Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
File: 97NANTBJjYJfLniKB2UDvJ3OFXQ.mft (raw, json)
Hash identifier: DHxW4XohpK7iDbYJg28aKKy3lbnnBGTjzE0X2g/OZaI=
Subject key identifier: EF:4E:8D:31:6D:09:FC:05:F5:73:A4:30:63:A8:08:13:2E:CD:4C:33
Authority key identifier: F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
Certificate issuer: /CN=f7b3403530498d825f2e788a076503bc9dce1574
Certificate serial: 019A4FD07DB7FF6958A7E7052FAFBCE8F52C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
Manifest number: 07E1
Signing time: Tue 04 Nov 2025 17:00:54 +0000
Manifest this update: Tue 04 Nov 2025 17:00:54 +0000
Manifest next update: Wed 05 Nov 2025 17:00:54 +0000
Files and hashes: 1: 97NANTBJjYJfLniKB2UDvJ3OFXQ.crl (hash: sBWCmlk9LqUMTydg/0vWQzFNumgn9TgPVGnpREDDxUM=)
2: wilpaK1V0r35ZNvUw0OLpxxalHM.roa (hash: cc48kr9ntP1AGZHGu6VbcBWoFsvg/tsNceyhXPWuzak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:7d:b7:ff:69:58:a7:e7:05:2f:af:bc:e8:f5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7b3403530498d825f2e788a076503bc9dce1574
Validity
Not Before: Nov 4 17:00:54 2025 GMT
Not After : Nov 5 17:00:54 2025 GMT
Subject: CN=ef4e8d316d09fc05f573a43063a808132ecd4c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a3:91:c0:5b:ee:c2:32:95:9c:d9:ad:e7:10:
f7:42:a0:cd:43:2e:23:20:0a:78:35:58:1e:3a:69:
96:f6:33:cb:c8:c9:1d:4a:14:52:29:0e:80:96:65:
a3:c6:34:72:da:d4:dc:4d:21:ef:80:f2:ee:fc:c3:
9f:a4:88:b4:2c:eb:dd:09:fb:88:45:98:6b:ce:dc:
aa:fd:05:c9:a1:cc:55:1f:47:e9:95:5d:a4:bc:ec:
15:25:72:23:4c:31:77:86:f8:7f:83:c7:aa:d6:e9:
c9:cd:70:55:a1:86:f6:f6:dd:0a:0a:f5:df:bd:77:
1c:2d:15:70:59:14:e3:97:72:d1:e9:65:74:bb:a6:
da:2b:e1:88:30:3c:cc:50:3e:4f:b2:fd:fc:1f:a6:
48:ab:19:d4:5c:3b:8c:d7:2b:4a:31:29:5f:2c:29:
18:23:9a:c0:43:58:59:db:23:1e:60:40:6a:98:6b:
37:41:3f:8d:27:80:17:5e:79:82:3c:9e:9d:4b:0b:
03:fe:f4:87:a3:17:74:ad:6f:86:1a:3e:0c:31:0c:
ed:df:4b:d5:00:5f:b8:07:2b:c3:8c:4a:e5:02:15:
71:bc:9a:97:96:6b:b0:64:d3:90:0f:da:4f:7d:92:
7d:b6:97:cc:c1:cc:b5:5a:73:c2:42:1f:61:a2:0e:
d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4E:8D:31:6D:09:FC:05:F5:73:A4:30:63:A8:08:13:2E:CD:4C:33
X509v3 Authority Key Identifier:
keyid:F7:B3:40:35:30:49:8D:82:5F:2E:78:8A:07:65:03:BC:9D:CE:15:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97NANTBJjYJfLniKB2UDvJ3OFXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/66e70c-6471-4592-a134-40dd2c75f1b7/1/97NANTBJjYJfLniKB2UDvJ3OFXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:0a:cf:a4:aa:fd:a8:ec:5b:96:da:16:9c:76:a5:35:57:dd:
91:d5:cb:c6:0d:25:3f:1d:d7:2b:09:71:71:71:08:3c:ab:48:
75:bc:35:91:a1:62:9b:8c:9b:f2:dc:4f:39:7d:8a:3c:35:2f:
a8:45:a1:2a:68:bd:f1:8d:ee:dc:ba:e2:bf:f5:5b:77:a8:6b:
1e:f2:bb:e0:79:5c:11:5a:af:03:0d:12:cf:25:bd:58:f4:ca:
c7:a0:fa:6e:f9:a5:a2:29:ba:96:47:2f:29:58:17:e6:b9:b1:
0f:5b:cf:45:99:42:9c:41:4c:e9:fe:d8:bb:73:e8:65:46:1d:
95:30:01:44:76:79:bb:32:80:0a:db:b2:d0:73:0a:87:f5:ef:
66:5d:f6:00:21:47:2a:6b:31:2e:15:24:cf:41:38:03:95:2a:
ef:1d:9d:e6:18:f5:5a:ad:40:b5:81:7a:75:5e:ea:f0:fb:16:
34:b0:06:2e:02:96:de:9e:47:a4:bf:36:55:3f:4b:f0:14:b8:
a9:b0:f1:c8:47:a0:be:1d:d3:b4:07:35:19:88:29:98:e4:33:
15:ad:d3:d1:04:49:51:0b:20:b1:67:f9:3b:d1:5f:c7:1a:53:
c4:71:9b:79:7b:f8:0c:09:78:d2:fc:fe:4a:a4:7a:e6:52:3a:
0a:81:fc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:47:11 2025 by rpki-client