Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: XAEccv0tjFITcx1pj6UOMuSLaqI7FJ7xaZ7vmM38tnw=
Subject key identifier: DF:74:83:1A:C4:73:2B:5B:18:15:EF:12:2A:B0:8C:E0:F2:81:02:1E
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 019A52631866A978F7EC254C7C93C15A4546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 05:00:17 +0000
Manifest this update: Wed 05 Nov 2025 05:00:17 +0000
Manifest next update: Thu 06 Nov 2025 05:00:17 +0000
Files and hashes: 1: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: KMo14qO5WG6woE+atM4H5pYONHr8nPHXUW6OFZAhKCw=)
2: jJfOPh4XYz0bStaxv-izcSg_mmc.roa (hash: I9zOxo3FRJE3Zqu7rer6Rr4TRL9Sp9aojJllGRgbeX0=)
3: pp9HRbSEXg1Djpwq9U2x1ut0P3A.roa (hash: eLTqAfDKOrIieHKE4CKftQ8WCB5K7yV6FjmVMCdNg0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:18:66:a9:78:f7:ec:25:4c:7c:93:c1:5a:45:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Nov 5 05:00:17 2025 GMT
Not After : Nov 6 05:00:17 2025 GMT
Subject: CN=df74831ac4732b5b1815ef122ab08ce0f281021e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:31:55:83:c9:97:65:c7:17:1c:c2:32:88:58:
fb:b0:4e:d4:29:66:b4:7e:6f:6a:a2:87:9b:d7:88:
09:1a:4b:3b:4d:22:d5:0a:84:99:8a:41:c3:d3:95:
ea:70:61:52:22:f2:15:95:68:03:6d:2e:db:25:84:
03:68:b0:ae:15:dc:52:22:0b:fb:b8:77:c4:d9:82:
60:16:fd:5e:93:c4:5c:6a:c3:f6:56:1f:97:e0:68:
8b:0c:73:6a:86:0c:bc:1a:ee:63:cd:17:29:67:19:
f9:a4:c1:49:d1:9e:9f:74:7a:36:5a:be:34:d3:cf:
0c:33:0f:9b:4f:a6:1e:e7:5e:11:6f:25:fe:ae:94:
15:c4:30:24:35:45:f6:06:a1:57:56:f7:bf:d8:cf:
8f:bb:48:9c:0b:2a:8a:35:0f:71:ca:20:e0:82:86:
22:9d:51:8b:6a:dd:4c:71:97:b9:ea:7d:34:be:12:
7d:ec:dd:4e:a8:cf:ab:d2:59:04:6c:c3:d1:8e:c4:
94:2b:4d:03:ad:0a:2e:ac:96:51:83:c0:c6:69:7b:
55:1d:4d:36:36:57:12:3a:7c:c1:f5:e8:1e:40:10:
6c:f0:15:18:52:63:5f:e1:13:92:13:3b:62:0a:c1:
04:2e:35:c5:b2:bf:13:3b:8a:1d:32:3b:52:3c:93:
12:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:74:83:1A:C4:73:2B:5B:18:15:EF:12:2A:B0:8C:E0:F2:81:02:1E
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a0:cd:71:6f:1b:1d:85:9c:53:0f:0a:f1:5b:eb:c9:15:f8:
63:8c:9b:bb:7a:8e:9e:4b:60:a9:70:4a:31:cf:0f:fb:01:9d:
89:33:d3:ae:3c:6d:11:1a:6a:ba:55:57:33:66:cd:25:dc:93:
90:80:9e:da:e9:2c:32:1f:86:49:d9:e6:6f:97:c0:28:95:3c:
9b:15:89:03:eb:a2:82:ff:35:1b:d8:d4:ab:b0:b3:68:92:d8:
a2:18:ad:f1:53:cc:f1:b0:c9:9e:6d:1c:4c:b2:92:78:59:6f:
e8:b6:0c:fa:07:a5:38:e2:f0:49:68:09:56:91:08:4a:3f:b3:
64:d1:4b:84:c7:e9:30:17:5b:73:a3:8d:40:22:74:24:1d:83:
93:db:db:3d:55:b6:48:97:42:74:84:7b:08:cb:f0:dc:c4:d9:
81:05:b2:6b:d8:0c:c7:21:32:df:e2:78:e5:d6:2f:4c:36:2d:
43:c7:22:ff:3e:5a:d0:48:2e:80:cb:88:f8:49:49:9d:63:56:
f0:b9:ec:14:02:84:38:fd:ba:55:d6:79:3f:a5:ac:72:00:5b:
83:ba:35:da:92:62:9a:34:ce:45:1f:ed:0c:6d:5c:58:3e:f8:
6f:eb:b0:55:bf:16:c6:f6:67:7b:94:08:9b:14:ee:50:61:a6:
de:44:db:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:08:50 2025 by rpki-client