Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
File: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft (raw, json)
Hash identifier: bcjVRPVAFYld++A/DyK1K3AWVAGb05SKaweeueBzcgU=
Subject key identifier: B5:E4:BE:50:3C:E7:53:79:B5:3C:28:60:9A:08:E2:A2:5A:E0:33:9E
Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
Certificate issuer: /CN=edff0ab25662757afb831675319296f63d989b69
Certificate serial: 019A4D3D1E46E5401783E42836976E505714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 05:00:42 +0000
Manifest this update: Tue 04 Nov 2025 05:00:42 +0000
Manifest next update: Wed 05 Nov 2025 05:00:42 +0000
Files and hashes: 1: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl (hash: Ili38UxM0nq8+nht8oi+tSgJNY6zb5FfpjdgzzvJtX4=)
2: HKJ58z8cHDMRoWp61kiI8qNU6_s.roa (hash: xkG+rFTXCO8KSFj1Ggdwhiil4ktc9BxAHUA4oj/CQxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:1e:46:e5:40:17:83:e4:28:36:97:6e:50:57:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edff0ab25662757afb831675319296f63d989b69
Validity
Not Before: Nov 4 05:00:42 2025 GMT
Not After : Nov 5 05:00:42 2025 GMT
Subject: CN=b5e4be503ce75379b53c28609a08e2a25ae0339e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:e7:d7:32:28:25:b8:64:9d:31:9c:22:f2:
05:5f:70:26:f6:64:75:2c:27:b2:8d:ea:1a:4b:4c:
39:64:d6:4d:bf:4e:db:38:0f:39:ac:c0:5a:21:a1:
72:67:ba:0c:f5:a1:96:8c:51:a2:04:b8:d0:96:38:
58:a8:4b:f9:ea:ba:b2:16:60:68:c7:de:61:ad:e6:
1b:e2:e9:c2:49:f4:d1:b3:8d:2b:ee:94:b4:3f:5c:
43:52:47:70:0f:e5:a0:a4:da:51:70:10:74:a1:c0:
3d:3f:0a:c2:ae:44:b4:e5:73:b6:77:f9:54:3c:2d:
4c:86:e6:32:2d:b6:59:85:e1:22:0d:bf:e0:22:95:
b0:54:3a:e7:b9:2c:0e:6e:25:3a:33:62:8d:b6:d2:
ac:f8:85:f8:dd:51:4a:40:a9:c1:9b:a2:ca:72:fe:
50:04:4e:68:43:ae:8a:84:b2:55:73:5b:50:00:26:
ed:7e:64:a7:bc:37:ae:87:6e:c9:89:54:98:bc:6d:
b3:b8:02:52:1d:d7:a3:6e:61:d8:3f:a7:76:81:2e:
21:fd:42:53:35:f4:50:49:f9:62:0b:72:aa:f6:c4:
b8:80:67:89:4e:e3:f1:2e:66:f1:6a:65:59:cc:63:
ba:65:e8:5c:9b:5c:91:06:89:71:f9:1a:f3:98:21:
c8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E4:BE:50:3C:E7:53:79:B5:3C:28:60:9A:08:E2:A2:5A:E0:33:9E
X509v3 Authority Key Identifier:
keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1d:d7:8d:bc:1d:30:bc:d3:7e:d4:ff:a3:d1:1b:47:d5:13:
c1:0c:f7:f8:0a:73:19:d6:c5:d6:d6:0e:67:fe:78:9e:c6:00:
0f:93:74:80:d6:bc:2a:12:33:11:d7:93:49:dc:c2:53:61:5f:
45:f6:76:1b:a9:8a:db:93:c1:b4:0c:05:78:22:e1:85:cd:ca:
f6:0d:2a:c8:ab:b5:a0:0f:72:75:6a:a4:70:f8:f0:ea:24:77:
11:59:89:1d:3a:b4:41:46:a5:be:c9:d3:f6:c4:48:54:09:c2:
fe:b8:da:ae:d5:2e:1f:61:a0:76:1d:f0:36:73:9e:b0:1c:6d:
76:01:9b:8b:fc:36:d5:7a:76:ef:4b:d2:45:46:5a:87:03:7a:
c5:2b:2e:2a:8f:b8:34:c4:67:82:b2:b8:ec:fc:15:66:ed:c0:
c7:21:02:f7:2a:9d:bd:ad:76:44:5a:ab:81:7b:46:29:08:10:
17:09:85:4e:c7:46:55:1b:92:43:99:6c:bf:14:cc:61:56:8f:
5f:c3:79:c2:78:c7:5e:59:e1:d1:fb:0c:1c:2a:a0:36:10:ce:
41:39:04:7c:c2:8d:ec:12:7b:d1:aa:e6:45:4e:41:64:fd:b9:
b0:ba:2f:6f:0d:6f:31:99:d5:a2:d8:0d:19:83:5d:57:0b:6f:
21:61:e2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:28 2025 by rpki-client