Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: DZEUIQ8+2ignIyxk6q4NSCkh2VS+CKG/AjlEt9Okpp4=
Subject key identifier: AD:5E:99:75:93:AC:36:51:DC:48:5F:D1:FE:FF:D0:62:AB:CC:8F:A8
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 019A4D7483BBD6130C0EA0847C5F3A4E24EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 14F5
Signing time: Tue 04 Nov 2025 06:01:12 +0000
Manifest this update: Tue 04 Nov 2025 06:01:12 +0000
Manifest next update: Wed 05 Nov 2025 06:01:12 +0000
Files and hashes: 1: 1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa (hash: P+X7bk4xVC2G2mv0GzrMdTNr5FMbR6w5BMTW58Igvfs=)
2: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: ZPdZQc2NLsPqc120v+J/a4H/jTKXn/qN33KVbd9eKHI=)
3: _GP8StenfvBJOKnQr7M_P7qAzf4.roa (hash: kdSVEH13j0prqXPkHz8Kr5u7PPDHiQCPmIC83dYc1oc=)
4: fzev7_a9OYyMIFNofQlw5RVoFZM.roa (hash: 10wzAQdx79ulrqhu3JqofOZW6+gKOGXZaHawTm1W9iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:83:bb:d6:13:0c:0e:a0:84:7c:5f:3a:4e:24:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Nov 4 06:01:12 2025 GMT
Not After : Nov 5 06:01:12 2025 GMT
Subject: CN=ad5e997593ac3651dc485fd1feffd062abcc8fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:29:9f:42:96:a9:4f:63:57:33:a5:5c:31:
43:00:a7:68:b2:7d:df:c2:91:e8:1c:ca:69:97:67:
c9:26:ad:2b:d7:33:58:b4:72:c2:48:e7:fd:6c:f9:
33:00:d5:29:02:23:d1:02:67:9d:64:8f:6d:78:55:
26:77:d9:fb:a9:8e:36:ef:85:0f:ca:86:b0:a4:f3:
7e:cb:80:af:82:57:f7:0f:64:c7:99:27:be:ac:58:
20:f2:10:0c:87:54:40:2b:ef:31:92:b1:dd:94:0f:
26:27:5d:29:c3:24:00:18:b9:f3:43:2b:1e:72:01:
24:29:a9:70:52:b3:51:7b:2c:57:6e:cd:e5:c6:41:
15:ec:b0:f2:60:bf:ac:a2:64:f3:f4:07:49:2c:7f:
48:3f:19:bd:23:25:4b:03:95:83:20:1f:c2:d7:db:
4c:7b:b6:b4:14:14:11:ca:05:5d:23:05:c4:68:84:
18:20:92:6c:60:97:31:96:59:1c:53:09:fc:f4:5a:
ee:2e:53:ae:75:12:c4:3f:36:15:b0:77:de:3f:cc:
ff:87:5c:9c:1e:bd:34:ee:92:97:1e:83:e3:96:d7:
0e:c0:4d:5c:5c:87:dc:3a:0c:a3:5d:70:b7:f8:6a:
11:67:fa:ea:d9:6e:b9:3b:c2:5f:4d:bc:23:9a:c9:
9e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5E:99:75:93:AC:36:51:DC:48:5F:D1:FE:FF:D0:62:AB:CC:8F:A8
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:61:7a:51:69:26:e9:90:87:22:47:65:c6:b1:66:34:49:28:
29:d9:9c:1b:95:71:fb:6f:9e:67:c9:22:38:6b:ab:c6:66:57:
68:dd:35:ff:26:f3:d5:4b:02:4d:46:a3:2a:ef:ab:da:7a:a4:
fb:e0:03:87:db:a7:84:87:c6:b3:24:7f:e2:f4:8d:75:c9:d4:
0f:6d:c3:30:ce:7c:e0:4f:ab:54:89:87:05:aa:0e:d6:60:a0:
27:9f:eb:3d:34:e1:c6:56:59:ca:a7:aa:c5:1b:42:d9:6a:be:
94:8d:b4:14:00:e2:0d:97:7b:68:44:c1:66:ec:65:4b:28:ca:
33:fe:05:84:1c:b2:81:d3:b0:06:55:53:ec:57:38:ca:77:b3:
8a:10:76:cf:18:f5:f3:8a:e1:77:3b:71:e3:d8:21:29:ce:19:
e0:19:64:58:21:df:f4:c8:f5:61:68:ea:57:0b:5a:3d:6e:bd:
7d:88:0d:00:fd:92:5f:e6:92:ac:eb:66:f6:d5:c2:45:ca:39:
8e:dc:b6:f5:de:91:43:11:9d:d5:26:55:d8:0a:22:1a:4b:d3:
68:18:38:6a:07:6b:3c:f2:06:46:52:dd:bd:64:8a:a8:3f:52:
9f:eb:ce:e6:98:54:70:f0:d1:01:78:fd:71:ad:24:24:6b:6c:
33:a5:3f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:22 2025 by rpki-client