Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File: p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier: a+2STRODCeDXwSBwWZmXBNiAm+oy2npv8lA2fC2d/mo=
Subject key identifier: 9C:BD:29:0F:A6:13:D8:C6:AD:6A:F3:FC:57:23:86:78:14:AD:EF:84
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer: /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial: 019A50E2B13E608E29B2B7D105949E433E8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number: 141F
Signing time: Tue 04 Nov 2025 22:00:25 +0000
Manifest this update: Tue 04 Nov 2025 22:00:25 +0000
Manifest next update: Wed 05 Nov 2025 22:00:25 +0000
Files and hashes: 1: N0eHqNrggmbXdN8YP7o5Fb0Yns0.roa (hash: qT9/mEc5C1UH5p/xUpYvOvJn3BjOEx+x0C4t/XVyfCg=)
2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: MB8b9CARrMmz5Geb6wbRSosgGxOL6kP8Sw7iZoJEbmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:b1:3e:60:8e:29:b2:b7:d1:05:94:9e:43:3e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Validity
Not Before: Nov 4 22:00:25 2025 GMT
Not After : Nov 5 22:00:25 2025 GMT
Subject: CN=9cbd290fa613d8c6ad6af3fc5723867814adef84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:4f:d6:6f:c4:e6:f8:35:4f:22:39:79:11:
dc:49:aa:1f:15:c8:19:5b:8f:25:57:7a:ba:b0:27:
bb:25:f2:65:fd:48:9c:af:15:01:d7:c5:b2:c6:14:
91:82:f2:8e:08:ff:e9:e1:aa:1d:1f:ba:37:34:70:
67:34:8c:7e:81:ab:32:eb:2c:a0:59:53:37:aa:c6:
bc:8a:e6:93:d0:00:cd:66:f5:5e:c2:89:84:6f:a3:
2c:a9:0f:e0:59:d7:c9:15:86:68:57:ac:e7:27:92:
83:96:b6:9c:d9:74:01:4f:e0:42:9c:d4:78:4b:81:
c0:7f:4f:e7:72:39:8c:df:1d:91:b3:21:5e:78:21:
ea:76:20:8b:b6:36:af:68:bf:97:12:7d:8e:e0:26:
dd:80:7d:7f:eb:b1:c3:5b:ee:35:93:73:27:d7:5e:
0d:42:08:76:a6:ed:51:58:ae:2b:16:01:2a:3c:4a:
52:98:eb:40:7b:b4:26:5f:db:70:60:3e:22:d2:93:
3e:ec:89:4e:8c:bf:92:cd:b0:12:94:da:91:3f:74:
19:0a:14:e9:4a:58:54:af:37:20:86:8a:e5:06:71:
53:88:79:f9:8a:15:54:24:85:ac:bb:40:31:43:f5:
0f:08:48:07:de:05:75:b1:e9:17:3a:51:d6:d2:21:
21:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BD:29:0F:A6:13:D8:C6:AD:6A:F3:FC:57:23:86:78:14:AD:EF:84
X509v3 Authority Key Identifier:
keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f8:05:44:09:77:c2:d7:65:99:72:1b:4c:31:2f:35:3f:76:
e6:0d:19:27:a9:d9:f0:a2:10:5e:fd:5f:f7:51:22:34:25:83:
d0:c5:46:58:f1:88:01:5b:eb:b0:e7:19:1e:00:d2:69:cc:03:
cc:ed:87:b9:bd:b0:db:d4:ea:c8:16:02:47:64:5c:9d:33:40:
b2:0e:c6:a1:4e:33:ba:b1:6b:14:63:6e:45:a8:d1:fe:06:bd:
c0:40:87:54:05:d8:56:e8:47:8b:8a:65:35:8c:64:af:cd:b6:
ba:00:a5:54:78:78:86:f2:72:3d:fd:0b:ce:06:91:39:57:cf:
d5:a9:43:bb:cf:e4:5f:fe:58:83:39:af:93:76:87:df:6b:e9:
1a:6c:2e:69:6b:cd:36:bd:8e:47:7c:2f:c5:55:50:52:3d:42:
07:90:a9:d7:6e:07:d2:c9:b3:5d:45:a6:e2:f8:38:e4:b8:2c:
1e:65:b4:5b:75:cb:1d:81:39:cd:0f:cc:9e:45:05:2a:23:da:
d1:b4:04:da:a0:ac:b5:a4:fb:ff:be:15:f8:a7:db:06:a8:b9:
ed:f8:74:b1:ca:4b:5e:5a:34:85:47:a9:e6:b7:7a:36:4e:a9:
b4:17:0c:d7:97:96:67:9a:d3:7a:cf:bf:86:09:7d:42:2f:48:
b2:06:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:28:26 2025 by rpki-client