Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File: 7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier: VSgjKRUmDCx7TrEsC4M5SEx0lttQMuMrsTlIGUl91CU=
Subject key identifier: 3B:17:E0:9F:43:E2:6A:E2:B9:DB:98:47:77:24:2C:AC:72:87:71:99
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial: 019A4D73BF6E899296227C0426EFE461CF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number: 084A
Signing time: Tue 04 Nov 2025 06:00:22 +0000
Manifest this update: Tue 04 Nov 2025 06:00:22 +0000
Manifest next update: Wed 05 Nov 2025 06:00:22 +0000
Files and hashes: 1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: Tba+wyhl22+QdmKan6U9sv3PCBCRCXKkkjDvTqvKVr4=)
2: ULNxJvM-wJGOuJON7ivPOpKjWvM.roa (hash: 4PAm04+UjI196vMzGXZVMv+MQU5u1QViV4G3soVxN0g=)
3: qk0RdqiwIc4Pk8WjRSXETbEeD3w.roa (hash: CT5EukhWBYETi8Vaj273DWcEqR9wWanbCPEBswUNZM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:bf:6e:89:92:96:22:7c:04:26:ef:e4:61:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Validity
Not Before: Nov 4 06:00:22 2025 GMT
Not After : Nov 5 06:00:22 2025 GMT
Subject: CN=3b17e09f43e26ae2b9db984777242cac72877199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:97:41:25:52:b5:9f:c7:fb:74:aa:12:4a:
3c:10:aa:39:c8:9c:87:40:c0:5d:46:0e:5e:db:dc:
40:36:82:b3:97:c8:9e:5f:a7:6d:70:24:39:91:57:
9b:db:91:69:9b:b2:be:b1:d8:d9:36:b3:30:0e:7a:
4b:02:3a:82:42:bc:e1:e4:9c:8e:d7:be:f0:ac:cf:
b2:ed:3f:76:f0:bb:76:4b:62:4d:c7:12:04:a2:5d:
7a:21:a8:b2:83:75:db:ac:c6:bb:a3:b4:83:f1:88:
07:81:c7:51:c2:dc:e3:54:02:5c:a4:7f:5d:5b:c1:
7d:02:a8:c2:8e:01:2d:22:da:3c:05:54:e6:0b:7a:
e6:de:03:c4:df:e7:a0:b6:e7:9d:04:e0:3c:37:61:
87:51:29:88:5c:d5:1b:67:5e:7e:21:d4:44:e7:06:
ac:17:7d:df:e8:86:84:80:4b:89:6a:a1:ce:ee:da:
43:58:a5:61:ae:9b:4e:ac:43:6c:cf:01:bb:f7:3c:
1f:8e:ca:17:ed:b3:5e:e0:53:bf:67:38:1f:72:ee:
86:5d:e7:5a:1e:15:b7:93:76:2d:b1:78:64:c9:22:
48:02:70:fd:ad:fd:5e:ae:56:2d:41:76:e1:58:67:
44:92:e6:0d:d5:c6:b3:71:7d:14:60:56:ea:42:74:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:17:E0:9F:43:E2:6A:E2:B9:DB:98:47:77:24:2C:AC:72:87:71:99
X509v3 Authority Key Identifier:
keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:d5:93:16:14:9d:67:a9:02:5e:2b:26:d5:10:33:a6:9e:74:
68:87:70:83:44:f1:7c:a0:64:a7:30:0c:c4:11:95:d4:c3:5a:
88:81:4f:67:80:da:54:4d:8a:a3:f0:41:e3:4f:f8:db:7e:74:
3d:15:30:ab:2a:f0:1e:46:c2:93:5e:f4:53:f0:92:e5:14:f0:
5e:c3:79:05:3a:9e:9b:b2:59:f6:c2:a7:f9:9d:8e:99:95:0b:
80:07:a4:ed:13:26:a1:c6:7f:9d:10:b8:0d:e2:ca:40:0b:08:
77:cc:dd:66:cd:d4:9e:b2:80:1e:aa:e0:ff:27:c0:ba:d7:0d:
d0:50:74:82:91:8e:2f:55:29:ed:f9:6d:15:f3:93:8b:0a:d5:
42:dd:26:c3:3b:b2:af:ac:d3:7c:69:e9:52:89:79:c6:f7:98:
b0:59:ad:af:1c:d1:59:42:9d:11:1c:21:a4:22:de:18:d2:d5:
38:07:18:a2:43:6c:e1:25:13:96:79:6e:7f:79:f7:21:a1:74:
21:a7:50:59:39:2c:7c:9f:a3:11:1a:00:d8:d6:9d:9e:2a:4a:
f1:f1:bd:c9:19:3d:e1:1f:53:f6:68:8c:cf:9e:8c:2d:d6:4c:
11:99:66:bf:00:79:42:1d:93:18:f3:98:cd:e6:07:02:e3:cc:
e9:23:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:35 2025 by rpki-client