Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
File: V7J1ubzEXc6LPvAXLJZzeACUek4.mft (raw, json)
Hash identifier: R5bwKbbIQ5kOd+snodswEdQvS3wb9+pMTRJA7K/dV4o=
Subject key identifier: 34:7C:99:33:0B:7A:C2:55:34:09:9E:2B:B1:08:25:0A:07:FB:21:C4
Authority key identifier: 57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E
Certificate issuer: /CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
Certificate serial: 019A51F5983E795EA154543FAFEDBA2EBE88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 03:00:41 +0000
Manifest this update: Wed 05 Nov 2025 03:00:41 +0000
Manifest next update: Thu 06 Nov 2025 03:00:41 +0000
Files and hashes: 1: ABuElM6_NHXhhyjrbNO7-7-4-tw.roa (hash: RB6lZGDNmRmLvQ7wPbU3Ifx1OhDqRcQW8eOAw1dgZcE=)
2: V7J1ubzEXc6LPvAXLJZzeACUek4.crl (hash: x1pPYjB7zCIDLNVzrUJrdWrFRJoyZx3cw/9tJieIgKQ=)
3: sIxOdNT6bFxHKmNN0CZFI4DmR-8.roa (hash: 5J0fAmw/YI6nG5pD9p8YdD7k7oyOLgeH2PS70uMH6I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:98:3e:79:5e:a1:54:54:3f:af:ed:ba:2e:be:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
Validity
Not Before: Nov 5 03:00:41 2025 GMT
Not After : Nov 6 03:00:41 2025 GMT
Subject: CN=347c99330b7ac25534099e2bb108250a07fb21c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:7e:dc:98:44:13:6f:2e:33:fb:41:d5:c9:
e2:cb:67:a5:75:d7:ac:34:0b:e9:b6:da:5e:bc:81:
f8:d5:57:c8:19:fb:94:d3:9c:fa:0c:c5:ad:8a:d0:
dd:2f:cb:80:46:76:34:fa:2a:de:76:bd:e6:b1:15:
39:42:76:fe:01:93:f1:3a:1b:d4:3a:be:27:06:5f:
da:d9:cd:6d:49:4e:6c:e1:bd:35:53:5f:03:0b:94:
01:9e:bf:6f:a7:de:84:a5:7d:32:d0:2e:d3:b0:a0:
1a:15:0d:74:82:fe:c1:d8:16:22:00:09:7a:07:5f:
36:e1:73:45:6c:e4:f6:c9:fc:68:be:04:3c:23:e4:
1e:69:82:b0:a8:b5:81:2f:bc:64:63:bd:51:ad:3b:
19:92:08:52:b5:c0:1b:10:2c:07:dd:f0:be:5c:3f:
b0:ba:3f:42:10:1e:5c:93:91:c6:db:23:27:43:e5:
f7:be:07:a8:b1:cc:29:cf:86:ae:12:4a:65:cc:ac:
2a:cc:5d:4b:34:a1:89:18:0a:3c:6d:3f:78:f9:a4:
ff:d1:47:84:3a:a5:eb:b1:3d:5d:16:84:76:a9:f2:
b5:01:c8:03:d0:56:e0:de:1d:51:3e:18:06:c6:cd:
98:ad:6b:6a:00:b2:52:40:00:f7:60:55:36:4a:91:
21:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7C:99:33:0B:7A:C2:55:34:09:9E:2B:B1:08:25:0A:07:FB:21:C4
X509v3 Authority Key Identifier:
keyid:57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1f:8f:92:a0:89:16:68:ac:48:aa:b2:75:b0:33:19:6b:dd:
ee:2a:3a:c6:17:d5:69:01:65:31:61:28:62:d5:b5:18:96:95:
3a:9b:18:0d:92:30:01:27:c1:57:a4:21:3e:4d:ac:b3:09:38:
33:a3:42:46:c4:34:43:41:5a:0f:41:62:3a:df:8c:57:d6:f7:
dc:bf:44:1d:43:86:6e:ec:10:87:5e:ed:8c:e5:73:f6:9f:10:
32:ba:c8:a5:01:06:dd:c0:0e:d1:14:f7:f0:21:a2:12:37:34:
08:0b:71:ae:87:5a:e3:94:af:e2:0d:09:bf:cd:c4:0b:f7:9a:
5a:4b:79:94:c1:56:4e:a1:8b:ef:f5:e5:db:3c:39:55:0f:31:
d5:41:fd:b6:73:9a:00:f2:5a:a2:e7:a0:37:9a:17:cc:e3:7b:
77:62:20:8d:e8:17:72:08:0d:12:ef:64:50:62:c1:ed:d9:9e:
cc:f0:61:2d:d6:68:3a:02:44:4b:36:68:12:a5:da:ef:90:70:
71:fd:06:4b:61:a2:b4:cc:96:ad:0e:db:88:99:a5:bf:a3:70:
ee:39:e2:8f:d6:f7:db:f4:96:18:79:55:af:bf:84:67:68:d5:
c7:7b:80:92:bf:3c:4b:89:e5:05:db:63:8e:20:a5:1e:b8:f2:
4c:81:e3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:57 2025 by rpki-client