Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: bpmaOpWp6d1Ii6fSxVfMGbuLJ0Z2aAvbEdxxQb9d7p4=
Subject key identifier: 57:A5:CE:0F:7F:4D:A6:68:44:1B:E1:2C:20:06:60:3E:93:3D:DC:56
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 019A4EF41B6EBE86EA4AE97FFF73C203EEE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:00:11 +0000
Manifest this update: Tue 04 Nov 2025 13:00:11 +0000
Manifest next update: Wed 05 Nov 2025 13:00:11 +0000
Files and hashes: 1: 1utcwuOmOI7txytHlcapG00bDWQ.roa (hash: KoDsbv2AuvIm5mO9VxRMXrTvsRyvxgVtQhUhy9Zv0J4=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: YgplclP5qNc9BOJW7rRqFZ27MATquwHpDw4GrubNmg8=)
3: TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa (hash: SXaSky/YVlsAmsXgPwkA8PXkQ+jueu3hy97DblT9VwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1b:6e:be:86:ea:4a:e9:7f:ff:73:c2:03:ee:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Nov 4 13:00:11 2025 GMT
Not After : Nov 5 13:00:11 2025 GMT
Subject: CN=57a5ce0f7f4da668441be12c2006603e933ddc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:32:6d:f1:88:63:82:5b:a2:94:c3:65:90:9c:
60:16:7a:9a:de:45:1c:19:21:76:8d:83:6e:f6:d4:
f5:15:ac:11:3d:92:4e:91:c9:3d:60:8d:88:fc:43:
17:5f:d1:ea:14:4f:81:08:4d:4f:e3:82:21:34:63:
b2:37:88:74:0a:63:98:d5:62:e3:4e:c8:32:f9:db:
8f:89:64:97:25:93:f4:a8:b3:ea:e2:15:4d:c6:9b:
d5:d6:6b:0c:37:7d:11:65:33:18:a7:77:1c:7d:71:
73:25:6f:dc:96:db:1c:66:de:d0:f0:70:c6:04:31:
85:c4:5f:96:f2:8e:b5:78:34:a6:c3:55:51:4a:a2:
ac:67:c7:36:97:f4:62:24:a4:af:bc:99:67:56:2a:
e5:3d:5f:a0:45:a4:33:ab:00:45:33:9e:b2:83:c8:
8c:60:45:83:35:3b:6c:96:29:5f:de:c7:43:23:6d:
fc:bf:03:96:15:ca:5c:20:69:8a:4b:28:aa:59:86:
ea:34:59:59:3a:aa:ec:db:da:1c:65:ef:2c:02:f0:
e5:22:f3:6c:51:4a:b1:d3:23:d1:b3:db:1b:33:50:
27:df:dc:a9:27:e9:51:c7:f5:a6:93:ca:e2:70:7c:
41:f8:94:b8:c3:da:41:8b:44:28:31:45:c9:57:56:
0d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A5:CE:0F:7F:4D:A6:68:44:1B:E1:2C:20:06:60:3E:93:3D:DC:56
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:58:de:7a:61:53:b4:5e:57:84:e9:4d:aa:1e:0e:5c:6a:c6:
db:26:b2:b0:de:aa:b5:ae:77:04:8c:a9:74:b7:cd:c7:6f:59:
28:d4:e9:a4:6e:d1:15:45:fc:70:b3:12:aa:e6:12:46:0d:cf:
1d:0c:b6:bb:b7:e7:0c:a3:86:0e:68:59:d9:48:a2:9a:c0:16:
ed:e7:78:d8:f9:33:cf:48:5f:a1:06:8e:ea:81:97:35:cd:23:
e8:20:a6:06:51:90:25:65:48:f0:9f:be:fa:bf:5a:6a:76:b3:
3b:43:95:81:c9:70:7f:51:9a:a0:d9:04:4f:59:e4:c2:1e:d7:
45:f0:bf:6b:fa:69:2b:8d:ef:f8:c6:b6:76:71:26:5c:01:b0:
d3:31:94:2a:dc:3b:44:be:85:70:4c:be:fd:90:f2:dc:83:bb:
40:95:89:b6:ea:6a:e4:08:fe:89:41:5f:e4:8e:2e:5a:6a:14:
fd:75:1c:18:5d:aa:36:89:b0:2e:e8:d3:17:ea:1b:73:09:78:
d0:04:39:c8:e8:7b:55:98:ec:01:24:73:64:28:d6:8c:09:b1:
1f:75:77:aa:83:b7:31:e0:61:32:63:db:31:d1:58:56:df:d8:
c6:f6:06:72:79:6b:47:af:b7:4e:ac:1b:d4:5f:27:5a:8c:f6:
bd:ab:60:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:56 2025 by rpki-client