Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
File: s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft (raw, json)
Hash identifier: tEphlA4vBascHUc058PZIZnp18eTJbfwxxchYWk9JlI=
Subject key identifier: 0B:6B:26:15:92:31:D2:C5:8D:6C:77:1A:5A:9C:5A:52:11:2C:DC:FB
Authority key identifier: B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
Certificate issuer: /CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Certificate serial: 019A54C083FFD4818DA8B4D6387DC4A20307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 16:01:34 +0000
Manifest this update: Wed 05 Nov 2025 16:01:34 +0000
Manifest next update: Thu 06 Nov 2025 16:01:34 +0000
Files and hashes: 1: s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl (hash: vcHAT+ttAY0YfHQkrksZZPmd5UQejZj7jmm3hdwDq/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:83:ff:d4:81:8d:a8:b4:d6:38:7d:c4:a2:03:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Validity
Not Before: Nov 5 16:01:34 2025 GMT
Not After : Nov 6 16:01:34 2025 GMT
Subject: CN=0b6b26159231d2c58d6c771a5a9c5a52112cdcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:b1:9b:d6:c4:e0:a1:1a:26:a4:36:ec:88:
d2:ff:bf:a7:98:99:6c:78:70:09:40:03:fc:52:9e:
35:1a:23:2f:87:f8:5d:85:98:81:d8:e1:64:eb:1d:
c4:9d:31:13:5d:56:a4:24:07:c9:55:41:56:bd:69:
f2:f1:65:8f:b3:0f:7c:cf:5a:45:05:f0:dc:9e:34:
8d:73:1c:ef:ae:bd:d2:07:2e:31:20:19:a5:a3:cc:
f9:c3:54:67:ef:25:6c:c1:87:ae:81:7b:62:da:8e:
fa:aa:3d:fd:2a:e9:05:6a:06:4e:87:22:9d:8d:51:
75:c1:3c:47:47:5f:7e:c9:ce:0e:41:66:1c:7a:17:
1e:63:ed:9e:4d:d8:16:7f:94:e5:ef:19:35:1c:29:
e8:2b:cb:cb:3e:0a:c3:6c:c2:f4:e8:ad:42:6f:63:
3b:77:ad:fb:d8:18:2b:92:bf:85:e1:45:e2:6d:36:
1c:e9:ad:89:98:c2:bd:b4:f7:08:41:16:23:28:a4:
35:d7:21:bb:22:c5:d8:21:27:9e:de:0e:c3:d5:8f:
01:23:73:87:b6:4c:9f:ab:64:c1:b0:12:b4:c7:ed:
a1:37:ea:ee:4e:a3:32:b2:c0:4c:8e:5a:91:13:df:
84:c0:08:ea:86:c8:da:19:df:7c:ec:16:41:e3:01:
bb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6B:26:15:92:31:D2:C5:8D:6C:77:1A:5A:9C:5A:52:11:2C:DC:FB
X509v3 Authority Key Identifier:
keyid:B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d7:5c:7e:6d:d9:b5:9f:70:8e:01:9f:ee:d1:da:1e:2f:46:
1b:d5:b0:46:0f:ea:ef:9e:71:3a:b7:c6:0e:0e:42:b6:79:92:
c1:0e:00:e4:bc:11:3e:cc:b4:88:81:74:e7:14:46:82:d4:11:
bc:21:17:94:0b:08:f5:ef:3d:e9:42:1e:69:68:0b:0d:94:5d:
fc:1f:20:6f:c5:fc:89:7c:4a:1a:1f:b8:1f:8f:a9:da:4b:cb:
a8:7c:87:c0:0a:48:cc:a8:35:7b:d9:67:81:12:67:c9:5a:01:
b9:a6:61:16:2b:5d:bf:19:a0:86:20:23:ae:b2:a5:59:e6:08:
12:0d:18:4b:4f:5c:7d:f5:3f:00:0d:8e:b8:f3:4c:d6:52:43:
b6:1a:ec:e2:75:28:83:05:c3:a2:24:bd:25:c0:50:bf:41:cc:
ab:82:a0:1a:0b:c0:b8:f7:06:1e:5d:ba:61:73:f5:44:30:85:
6e:ec:57:3b:45:4e:e9:d8:4d:c5:b9:56:66:f7:d1:4e:48:e6:
c4:77:f4:41:49:0c:1c:c8:1a:19:41:34:a3:68:bb:ea:7a:2c:
01:66:28:34:53:91:0d:53:59:1f:28:2b:77:7a:8c:e4:3d:1f:
df:c9:54:58:0f:7a:db:19:bc:70:9c:32:c7:0a:62:e8:1f:14:
9b:ff:e2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:45:21 2025 by rpki-client