Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
File: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft (raw, json)
Hash identifier: LsaYFHziZVk9i3ahPP/D4u6BDU9KZOtoz31OJFbiOdE=
Subject key identifier: D4:FB:3B:89:ED:0F:0B:03:85:48:B3:DB:1E:BD:BF:49:7B:F6:6E:95
Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
Certificate issuer: /CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Certificate serial: 019A4F2AE75E9B45A7D2179CB77E89A95294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
Manifest number: 0D99
Signing time: Tue 04 Nov 2025 14:00:03 +0000
Manifest this update: Tue 04 Nov 2025 14:00:03 +0000
Manifest next update: Wed 05 Nov 2025 14:00:03 +0000
Files and hashes: 1: 0eGkt49N_vn59pWMEQQOkQaM580.roa (hash: uauCuvRP4436BT1gI3Nyw0cdRL2ieHZ9YfaNo5sIdPA=)
2: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl (hash: EUrt9xxmXosWEIBgJuO/EJ6Zn0FC3uzKcvUBCSW4pgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:e7:5e:9b:45:a7:d2:17:9c:b7:7e:89:a9:52:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Validity
Not Before: Nov 4 14:00:03 2025 GMT
Not After : Nov 5 14:00:03 2025 GMT
Subject: CN=d4fb3b89ed0f0b038548b3db1ebdbf497bf66e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:fc:d7:a8:39:c0:1d:a1:e2:ee:98:9c:68:
ff:57:8b:9d:03:8d:8d:08:9c:d4:52:fd:78:e8:9d:
9e:9b:2d:96:2d:b1:29:c5:54:cc:4c:1d:79:e9:ec:
b1:bf:71:33:6d:0b:65:50:41:14:fe:70:49:f8:cd:
95:d1:57:20:ee:21:27:76:90:b9:83:1f:68:30:7e:
cc:14:3a:3a:fb:61:e8:f3:a4:a2:71:f4:de:12:53:
1e:c4:ed:81:1e:87:d6:3c:aa:43:bd:f1:a6:4c:df:
47:2d:ec:e6:84:be:57:35:be:88:bd:08:47:20:63:
17:33:c3:6d:32:2f:a2:9f:80:a2:3f:81:6b:3a:d2:
d9:7d:1f:15:7d:c5:59:ee:c0:b7:c8:80:c8:5a:ed:
f1:99:9b:24:86:02:2c:9d:bb:e6:d0:ee:8b:7c:da:
16:9d:41:de:d8:33:68:34:32:5a:bc:e9:8b:20:52:
46:5f:92:b3:d9:93:90:84:23:fc:4e:4e:f4:e9:60:
e4:14:87:be:4e:a7:a7:d0:44:e1:d1:fe:28:ce:16:
32:69:af:bb:35:78:b7:63:4b:e0:90:99:1e:81:78:
61:26:6c:39:d7:c1:ee:95:06:db:dc:e4:82:99:8f:
54:1e:ba:e8:01:f2:90:a7:1a:d3:7a:6c:4a:63:c6:
db:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FB:3B:89:ED:0F:0B:03:85:48:B3:DB:1E:BD:BF:49:7B:F6:6E:95
X509v3 Authority Key Identifier:
keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:f5:a0:16:b9:7c:92:ed:9f:89:63:23:0b:00:ef:18:97:8a:
e8:5b:d5:74:f3:ca:f2:03:d9:8b:82:19:91:fc:a5:a7:1b:9e:
a8:07:4b:6c:c1:e6:e6:67:48:cb:1f:58:f8:41:f1:e6:8c:d8:
73:77:e1:9d:e6:75:ab:f4:b1:11:54:de:50:1e:08:89:f0:8a:
fb:14:da:c7:60:5b:8b:a9:d5:0f:55:62:94:6a:26:fc:9c:ab:
7a:8f:65:8f:3d:a8:00:74:1b:e7:81:fc:e4:21:3e:f1:ec:0f:
a6:35:84:f6:d8:30:db:67:cb:c4:b8:86:1a:67:f6:88:4e:55:
45:84:7e:91:e3:1f:50:36:a4:62:ba:94:50:8e:ee:31:b5:2a:
22:74:45:65:59:b2:f5:80:f5:12:22:02:ea:36:e5:01:77:13:
a2:49:ec:59:43:27:b1:1a:f0:ca:7b:b6:c1:c4:c0:da:b3:dc:
a0:5b:37:f0:a3:24:38:5f:c1:30:d1:ff:e8:97:25:97:57:cf:
0f:5d:3a:3b:6b:e2:4d:77:59:8d:97:a9:ae:5e:cf:5e:94:43:
35:be:4b:83:57:e6:39:62:d0:11:f5:6c:62:29:3f:e2:9c:99:
e3:c8:e1:60:e2:63:0a:0a:4f:80:fc:2c:1e:ee:c5:80:ff:e1:
d6:b0:5c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:27 2025 by rpki-client