Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
File: IS7ROxq32gkK7kL2rt3f27FWpfg.mft (raw, json)
Hash identifier: vb+dDh6Hu5x7dasz7cAbWTOUHG7fLvc/As6XkC8+az4=
Subject key identifier: 00:57:00:17:DE:10:E6:C4:5A:2A:2C:2A:BB:75:6A:42:F0:20:B6:89
Authority key identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
Certificate issuer: /CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Certificate serial: 019A4FD06A5542AF56716DD4F994E10342B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
Manifest number: 0F25
Signing time: Tue 04 Nov 2025 17:00:50 +0000
Manifest this update: Tue 04 Nov 2025 17:00:50 +0000
Manifest next update: Wed 05 Nov 2025 17:00:50 +0000
Files and hashes: 1: IS7ROxq32gkK7kL2rt3f27FWpfg.crl (hash: yBODNK9jx+bTTTZ0/z0jEwhbooI+JbA6Zl5AYOh8b1k=)
2: pYYF24wF2qUQt0FJlZ3YB5wUYkU.roa (hash: zEnazzlJdeIGpPAdwwnulmZqiWyOGMOyiwVZOjKNgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:6a:55:42:af:56:71:6d:d4:f9:94:e1:03:42:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Validity
Not Before: Nov 4 17:00:50 2025 GMT
Not After : Nov 5 17:00:50 2025 GMT
Subject: CN=00570017de10e6c45a2a2c2abb756a42f020b689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:6a:5a:e7:90:00:a2:20:f7:69:0b:3e:3d:
c1:fa:44:0a:b8:90:60:3c:b5:23:8b:e6:f6:db:7e:
e2:e6:af:24:dd:35:0a:bb:0a:13:cc:28:68:1c:ef:
81:0b:5f:0e:5c:f6:09:5b:26:94:d3:52:df:c4:cd:
68:4a:8c:5b:0e:49:06:3c:e0:1b:5e:45:63:f1:8c:
8d:76:eb:45:c2:9e:3c:f0:f4:6c:97:4d:4a:ac:8c:
9c:fe:45:63:28:2d:52:c6:73:11:69:f1:2c:c3:41:
39:4b:9e:d9:0c:2f:ff:e2:73:6a:93:35:1a:51:8d:
c8:f8:90:05:34:7c:61:a7:46:f8:8e:23:c8:5b:55:
d0:9e:f5:c0:27:2f:f3:cf:18:10:7a:f1:eb:78:d5:
ae:46:d5:d2:05:3d:a1:50:8c:2e:1c:48:89:5d:f6:
79:c4:9a:3c:73:d7:3e:0e:a5:0a:73:38:3d:b8:d4:
93:8b:db:43:e3:48:b7:e9:58:ff:eb:49:14:1d:66:
2c:8d:e3:0a:61:c7:79:8e:2c:da:9b:5f:12:11:df:
e6:68:f4:c7:2e:0f:57:50:de:93:51:4b:21:62:83:
b9:94:73:6d:66:a1:6e:cd:cc:72:e9:a3:77:49:e8:
6e:75:95:9c:ca:2c:54:58:7b:f6:44:66:e9:9e:b0:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:57:00:17:DE:10:E6:C4:5A:2A:2C:2A:BB:75:6A:42:F0:20:B6:89
X509v3 Authority Key Identifier:
keyid:21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:78:d2:8e:53:cf:f9:c5:06:e0:51:2a:f1:55:27:d2:21:c3:
09:8f:b2:9a:91:c4:57:bc:32:24:2a:66:62:84:35:49:52:5b:
52:2b:84:13:33:41:e4:f5:62:45:a4:f5:a9:81:43:01:96:fd:
95:7f:7a:db:de:c3:34:04:f8:f9:65:5d:8b:50:73:5d:88:56:
d1:73:0c:04:fa:f1:1d:9e:10:d5:34:74:ea:3b:08:5e:d3:b0:
91:9a:3f:d9:e7:50:e7:94:06:26:96:80:91:a7:7c:58:54:07:
ef:cf:b2:85:02:d3:3a:3b:4b:6f:05:19:01:e1:3b:42:c4:be:
3e:8d:31:4d:0c:37:ec:5e:be:c2:9a:6b:24:50:a3:37:f9:62:
e8:f4:ed:96:b4:c2:94:33:80:7e:88:55:ce:36:b3:e0:87:13:
e0:dd:b5:d2:e3:66:60:c2:26:bc:d8:dc:50:ba:71:10:15:f4:
66:42:98:ba:36:70:5b:03:45:90:87:65:29:05:72:32:d7:1f:
0e:9d:e4:34:e0:73:a0:bd:40:d7:9d:af:ec:4a:a7:e4:fc:dc:
9d:e3:73:1b:6a:39:3f:a7:11:5e:4d:0b:5a:27:e1:1f:3e:c4:
6c:ae:bd:89:cc:f3:5a:cb:7a:6c:69:57:de:41:11:42:0f:d3:
9c:d0:93:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:07:58 2025 by rpki-client