Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
File: _7yuKykMgB1X0J0CWpNI4WcG8YI.mft (raw, json)
Hash identifier: HBrKRFtD0qKncCNYql34pqhGT53cWJgFaQY0gqybxXk=
Subject key identifier: F4:98:4D:72:CF:E8:BC:ED:80:DE:82:3E:55:60:BF:EE:2B:6E:F9:73
Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182
Certificate serial: 019A51508994296D3F3E6696D385BCE5C379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
Manifest number: 166F
Signing time: Wed 05 Nov 2025 00:00:23 +0000
Manifest this update: Wed 05 Nov 2025 00:00:23 +0000
Manifest next update: Thu 06 Nov 2025 00:00:23 +0000
Files and hashes: 1: 8wTHmWo4SSJsVc0t3sJFniZg3X0.roa (hash: nwCEElQrpQEsbcFPrYoePVQv66vMAWow/x3hFkCdNgc=)
2: BS9tKB-yEzTuSlcr0sNlNMplJ-U.roa (hash: +wyGsgZf3mkT04YYiaLjKGX/U5oOsHBvxk3RajkpCvY=)
3: _7yuKykMgB1X0J0CWpNI4WcG8YI.crl (hash: joHjzof6uXGhF3H9vsW5AVOqTrF33MJX9w8b+ihUpL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:89:94:29:6d:3f:3e:66:96:d3:85:bc:e5:c3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182
Validity
Not Before: Nov 5 00:00:23 2025 GMT
Not After : Nov 6 00:00:23 2025 GMT
Subject: CN=f4984d72cfe8bced80de823e5560bfee2b6ef973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:42:ec:f9:5c:8f:ba:c8:f6:6f:5b:34:27:
06:02:5a:b7:1c:8f:b6:fe:b3:78:8e:dc:14:b1:d4:
04:7b:7e:5f:6c:d5:ad:cc:ec:fa:25:1c:08:ef:f1:
82:7c:76:af:03:8e:b4:c2:27:4a:86:a3:e6:5c:95:
b2:9a:3c:82:79:b7:b9:c5:88:eb:94:a0:5b:96:bf:
df:80:d3:bd:33:cb:05:1e:1f:d6:31:63:f9:0d:3c:
11:be:f8:e9:0d:a9:44:64:15:e9:e8:29:b3:1b:11:
43:4d:7e:b9:6b:08:e5:ba:3f:4f:67:e4:5e:43:df:
60:c8:a4:0a:4c:58:c7:5e:d5:17:f5:5c:75:ed:1c:
71:ee:22:ea:25:57:86:af:5d:f0:a5:b3:35:91:8a:
47:4f:2b:69:c3:04:8c:b9:fa:8e:28:79:22:65:f9:
bb:c1:b4:10:e7:1d:dc:91:e5:63:40:0b:fb:f2:51:
21:d6:75:93:55:41:43:13:07:83:df:63:5b:94:d2:
b4:38:c8:62:78:81:8c:26:f3:f3:ac:8a:a2:cf:db:
1e:ec:23:88:cd:a1:64:74:9a:05:cd:ce:90:c9:4b:
fa:d0:64:68:26:ce:35:58:a0:8b:0a:a9:81:64:57:
be:23:33:af:28:fb:9c:66:b6:7b:2e:99:45:2b:c0:
62:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:98:4D:72:CF:E8:BC:ED:80:DE:82:3E:55:60:BF:EE:2B:6E:F9:73
X509v3 Authority Key Identifier:
keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e3:67:2e:ea:e0:25:6d:a4:4a:08:58:a6:7a:f1:77:bf:20:
e0:cc:3c:ba:56:14:d7:e2:03:34:94:a7:86:98:56:1e:89:3c:
95:62:d7:a4:51:2d:3c:b1:69:43:cf:d3:a0:0f:df:d7:2f:11:
14:25:0f:58:12:68:f5:73:22:03:d2:ae:38:2a:43:ed:c1:3c:
38:8e:8b:da:1f:0e:10:4e:42:6c:4a:67:a4:83:0b:ab:fd:57:
54:ac:e6:a6:97:7a:f3:89:a1:c4:ed:c2:7a:1a:08:e8:71:4b:
db:b1:80:b6:a9:7f:15:2a:3e:4b:a9:f9:42:20:74:1a:14:8f:
e5:75:9f:88:8d:0f:b3:39:20:73:48:bd:b4:66:7f:55:5e:82:
dd:a2:45:aa:cd:b8:1f:c0:9c:9f:e0:ca:84:4a:3c:bc:91:c9:
eb:31:5c:0b:1a:12:9d:f7:bf:fb:3c:67:9e:cb:a7:f1:ac:af:
46:b3:0d:c9:2c:56:46:20:d1:86:06:f5:41:16:1f:52:ae:3b:
a4:b7:24:3a:f9:39:a3:5e:c7:6c:d0:ce:e6:92:c7:d9:ac:be:
9a:a6:0e:86:b0:d9:7f:01:03:b6:61:f3:5a:1f:70:80:0f:09:
b3:dc:7f:54:b5:d5:04:dd:24:bf:61:eb:3e:31:49:9b:3a:a7:
85:ec:9e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:57:42 2025 by rpki-client