Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier: WtDM3FB3is3Q5sDSlNk3G8TBbqL5SdVxVKQcY/njbjI=
Subject key identifier: 68:A1:F8:52:A0:0E:A4:78:6B:FE:87:D1:0E:98:48:28:26:41:85:AE
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial: 019A4F2B588A9CE4234D1B8DDCD4A0C58AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number: 1134
Signing time: Tue 04 Nov 2025 14:00:32 +0000
Manifest this update: Tue 04 Nov 2025 14:00:32 +0000
Manifest next update: Wed 05 Nov 2025 14:00:32 +0000
Files and hashes: 1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: bl0LYwk+x3eoCb1bptmAYxVfsWTrUUC1scjrn9M1Abo=)
2: KrFqFiDpj3KTLxxAsjJyiKgAjFA.roa (hash: 1PmMv3UcI9fAXjZSi6jxq86mVNekWxeQeV4OVG0h5eY=)
3: QEP4j9JVsbgw6u0dNGwjp_dEBOM.roa (hash: cfwWMXWNZBAAjCKALqzpLbct9a8WBHygXbGOplIqMXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:58:8a:9c:e4:23:4d:1b:8d:dc:d4:a0:c5:8a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Validity
Not Before: Nov 4 14:00:32 2025 GMT
Not After : Nov 5 14:00:32 2025 GMT
Subject: CN=68a1f852a00ea4786bfe87d10e984828264185ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:61:c5:c2:0e:43:ed:7b:50:e7:f4:76:53:23:
f8:ce:01:d1:fd:d4:3a:51:c3:79:19:6c:7b:d4:ba:
70:eb:7e:5c:bd:c3:71:74:43:ab:27:a2:6f:78:61:
dd:b7:34:38:fd:d0:ae:a2:04:54:82:e8:45:02:c7:
cc:f7:27:8c:8a:18:21:88:69:d1:da:4a:a3:25:1b:
96:e5:e3:0c:d4:d0:11:cb:8d:e8:3a:32:9b:5a:7c:
e0:d7:54:f5:c6:4e:d8:23:bd:82:2b:0d:73:db:db:
d4:4c:76:2d:40:bb:c0:82:01:18:9a:33:d1:dd:55:
56:97:26:6a:cd:43:f2:f5:d5:7f:55:98:45:71:8a:
4f:50:1a:85:2e:51:11:03:9e:3b:fd:41:f5:b7:32:
dd:57:0b:eb:e4:db:35:02:6f:64:84:67:bc:8f:62:
68:f8:c1:ac:6d:e2:5c:e8:9b:e0:4f:a6:cb:d3:1e:
70:bb:c9:57:97:0e:83:eb:c0:31:f0:35:6f:12:6f:
5e:a5:a9:aa:68:19:b2:a7:77:89:97:ff:08:ca:40:
e9:ba:a5:83:08:00:6c:08:8d:9c:6d:c4:9c:84:5b:
b5:fd:15:fc:dd:d6:b0:c1:ef:bd:9f:94:34:78:44:
4c:eb:8a:d0:b2:e1:15:07:5f:67:88:41:ad:91:ff:
2f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A1:F8:52:A0:0E:A4:78:6B:FE:87:D1:0E:98:48:28:26:41:85:AE
X509v3 Authority Key Identifier:
keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3f:e5:4a:7c:b0:fc:8e:be:87:66:eb:3c:05:e8:3c:e8:f1:
44:32:4e:50:7d:09:11:8a:f1:0e:47:1e:6a:35:58:f3:c5:9a:
42:23:8b:9e:b6:4b:59:1a:0a:55:96:76:4d:67:62:9c:67:67:
38:dd:4a:6e:1c:9d:1d:f7:66:2d:eb:9f:4e:29:32:7c:a6:31:
75:23:9b:59:a1:45:1d:b5:6c:a8:f8:be:6b:f9:eb:5a:e3:ed:
fc:68:25:73:04:cd:dd:4b:36:f5:f3:df:93:b7:09:10:65:08:
d9:65:f0:7f:2f:a1:c7:08:e0:80:df:2b:fe:96:9b:88:8b:30:
9b:94:ac:46:6c:66:31:58:be:c1:47:8a:14:d5:1f:a6:f7:03:
81:49:35:0f:16:9b:ec:82:a3:9d:af:21:a5:ff:48:80:5b:3f:
df:ef:28:77:e3:be:ea:04:6a:c5:54:38:b3:92:39:70:c5:d0:
35:3c:c9:7b:c0:d5:83:b3:49:34:79:0e:92:b9:d8:31:95:43:
70:af:ea:d3:a9:43:24:e1:8a:1b:40:2f:04:2f:66:82:ed:b3:
5c:b5:3e:1c:f8:77:8a:83:9c:6d:75:12:55:34:64:c6:da:4f:
ab:29:d0:c3:d9:48:00:2a:58:6e:e4:41:41:a0:20:66:2c:1f:
74:ff:4e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:46:11 2025 by rpki-client