Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier: ZDyNN0zx6qMXfYc/q0Ee3gwPWfAPAFIgSXKCK6nn1Fs=
Subject key identifier: 66:78:BA:2B:3F:B1:D3:37:C9:C9:32:8E:85:BA:F4:67:DA:30:19:70
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer: /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial: 019A51F54960061F39AE26713471C406FAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number: 16A1
Signing time: Wed 05 Nov 2025 03:00:20 +0000
Manifest this update: Wed 05 Nov 2025 03:00:20 +0000
Manifest next update: Thu 06 Nov 2025 03:00:20 +0000
Files and hashes: 1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: tLUdYd//M4K5D6kLXSMKgxZgm+k1fVMhRqJIMsMV5kU=)
2: J9Y5qrjsI2Qtuq7klk41lQwg1og.roa (hash: NNuL/WZWhtDsn2nhsgr73rvUsNOJxUI43avvh9gIeRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:49:60:06:1f:39:ae:26:71:34:71:c4:06:fa:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
Validity
Not Before: Nov 5 03:00:20 2025 GMT
Not After : Nov 6 03:00:20 2025 GMT
Subject: CN=6678ba2b3fb1d337c9c9328e85baf467da301970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:01:99:ee:3d:4f:1d:a6:f8:40:00:19:0b:33:
93:bf:2d:5f:ee:7e:c3:5c:54:24:30:47:e2:9b:f8:
98:ec:98:bf:a6:b8:e6:b2:db:c2:2f:59:87:ad:7c:
74:89:25:c0:52:41:f5:67:80:f1:ed:e2:c3:8f:87:
58:88:0d:39:29:5f:1a:7c:39:71:e3:28:42:9e:3b:
50:d9:06:7c:ed:7e:5f:7a:fb:c6:e0:85:9b:34:46:
da:32:9f:7e:68:12:cf:d3:a0:36:66:fa:89:6c:04:
e8:58:68:3d:4b:25:37:c4:f9:1c:96:fd:c9:37:12:
06:df:59:cf:7e:41:35:d2:6e:19:bc:cb:57:df:59:
50:79:44:e1:45:8b:7c:7d:dd:d4:b4:8e:8a:e1:05:
f7:62:96:d2:c3:27:2e:b6:7f:6e:e2:28:40:e8:98:
98:df:3c:4c:3d:4b:dd:13:65:d5:ea:de:23:a3:4a:
04:ad:b4:4a:ac:a8:6f:5f:bb:47:df:29:b9:12:3f:
67:b0:f6:48:65:ea:ed:e5:65:e8:10:14:31:09:2a:
0c:b5:02:97:ad:5e:29:a2:c6:da:bc:09:da:5a:59:
ae:08:54:5a:31:cc:5d:73:72:c0:31:0d:1a:31:d8:
04:4d:d9:09:ad:52:48:37:fa:c2:28:89:15:63:9d:
6d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:78:BA:2B:3F:B1:D3:37:C9:C9:32:8E:85:BA:F4:67:DA:30:19:70
X509v3 Authority Key Identifier:
keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:00:6d:62:4f:10:bd:10:89:05:41:d3:cd:0a:fd:46:55:07:
42:ff:9f:9e:df:f1:54:58:86:9b:0f:8a:36:25:67:ff:50:d4:
e5:0b:12:9a:9e:86:d7:90:d8:58:ae:52:ef:c6:11:e0:e5:e1:
d9:40:9a:a5:08:60:87:13:89:fe:e1:07:4e:b9:a7:1e:10:ee:
7a:29:54:55:28:c1:09:5a:91:1a:a2:d0:9b:e3:de:d4:a9:39:
a7:e0:1e:d3:5a:c2:66:4d:8b:fb:49:23:7b:55:27:03:d6:3a:
fe:05:73:90:88:cd:da:52:ca:cf:c8:c6:cf:36:01:f6:e4:2d:
19:1b:f8:cf:46:86:84:8c:16:04:09:12:b8:62:3a:f1:31:f7:
1f:91:70:ae:87:a5:2c:4d:03:34:64:6c:f8:a4:00:d0:fd:f7:
02:28:22:ba:21:45:05:86:8c:b2:89:7f:f4:a0:b1:92:69:f6:
27:a4:e9:77:91:4c:b4:e3:d1:f2:3c:90:bb:7f:98:31:09:aa:
f6:2e:20:eb:71:a6:51:fb:7d:f6:7f:af:65:08:4b:27:e0:80:
71:ca:6b:8f:37:fa:64:f9:4b:01:6e:f1:d2:20:b0:76:85:04:
c1:3a:50:f5:98:46:b2:a9:02:37:55:db:25:83:c5:e9:f5:4c:
44:c4:92:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:32:37 2025 by rpki-client