Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: +170Xl117rF/fsGR+Ojt45isD2iY29WMiWmCTL3WuWM=
Subject key identifier: 7B:2F:71:10:65:22:92:87:A8:67:19:EC:59:A3:1A:44:F8:E3:2F:FC
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 019A4E8673DF2DCF1DD5B02A97AD4C78D645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 11:00:25 +0000
Manifest this update: Tue 04 Nov 2025 11:00:25 +0000
Manifest next update: Wed 05 Nov 2025 11:00:25 +0000
Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=)
2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: Cc/F4qObG210RQDobd7uQ0oM8Ip+bTdYfEbiOByD+sE=)
3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:73:df:2d:cf:1d:d5:b0:2a:97:ad:4c:78:d6:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Nov 4 11:00:25 2025 GMT
Not After : Nov 5 11:00:25 2025 GMT
Subject: CN=7b2f711065229287a86719ec59a31a44f8e32ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d8:1b:7d:c2:0a:c0:47:ad:89:6c:e0:53:d0:
f7:ac:27:bd:7a:2b:70:ab:66:85:55:db:1d:eb:49:
a6:a0:40:7d:ea:a6:0d:31:0a:fd:d6:a4:54:8b:c1:
22:6c:fe:3b:11:95:9b:dc:bf:97:4d:22:e8:f7:57:
f7:32:43:70:69:90:9f:95:4d:78:f8:82:76:08:7f:
59:44:c9:01:bd:50:be:64:b9:f4:2b:33:a4:f7:61:
38:0d:23:0f:43:36:7a:98:27:b6:03:ea:76:ee:c4:
35:b5:de:27:ec:27:5f:14:1f:e1:d0:7d:7c:c5:91:
14:db:03:9c:25:53:b0:82:6e:b3:f9:97:e9:59:83:
35:69:cc:28:6f:1a:b6:2f:3f:ba:4c:c9:6c:46:1b:
10:54:ac:37:51:05:25:cd:99:a7:e4:d3:8d:76:68:
3c:59:53:12:7a:17:1c:dc:1a:e7:7f:4f:b6:cb:78:
2a:82:6d:5b:b8:dc:ad:5b:3a:cd:dc:df:b3:22:25:
d1:bc:49:36:fa:22:d6:48:9d:91:c7:fe:82:91:e4:
12:5a:2b:ff:7a:68:f6:bf:69:76:9c:7d:e2:d3:fc:
0d:5c:fe:78:24:0c:e7:d2:d9:21:53:af:d1:6d:d9:
4a:1a:b5:2c:8b:3a:6d:a1:28:ae:1b:f6:0d:01:3c:
41:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2F:71:10:65:22:92:87:A8:67:19:EC:59:A3:1A:44:F8:E3:2F:FC
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:85:d5:c3:23:12:80:f3:04:b2:89:21:23:05:ce:85:b3:52:
d9:cd:97:79:f3:de:38:4c:89:26:6e:bc:0a:dc:f6:f0:53:65:
42:cb:bb:c6:43:99:2e:30:f0:a2:9a:ca:9d:e7:c3:86:33:5e:
2b:ee:c9:e4:66:d8:8c:2e:08:11:6a:65:9c:6f:c2:6d:68:3f:
31:61:20:b6:e3:e5:5b:72:05:c7:5f:3d:5a:f9:0d:20:5b:f7:
16:38:45:9e:a3:b8:1f:29:69:2d:76:11:3f:93:cc:f3:90:6f:
e9:14:fa:0e:cc:38:f9:98:e4:17:16:89:a2:bc:1e:c4:88:25:
e6:82:db:72:2e:59:16:1a:8d:95:52:a2:8b:64:e7:99:04:8a:
55:8e:8f:0a:53:17:9e:8f:a1:04:00:15:79:a5:7c:b4:13:60:
26:3d:cc:51:69:7f:5b:33:d6:9f:f9:26:4d:49:69:9f:ae:e7:
30:cf:5c:51:5f:fd:d6:3e:2e:8a:97:b3:8c:b5:8d:07:b4:57:
fc:30:51:75:97:92:aa:a9:1c:a5:ac:9f:cf:a0:c2:73:72:1c:
92:7c:9a:a6:0f:98:a8:ce:ea:d3:60:35:38:ee:fa:f4:d8:e2:
0a:bb:cc:7f:8f:5b:2d:0d:3e:63:23:89:c4:18:94:a5:00:dd:
6e:db:57:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:43 2025 by rpki-client