:ba:b9:14:c6:08:04:c9:80:b7:
4c:4e:b2:7a:18:60:5d:b8:07:49:a3:b3:01:f9:68:d5:75:55:
29:ee:05:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:36:24 2025 by rpki-client