Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier: QwEjRtdqzKGlcvBbq+fC73x74A/OrPvwlvLpAhTegpA=
Subject key identifier: 5A:1A:C7:F3:F5:68:F2:60:50:8D:9B:F1:32:AA:9F:2E:8A:37:B5:5E
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 019A50E3CF185FAD5B2AF9EA5D5422210453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number: 10FF
Signing time: Tue 04 Nov 2025 22:01:38 +0000
Manifest this update: Tue 04 Nov 2025 22:01:38 +0000
Manifest next update: Wed 05 Nov 2025 22:01:38 +0000
Files and hashes: 1: LghvM2HkoxwkfnMrVuGOmbXEEys.roa (hash: 1OZRBAIe8Cgw+ndoc+DfU+Xu6V9sRaXB9Lxh1AlcmzI=)
2: OalAb_NOtnnw1Uf7t2E7JPJ6VoY.roa (hash: /2DSINFIyLLAuWT+NSN2AERglHoq5WMezjiuaEAGBLc=)
3: UMwJfotBVzQ9ei8MWZTF-MMyZ9s.roa (hash: 7E8VN4G/FyL9Hwi63NY6rXsJXVoge0Qr5gQg0WbzGjo=)
4: YLlE5pxTdS6tg_rMJZiHRJCBtz0.roa (hash: Bw/ViWsgEqyxUU4QLJ0NfAmaEK6jP82CD1tF0xNBYgI=)
5: i0UQOeJ6YNtAxZECZiMmxjiaF3I.roa (hash: Tq5saoxoAZ2SR0wF+u5fAsszTDxNlUp7BPSS54+/SOc=)
6: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: hBvCu3A4uLfSKd8zz6Xm3eQg49MrjSnaSAkhsAP2BEc=)
7: pvwfGfIGO0NkgGvmujHM737V_EY.roa (hash: 8/XbrvFS8MorMNpio1PdeXOcDn2Zh23ItADh06c9qJQ=)
8: qOY7wbeKs3nIQqhImhSE17lPdCk.roa (hash: jaqajIIr+ngeFDOwuzVR6399SRRk8jyurbScXxLtxAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:cf:18:5f:ad:5b:2a:f9:ea:5d:54:22:21:04:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Nov 4 22:01:38 2025 GMT
Not After : Nov 5 22:01:38 2025 GMT
Subject: CN=5a1ac7f3f568f260508d9bf132aa9f2e8a37b55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:4c:8d:d2:fd:ba:5b:a8:9f:aa:4d:b8:f5:
02:14:50:63:9e:8a:7e:7f:0d:f5:cf:84:86:21:03:
c4:de:c0:2a:b0:f3:0e:ba:47:e5:57:8f:c0:af:6e:
17:6f:6f:37:c3:78:58:d4:7c:2b:41:d3:86:23:da:
18:9e:7f:20:67:fe:b1:5a:3c:15:bb:ca:04:8a:95:
d2:10:ae:2f:ed:ad:27:1b:ba:1b:f7:9c:33:d0:64:
a4:37:e3:a9:6e:dc:9c:15:4f:eb:12:01:76:97:18:
ee:dd:5f:0a:c1:11:26:c1:3d:92:12:ef:78:93:4b:
64:c4:ee:16:54:0e:a8:9c:a1:88:f7:24:00:16:af:
45:bc:65:a5:46:8b:7c:1b:76:9a:05:4f:24:07:94:
a0:78:30:c9:a0:25:e4:a0:a4:ee:65:66:c5:99:57:
a1:b5:bb:9e:a8:41:6d:19:d8:08:ac:93:49:5d:57:
9e:d5:8a:08:9d:50:9a:75:3d:72:c9:3f:70:14:c6:
9d:5f:fb:84:74:c7:0b:ce:1b:c9:26:24:be:bf:bc:
45:99:98:3a:1b:40:87:17:9c:84:9b:c1:57:c9:0a:
c8:ec:de:41:76:2f:07:20:a1:73:e2:c6:84:fe:d5:
35:c9:e9:3e:da:f8:c2:d9:f0:5d:75:4a:f4:9f:73:
63:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1A:C7:F3:F5:68:F2:60:50:8D:9B:F1:32:AA:9F:2E:8A:37:B5:5E
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:67:63:1d:e8:e2:62:7c:6b:0a:ed:92:55:3a:2b:f7:27:9c:
b4:20:77:2d:f2:d4:6a:7a:29:f3:8b:5b:88:97:67:2d:b0:32:
f0:63:f0:35:8f:cd:b9:ae:6a:6f:0f:c6:a0:cf:79:ee:ee:b6:
f9:83:96:74:17:a1:74:77:2a:06:79:1c:1d:9c:cc:1c:a5:a5:
18:28:eb:b7:a1:68:2c:9d:b0:fa:8a:73:ac:80:9c:ce:d8:f6:
01:f2:53:26:73:15:9b:bc:98:24:10:dc:16:7b:fc:26:f5:45:
8e:2c:69:27:e3:0b:77:d1:ff:c1:d4:d6:ac:39:6f:5e:0d:c7:
42:bf:89:51:4e:17:d1:a1:d2:de:99:ae:58:4b:da:df:c2:e9:
ed:30:8c:b0:7e:b5:36:b2:ad:f6:02:1f:42:34:96:6f:94:71:
cf:e6:b6:90:61:e0:0f:6e:4a:d4:22:d7:a0:b6:2f:02:0a:0a:
e2:1a:c5:0b:f9:6f:d8:e5:cf:a1:af:7b:78:17:ae:e4:7d:b9:
a0:a8:3b:51:58:d6:f2:c9:90:a2:ad:22:7a:0b:25:42:2c:0f:
00:70:6b:50:7e:63:08:f0:04:3d:cf:53:c8:f9:af:d5:72:16:
9c:6c:f0:75:42:a2:7e:de:44:74:17:33:b2:1e:36:5c:40:37:
7a:56:96:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:54:17 2025 by rpki-client