Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: z6V0ms9+jpLAZJpUHMr6tzRYs5HwgRzRnjoEfKB797I=
Subject key identifier: 13:63:A3:D3:F2:5B:9C:B1:CE:E0:5A:B5:55:0B:6F:53:07:A7:F8:12
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 019A4F98E27938BA308BB2151167A59B9B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 16:00:10 +0000
Manifest this update: Tue 04 Nov 2025 16:00:10 +0000
Manifest next update: Wed 05 Nov 2025 16:00:10 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: 3+nY+RjD91C4Ys9o5EDYem0GVjuceVETz2xvmZzfxb4=)
2: nigLCn7wWT0ueFZoLpA3hlPaWgA.roa (hash: q+VheV55aItc4rpRaaib9XdkzvuIJSEg9slh0BtNQXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e2:79:38:ba:30:8b:b2:15:11:67:a5:9b:9b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Nov 4 16:00:10 2025 GMT
Not After : Nov 5 16:00:10 2025 GMT
Subject: CN=1363a3d3f25b9cb1cee05ab5550b6f5307a7f812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3f:2e:5f:fb:10:e3:c9:77:65:72:5c:90:fc:
e3:b4:48:61:ac:96:97:be:d5:5f:cd:e1:6b:42:ca:
95:2f:54:51:26:1a:5b:07:e3:2c:9c:10:40:0e:73:
39:06:8d:07:82:69:c5:e6:38:4e:af:69:ec:57:c1:
b0:6b:5d:dd:bc:af:ce:69:1e:e6:df:27:62:85:74:
67:52:20:08:cd:f7:79:6f:07:97:03:47:fa:f2:05:
6d:4f:bd:21:bb:68:66:a7:0b:00:b5:6a:5b:d8:8c:
74:cb:f4:b0:53:f4:d4:53:c8:02:67:85:af:8a:1c:
58:fd:c1:25:fd:51:57:3c:ba:45:31:9a:3b:0f:98:
95:73:ed:39:2f:af:97:e1:f3:c4:95:cb:68:fd:70:
8a:a4:41:c3:24:04:dd:f5:ea:d2:a1:29:6c:64:2c:
4c:79:95:2d:94:0e:7f:b8:cf:d6:06:cf:16:1b:ce:
ae:c3:aa:3b:c7:22:65:0d:ea:12:e7:9d:74:c5:39:
7f:42:24:f7:97:0f:0b:2d:37:5e:29:42:ee:f8:d7:
b8:7c:b9:57:c6:96:c0:18:5b:07:62:15:3a:aa:d8:
38:06:01:6d:a5:08:0c:9a:9c:18:ee:b1:13:f5:0c:
1f:6f:aa:29:b2:3e:ee:bb:78:16:82:02:28:3f:fa:
85:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:63:A3:D3:F2:5B:9C:B1:CE:E0:5A:B5:55:0B:6F:53:07:A7:F8:12
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:56:e4:a0:78:eb:dd:58:7e:e3:9a:d7:21:86:df:da:c2:fd:
e8:f7:46:52:3f:05:a7:ea:5c:aa:ee:41:80:b2:67:8a:d3:fd:
bd:b1:bb:29:1b:5a:f6:d6:60:16:ae:6e:2f:21:fa:9f:52:54:
29:09:56:ab:aa:4f:08:ff:6e:74:1d:d7:e8:a0:f6:bd:d4:91:
3e:55:cd:71:8b:04:92:8a:7f:a4:c8:74:41:ad:33:d5:6f:61:
04:30:1e:66:6e:13:6b:19:b0:45:d5:b3:8b:24:3b:0a:eb:ef:
75:0f:3d:9a:3b:7c:81:9b:94:c3:c6:e3:a6:bb:0a:b9:de:bc:
6b:ab:3b:7c:d3:81:ed:16:0d:6a:c3:c4:0c:92:4c:36:1b:c8:
0a:cb:f6:d7:2e:08:bf:35:46:88:37:5d:5c:b7:00:5b:2e:62:
b0:ce:3c:8e:01:92:74:77:a7:8f:6f:54:7a:30:5b:c8:ab:49:
73:2c:85:93:5d:88:fb:f2:a1:4d:9b:ec:88:d7:7f:07:9f:41:
cb:db:db:33:f1:16:32:4a:a5:5a:3a:11:70:24:aa:53:b0:47:
17:e6:06:77:8c:7a:8a:5b:69:88:8c:81:e2:0b:39:3d:5b:7d:
c6:10:14:2b:ff:37:de:cc:36:1a:b2:58:15:a3:c9:dd:5a:df:
ba:c5:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:44 2025 by rpki-client