Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier: q/5T1czuaq9jteTElrQH6D1KzAWgQJJhXQzuTfhlQfM=
Subject key identifier: 61:39:74:D7:1F:66:9C:0F:70:84:B5:9F:38:51:8F:3A:F3:63:F0:13
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial: 019A4F61E25FE9C98A7B6F9491F3C84A411B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 15:00:05 +0000
Manifest this update: Tue 04 Nov 2025 15:00:05 +0000
Manifest next update: Wed 05 Nov 2025 15:00:05 +0000
Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: XQqgPGI6BhS7ip2BtefLTqNFG9NI214l+vQX2eZGaFk=)
2: PGTEyuyHfVxWRtCLWSM0Bggjqk8.roa (hash: LpN4nDf3nPAGvaIylopZoGcsyeFo20wtey+AbU/Sxvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:e2:5f:e9:c9:8a:7b:6f:94:91:f3:c8:4a:41:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
Validity
Not Before: Nov 4 15:00:05 2025 GMT
Not After : Nov 5 15:00:05 2025 GMT
Subject: CN=613974d71f669c0f7084b59f38518f3af363f013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:c5:8f:48:cd:e0:bd:9e:b8:3b:8a:bf:93:
19:7b:26:54:f3:74:ae:0a:01:2c:12:d7:46:de:eb:
d6:84:bc:df:e8:bd:4b:d1:2c:31:52:87:e2:eb:5a:
32:75:ef:67:db:6b:fc:27:e1:75:eb:3b:28:6f:7a:
4e:80:5a:9f:f6:e9:fc:4b:b1:ed:3b:6d:34:6d:48:
77:96:be:bb:ba:18:60:64:97:ad:70:18:85:ba:de:
4f:61:91:0c:53:01:7c:9b:7b:08:cb:b5:d3:c2:9c:
d9:81:c2:13:62:0b:21:bb:5c:b9:df:d9:7b:97:f8:
80:c7:2d:9d:f7:9a:a8:a9:65:7b:16:59:f3:fc:c9:
f3:94:ca:d5:c9:84:6c:2a:34:ec:1d:da:74:d0:60:
2b:5a:3e:29:77:f6:9f:bf:ba:65:08:db:aa:7e:ac:
5d:33:9c:a7:31:4b:fd:21:8a:77:44:2c:f1:00:35:
b5:59:46:6e:22:7d:1f:4b:65:38:bc:59:20:80:d3:
10:08:a7:bd:70:e3:be:b3:9e:7d:1e:97:02:0a:1a:
fb:16:11:11:b7:c3:e0:4a:35:64:2a:9d:a4:a1:3d:
b0:20:ab:a1:9a:e4:c1:ac:5e:bd:f9:f1:54:6e:42:
aa:37:79:51:22:d1:ce:1a:c5:cf:6b:fc:b3:4a:f8:
4a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:39:74:D7:1F:66:9C:0F:70:84:B5:9F:38:51:8F:3A:F3:63:F0:13
X509v3 Authority Key Identifier:
keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:df:c1:b8:33:9f:a8:41:0e:11:05:4e:d5:de:d1:b3:07:b7:
c6:fe:91:46:3b:7e:c8:5d:b4:25:31:78:54:7e:dd:a0:6b:24:
6f:94:27:37:ee:bf:df:78:13:a3:09:10:d1:2d:3a:82:64:44:
04:ba:9b:01:aa:7a:8f:2c:32:d8:f6:49:39:79:a0:47:cb:da:
da:25:0e:73:87:c7:75:6b:6a:ff:c2:c4:0d:85:fe:c5:ca:db:
ee:76:53:f6:93:b8:e2:7c:ad:8a:df:b2:4b:e7:df:23:98:74:
94:45:d3:fc:a3:22:68:be:ee:7b:6c:e9:1a:91:51:ac:b1:de:
c6:25:65:0c:99:d0:19:25:ab:ff:00:42:a0:83:c5:be:26:6a:
0d:83:18:f6:7b:4b:45:f6:31:81:78:8e:39:ec:78:be:76:5a:
04:cd:32:21:14:98:28:8c:72:ef:e1:54:71:56:e3:1c:fb:d8:
b0:43:cc:2a:58:79:cd:db:27:ba:a0:95:b7:b9:e0:d6:8b:ee:
35:c3:37:87:7f:86:27:d4:a2:73:b2:ee:5b:e6:c8:81:4e:0a:
46:99:d6:af:7c:18:d2:5a:6f:fe:63:b4:3e:93:53:17:dc:80:
a3:9f:fc:82:3f:3a:2c:ab:84:b9:5b:01:21:d8:13:b7:20:5a:
60:23:3e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:58 2025 by rpki-client