Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
File: _7up17hmEtT4fPFhcf-CsrRBNk0.mft (raw, json)
Hash identifier: trZ5I5miKqfuAsyvNJq1k6VZBpc+SJnahyucVQp0oN4=
Subject key identifier: BB:5A:A0:D1:07:8B:5A:B5:50:79:1A:DE:E5:EF:9E:D0:9E:E5:7F:45
Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
Certificate issuer: /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Certificate serial: 019A4D73F963BC9B8BA5379890A11323CC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:00:37 +0000
Manifest this update: Tue 04 Nov 2025 06:00:37 +0000
Manifest next update: Wed 05 Nov 2025 06:00:37 +0000
Files and hashes: 1: LYzc6OtaS8KV6QcG5hHmYjRMk0Y.roa (hash: fgjAjawvKdndlxTdQAycErp9wGnUNzrHaq3cdzUckXg=)
2: _7up17hmEtT4fPFhcf-CsrRBNk0.crl (hash: eOx3O79Lkhbd3oH7cDQntRXqZEYp3e8ykSONkan7btA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:f9:63:bc:9b:8b:a5:37:98:90:a1:13:23:cc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Validity
Not Before: Nov 4 06:00:37 2025 GMT
Not After : Nov 5 06:00:37 2025 GMT
Subject: CN=bb5aa0d1078b5ab550791adee5ef9ed09ee57f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:69:27:1d:e1:c0:de:3b:16:e3:8a:27:0b:
c1:57:ff:9e:c2:9a:58:88:28:64:77:5b:3a:b3:32:
d4:a4:26:f3:62:62:28:32:7c:3b:ca:1d:81:80:b5:
76:4b:d9:87:f9:9f:81:a4:d2:c9:22:b7:16:93:26:
0f:84:db:ee:b5:5d:0b:b3:bb:44:1c:97:94:6b:f8:
18:51:fb:03:c6:4c:21:1e:e5:88:93:eb:b8:da:b4:
a5:d3:c8:21:a9:06:07:a7:a4:4e:a1:d9:94:f5:df:
83:03:56:d7:a8:b1:bc:20:fe:fd:03:1e:72:93:81:
51:e7:58:88:8c:44:6d:73:b7:9b:7a:64:c8:d7:ee:
85:95:de:76:8d:2b:33:56:c3:8c:ba:c5:a4:f5:59:
02:89:a7:39:44:b4:97:4a:61:6c:75:76:6f:de:b0:
24:c6:9f:6a:93:36:cb:82:f7:ff:73:23:f9:10:9d:
bd:8a:89:84:5c:4a:07:53:2c:74:7e:c5:b2:6a:e4:
c7:8a:06:48:17:f4:5f:7b:dd:e3:ac:4c:41:9c:73:
ca:78:db:12:37:5e:3b:c5:75:81:72:4c:28:1a:e8:
93:89:37:27:33:ec:40:97:84:d3:8a:a8:29:c3:d4:
f0:f6:a8:59:79:91:80:bd:16:38:1a:e1:5c:76:3e:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5A:A0:D1:07:8B:5A:B5:50:79:1A:DE:E5:EF:9E:D0:9E:E5:7F:45
X509v3 Authority Key Identifier:
keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a8:d8:8c:43:b2:17:4c:b0:45:cd:5a:0c:a9:c9:44:28:44:
27:c8:a9:0c:25:ac:17:12:22:eb:05:f9:bf:7f:e2:90:d2:e7:
68:6e:32:52:e3:d4:d8:f6:37:4d:f1:20:54:5a:00:02:7d:47:
42:ae:17:64:15:a9:af:73:97:e3:ad:87:b6:fd:af:6f:fb:94:
02:3e:18:15:41:d9:73:3b:fe:13:85:5b:c7:94:55:db:5e:17:
13:f7:d6:55:03:da:e2:79:6e:cb:4a:85:7c:a2:8a:62:4f:14:
ba:9c:53:f4:08:a1:f3:15:20:37:27:b7:e0:cf:ec:08:64:b6:
2b:20:a1:06:78:89:75:85:a4:17:d4:3d:35:98:66:cc:e7:9f:
cf:42:77:ab:c6:04:0e:71:a6:9d:f4:db:ca:07:a4:27:b3:08:
78:c8:3d:f5:cb:e9:57:50:e3:d5:cd:42:36:f9:a1:12:fa:73:
da:51:c7:f8:8a:9c:33:4a:3b:b6:d1:e4:e8:31:d6:8d:70:60:
d0:43:a0:a2:b8:54:bb:06:15:22:49:34:7d:1d:0c:ba:40:42:
72:4d:16:ec:ce:3f:1c:80:03:a8:ad:41:f8:e0:bb:77:0e:79:
75:d0:c0:27:ad:0a:de:86:55:89:4e:19:c4:30:3b:09:7e:10:
23:f1:ac:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:08 2025 by rpki-client