Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
File: n7edKYEQtvsxkwHrwivxgOcFR5Y.mft (raw, json)
Hash identifier: 2OsYEU1d5XKadt5OCtNt9uq6olFgUEtAQ8pZu14KBfI=
Subject key identifier: B0:9E:DC:C8:9F:8F:F0:FF:8F:3D:A0:E7:4D:43:FF:CA:B0:C1:B7:80
Authority key identifier: 9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
Certificate issuer: /CN=9fb79d298110b6fb319301ebc22bf180e7054796
Certificate serial: 019A54F63D3017D3A43F5679E47F1B9A2876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 17:00:14 +0000
Manifest this update: Wed 05 Nov 2025 17:00:14 +0000
Manifest next update: Thu 06 Nov 2025 17:00:14 +0000
Files and hashes: 1: 2zu7oCjT-KVZRR2HzaLDOvNTLj0.roa (hash: D7mApAX4YmoA8emuHbADon4rwd+qyVDHh/ZdGBtTqIs=)
2: n7edKYEQtvsxkwHrwivxgOcFR5Y.crl (hash: 1JUxWPtbJAECMQZ4RIN03ngFk32uBntKywikSnNG9zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:f6:3d:30:17:d3:a4:3f:56:79:e4:7f:1b:9a:28:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb79d298110b6fb319301ebc22bf180e7054796
Validity
Not Before: Nov 5 17:00:14 2025 GMT
Not After : Nov 6 17:00:14 2025 GMT
Subject: CN=b09edcc89f8ff0ff8f3da0e74d43ffcab0c1b780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:69:8c:c5:dc:fd:0f:4e:2d:80:78:f6:f1:
94:8b:e3:51:74:3f:bb:8f:55:d6:c1:3e:50:26:5d:
a3:fe:4f:0f:8d:84:d4:9c:6d:2b:b3:71:89:6e:05:
e8:8d:a2:07:ce:4a:45:cf:13:0d:37:09:39:9b:65:
41:8d:a4:f3:f9:ac:cc:8e:38:9e:9c:d0:d9:12:1c:
fe:70:9a:b4:a8:35:e3:82:8e:a9:5a:82:25:88:cc:
2a:f9:56:a7:37:5b:d3:f3:1b:bc:55:f0:44:ca:60:
98:de:85:29:99:c7:b2:4c:7c:04:99:2e:e5:61:45:
aa:3a:63:a8:02:b9:b7:f7:5b:37:e0:f8:5f:cd:1e:
0b:e3:77:70:34:aa:73:8f:19:ef:b0:2a:5c:9b:87:
42:2e:c5:d1:0c:1a:09:98:aa:e0:dd:82:c1:17:af:
16:e1:3b:c0:79:c9:e2:12:21:6b:9e:31:49:a1:0a:
39:aa:94:85:88:01:79:f9:58:36:8b:43:40:23:b3:
38:c8:f4:61:a7:39:9d:86:62:e0:28:9d:06:b5:d7:
2e:df:4a:6d:9a:cd:97:99:63:4f:b8:2d:9a:54:9a:
55:f0:7c:b0:25:43:75:9e:96:c6:58:f8:54:0d:33:
b8:22:a2:02:34:16:37:de:d1:4a:51:55:dd:b6:35:
0a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9E:DC:C8:9F:8F:F0:FF:8F:3D:A0:E7:4D:43:FF:CA:B0:C1:B7:80
X509v3 Authority Key Identifier:
keyid:9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ee:37:65:bb:8d:27:53:50:5c:a4:32:2b:95:2c:2d:c8:8a:
02:3c:b0:fb:5d:37:3e:97:61:26:30:1a:ca:01:cf:39:b1:b9:
51:61:c1:15:dd:dc:db:f8:1e:d5:fc:49:15:f9:43:68:17:c6:
1e:ce:f6:65:38:65:db:51:5a:1d:5a:93:77:cb:3d:b7:10:8d:
cb:a7:45:84:83:5c:88:6b:c9:3e:c5:98:ac:31:49:35:27:a6:
58:7e:e9:8c:28:b3:80:34:e0:ad:6f:91:96:a7:fa:22:56:fe:
7c:a6:d0:06:84:89:56:1c:d6:55:b7:a8:ab:29:ec:29:cd:99:
0e:4b:42:85:3d:ba:bf:46:cf:c4:fb:0f:ae:43:ea:90:89:59:
1a:71:b4:b1:09:f2:64:4e:94:30:65:8f:f2:1c:81:ec:cf:4c:
e0:ad:ad:7e:1b:82:ca:4f:f1:c8:68:c2:6b:a3:5c:0f:a8:04:
e5:60:a4:54:20:5a:99:46:2d:33:9f:6e:0f:5e:e2:f3:4d:91:
a2:23:34:fe:b5:20:2b:1a:d1:ae:ac:73:5c:6b:cf:c0:f8:68:
03:15:e7:b5:65:9d:c0:5e:22:f5:7a:30:88:af:d5:dd:9f:57:
eb:c5:bb:eb:d0:ba:7b:2e:7c:17:4b:02:f9:6a:70:4a:b0:74:
b9:b5:82:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:13:59 2025 by rpki-client