Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
File: 7x8BiBtzyOm12SI5IppuUS7KTnw.mft (raw, json)
Hash identifier: /7gSjwiGhmqrRJI+qKpOSBFogzl/voYEe3UL91B7GhI=
Subject key identifier: 95:1D:64:DF:A6:2C:70:01:A7:CB:57:99:30:4D:4D:02:94:51:D1:3B
Authority key identifier: EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
Certificate issuer: /CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Certificate serial: 019A53ACFADC002D88E674B8A2B350B6C4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 11:00:36 +0000
Manifest this update: Wed 05 Nov 2025 11:00:36 +0000
Manifest next update: Thu 06 Nov 2025 11:00:36 +0000
Files and hashes: 1: 1vUfYa7ohoVbSwGgaxISYNQJ4rU.roa (hash: wuJzjrI9EaOKpfz53i0KZN8DZtLqoyJbku8WdDvpazs=)
2: 7x8BiBtzyOm12SI5IppuUS7KTnw.crl (hash: FS3DIenprwq/RTHM2NgXpIVVXUpeB35xz9hjwoiCbCk=)
3: Fvx_jJCdTF_pvu2LbWU3LmH0H8o.roa (hash: cMc5/+uI8EwNJg30oKHwLh7pnaj9wAcQ3DWjnpzREXo=)
4: UAMozedMddnvbaHXdpt5f_TDvZE.roa (hash: C7OBU+9hOWyvCkQ42eXork8FUbOcNdFjL8raQWMxSpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:fa:dc:00:2d:88:e6:74:b8:a2:b3:50:b6:c4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1f01881b73c8e9b5d92239229a6e512eca4e7c
Validity
Not Before: Nov 5 11:00:36 2025 GMT
Not After : Nov 6 11:00:36 2025 GMT
Subject: CN=951d64dfa62c7001a7cb5799304d4d029451d13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e3:44:ad:6f:4a:51:05:5a:fd:df:3b:26:3b:
a3:c8:ab:8a:39:91:ee:90:a3:c8:e5:bd:32:7b:a0:
ea:1c:db:45:23:38:5b:93:66:75:f8:cf:99:b6:41:
5c:d2:ea:c5:32:fe:46:8d:f7:5d:27:90:a9:b7:6d:
fe:fb:1b:ed:a5:70:7d:5c:01:cd:28:00:91:5d:54:
75:87:e3:a6:2a:c5:27:6f:fc:13:78:f2:1d:4b:ed:
9f:f4:43:af:70:c3:e2:4a:e7:10:a5:dc:b2:59:88:
15:4f:7f:4f:2e:5f:4e:fd:24:38:4e:ab:b4:aa:67:
4d:da:a8:75:09:8c:6b:34:bf:c4:db:91:14:b8:b0:
8f:91:85:da:9b:d1:45:e3:8d:82:28:b3:19:9d:86:
0e:84:7d:3a:35:d6:0a:c7:5e:37:3e:f3:c7:36:65:
4f:0d:fb:7a:a0:b3:0f:5e:cf:4d:58:8c:d5:c8:d3:
bb:04:fe:23:56:f1:ac:2e:64:bd:5e:5d:f3:3e:d8:
dc:3a:e9:c8:89:a9:19:81:17:97:0f:34:75:97:dd:
5a:10:1e:1a:ed:93:c5:6a:55:33:4d:7e:87:96:25:
c7:2c:52:92:76:81:bb:c0:95:ca:55:63:90:0b:ed:
80:ae:62:07:d2:ca:33:0b:2e:e5:36:68:19:1f:9e:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1D:64:DF:A6:2C:70:01:A7:CB:57:99:30:4D:4D:02:94:51:D1:3B
X509v3 Authority Key Identifier:
keyid:EF:1F:01:88:1B:73:C8:E9:B5:D9:22:39:22:9A:6E:51:2E:CA:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x8BiBtzyOm12SI5IppuUS7KTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/675399-81be-4fec-9f86-55131cc1efea/1/7x8BiBtzyOm12SI5IppuUS7KTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ed:c3:04:dc:bb:f9:cc:ba:50:61:28:dd:d9:46:32:9c:36:
f1:b9:cd:a3:b0:27:fa:59:c2:bb:59:7a:67:e3:d0:58:e2:46:
d6:6f:27:85:2c:4d:ca:f6:4c:0a:51:11:31:ea:a2:b0:73:33:
e8:df:5c:3f:cb:8d:0b:e8:3e:8a:28:ff:57:68:06:db:7d:f1:
59:ec:01:5c:d4:cc:a6:7e:31:8c:a3:37:2c:e2:72:ba:98:5b:
8e:86:4a:d2:af:1c:3b:2d:5b:99:07:45:2d:20:28:4a:95:ae:
1d:2e:0f:a1:95:05:9a:8b:ad:37:f2:f1:5f:2c:a7:63:b5:1f:
6c:84:a7:73:55:d6:6e:e6:e8:41:01:62:df:fe:79:13:83:86:
55:f8:11:38:43:bd:ac:92:e3:77:65:c9:43:83:d0:b7:2f:fc:
d2:b3:44:19:49:e8:b6:c2:82:30:5f:e8:d9:f0:7d:8a:e8:da:
44:2d:cd:09:99:55:98:c1:ae:d7:13:c5:17:d4:5e:84:2d:be:
0f:76:fe:a0:a3:f2:90:c8:c8:19:bb:8f:a7:0a:21:d2:ed:6b:
f7:d2:2b:1b:c7:1f:03:d5:13:66:79:ca:9f:c1:b7:9b:89:97:
8b:f7:d0:a5:ec:ec:5f:cf:e1:f6:01:d8:74:a3:97:30:75:88:
76:25:57:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:55:52 2025 by rpki-client