Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
File: edFXhuZE1JfLeisyU71D2S5Jxas.mft (raw, json)
Hash identifier: jiiueLBEv9MvkTS4H0PZWBvTGw/k1Dy4PmOugKwuV64=
Subject key identifier: 1F:D4:55:08:27:60:10:F6:05:80:EF:B9:55:DD:20:CD:FC:8A:E9:59
Authority key identifier: 79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
Certificate issuer: /CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Certificate serial: 019A4DAAF9E05EC5F51F223817ABCE64F4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 07:00:41 +0000
Manifest this update: Tue 04 Nov 2025 07:00:41 +0000
Manifest next update: Wed 05 Nov 2025 07:00:41 +0000
Files and hashes: 1: V7sEyI8F_t4vSol_353f4Qx9U_8.roa (hash: 4ldqZs123aYTDkKfZo5JSLa9NcK75X2sS/vo6vIQh/0=)
2: edFXhuZE1JfLeisyU71D2S5Jxas.crl (hash: KlXW8cIA02zb4smOCirxHArCs9i1Y5P8AVE/jp0GCQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:f9:e0:5e:c5:f5:1f:22:38:17:ab:ce:64:f4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d15786e644d497cb7a2b3253bd43d92e49c5ab
Validity
Not Before: Nov 4 07:00:41 2025 GMT
Not After : Nov 5 07:00:41 2025 GMT
Subject: CN=1fd45508276010f60580efb955dd20cdfc8ae959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:d2:9e:cf:34:63:33:f3:ef:65:72:3d:3b:
25:35:38:2b:16:d2:bb:ac:9c:97:2b:89:38:af:38:
a4:22:1a:40:e9:37:56:7e:33:ad:2e:c1:47:39:4e:
39:0f:3a:e0:1f:9d:4a:94:e2:2d:53:dd:d3:b8:b8:
46:6d:45:76:9b:95:51:dd:20:8b:5e:61:ed:12:17:
a4:d7:47:fa:0f:0d:22:21:02:eb:53:77:7c:70:85:
11:93:68:bc:74:0d:52:cd:41:cb:38:4b:63:a9:3e:
ad:34:0a:50:6b:86:bb:85:0a:e4:58:62:2b:76:91:
b8:3c:ee:6e:85:88:6b:37:9a:30:e1:e7:be:20:64:
b7:95:5a:74:79:07:9b:e8:23:1a:df:81:e4:ae:9b:
9c:46:6b:5e:01:ae:1a:f8:55:4e:1e:b6:4f:a7:ec:
e1:b5:96:f8:a3:3e:31:7d:2c:c8:1c:bf:cb:21:0f:
14:aa:aa:92:15:4a:df:08:2c:b8:f7:61:fa:c0:a2:
ad:69:39:d8:1b:65:a1:72:b7:53:b9:ce:37:bf:1e:
e1:d6:b3:84:fd:11:72:24:51:b5:8e:a3:f2:4c:2e:
0a:2a:1b:a1:42:56:68:22:a0:c2:7f:86:70:e7:86:
c3:3c:8f:09:e0:4d:fc:d8:02:9b:cc:e0:95:01:23:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D4:55:08:27:60:10:F6:05:80:EF:B9:55:DD:20:CD:FC:8A:E9:59
X509v3 Authority Key Identifier:
keyid:79:D1:57:86:E6:44:D4:97:CB:7A:2B:32:53:BD:43:D9:2E:49:C5:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edFXhuZE1JfLeisyU71D2S5Jxas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/972da1-c2c3-464e-b13f-f2af51163a60/1/edFXhuZE1JfLeisyU71D2S5Jxas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:84:f3:7c:0b:ec:1f:53:79:e3:bc:7b:7c:83:37:0f:e3:7b:
ab:18:78:3e:e7:11:e6:05:9e:d5:dd:90:c3:fe:78:54:b1:b4:
bf:b4:eb:61:1a:a4:bb:13:e0:05:d1:c6:b3:3c:29:e1:f2:90:
6f:e0:c4:49:f5:91:7e:89:65:f8:be:10:e1:4e:db:d4:9b:ec:
d7:4a:cd:2f:4a:59:38:9d:3a:91:74:a3:9f:bc:73:66:a4:87:
a1:28:39:21:d5:3f:e0:94:14:6b:a2:63:33:d0:07:23:d3:e2:
38:70:e7:a2:b7:a3:58:d5:8a:73:7c:ac:0f:0b:ee:e7:d6:7a:
18:3c:32:d5:00:ab:b2:30:bc:d8:c6:05:b8:fa:73:a2:a2:bf:
17:03:ce:4a:55:ef:12:01:0f:ae:e1:40:a1:c5:03:51:48:2f:
6c:c4:7a:c8:0b:86:8a:73:1b:b0:e0:a6:64:1d:fa:08:79:cf:
f8:2f:d7:40:f1:c3:ee:28:87:10:31:17:60:34:08:be:c2:f2:
02:67:40:3f:21:aa:b8:49:3d:6a:fa:4b:4c:b5:44:ef:f7:f4:
1b:9d:3e:f0:10:bd:eb:44:a4:64:1c:25:ca:66:de:10:bd:97:
f2:f1:d8:cd:f4:80:b9:df:91:49:e7:f7:77:73:46:65:30:1a:
bc:cf:c8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:03 2025 by rpki-client