Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: /UMnL8gSzk+HvRLy5xyVf7TPCqAhqtRXH9+109vJ8p8=
Subject key identifier: 34:24:FC:D8:64:12:7E:E0:43:1F:52:B4:66:E1:71:D7:C9:6B:42:71
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 019A5263845DAEB8945D5EC5B4995BC9E8A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 170F
Signing time: Wed 05 Nov 2025 05:00:44 +0000
Manifest this update: Wed 05 Nov 2025 05:00:44 +0000
Manifest next update: Thu 06 Nov 2025 05:00:44 +0000
Files and hashes: 1: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (hash: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: iPqR3r20BcPWZy/EKJMObBMHHyS6LeYxKXEHKbt2bhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:84:5d:ae:b8:94:5d:5e:c5:b4:99:5b:c9:e8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Nov 5 05:00:44 2025 GMT
Not After : Nov 6 05:00:44 2025 GMT
Subject: CN=3424fcd864127ee0431f52b466e171d7c96b4271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4f:2e:19:3b:3c:50:d4:f6:4d:e0:46:e6:86:
1e:ea:c5:0c:c3:26:8e:35:1b:2b:bb:36:48:3b:e4:
be:49:1b:69:97:bc:6a:67:92:88:07:a8:b3:06:5b:
df:69:c2:88:a4:f0:80:a8:78:7f:01:83:51:aa:48:
ca:6b:14:72:12:dc:bf:08:14:72:11:f7:11:24:fc:
1e:0c:3d:e5:f0:86:dc:7b:2d:58:07:b3:ed:46:fa:
94:a0:32:c7:ae:b5:dc:91:c4:a5:aa:ff:a6:89:4f:
39:b4:b4:f2:06:06:36:de:a7:95:ad:61:49:32:12:
7a:ea:a9:a8:d1:c6:84:33:84:d2:5d:b0:a9:03:3d:
5e:40:2b:c9:51:5e:dc:8b:c3:1f:50:c3:ea:bb:d1:
99:17:4f:40:ab:5c:f7:80:78:05:59:b6:c4:36:85:
7f:62:8a:1c:d7:88:84:b8:6a:97:5d:74:5e:e2:3a:
fa:cb:8b:a7:d2:75:1b:e0:ad:28:0e:6e:99:fd:70:
a5:de:fd:aa:06:5c:5b:6a:63:a2:68:b5:0e:cd:2f:
74:10:a4:a4:94:28:2f:ce:9e:9b:35:e3:20:ee:ae:
4a:6d:24:de:c8:aa:74:3e:6b:25:6d:22:22:cf:e3:
b9:77:a9:49:cc:40:af:73:e8:c5:ce:b4:6f:97:0c:
34:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:24:FC:D8:64:12:7E:E0:43:1F:52:B4:66:E1:71:D7:C9:6B:42:71
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:80:4d:78:a0:f7:cc:54:78:02:33:4a:9c:43:64:fd:1c:fd:
73:49:df:1e:74:b6:c3:c6:c7:26:9a:c4:67:7b:2c:9b:cc:1c:
a9:bd:c7:d8:2a:32:6b:f5:5c:47:f8:5f:ed:55:24:0a:e8:f5:
83:00:36:cb:c4:5c:52:c7:53:34:1c:01:98:4e:24:2c:bd:ae:
7f:f5:97:06:ce:3c:af:be:6b:60:20:31:1c:e8:90:97:01:92:
b7:57:5b:d7:a7:75:6f:ae:e3:72:2d:c2:e1:d1:70:ff:68:41:
67:a6:16:83:dc:56:93:27:76:f0:8d:c6:ac:93:6c:7b:22:d9:
23:d5:b4:c1:04:e4:c1:28:e8:31:06:30:e5:44:d8:de:e8:11:
16:b3:94:7b:ad:fa:f5:89:f0:70:db:b6:47:74:e9:fc:ac:2e:
b4:92:8d:cc:64:57:6d:50:46:7a:a6:43:19:99:d7:7c:88:05:
0b:54:ae:55:61:6c:62:11:c9:28:be:20:d6:9b:c5:47:24:0e:
13:76:78:8e:ac:86:ca:fa:16:f6:f6:6a:30:b0:1e:b3:17:75:
8b:42:7a:d2:35:5d:43:e1:28:ca:85:47:15:ad:dd:8e:c5:fa:
be:45:19:8b:2e:c8:ca:6b:66:7f:ae:66:4a:0a:22:9e:73:04:
4c:63:39:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:46:38 2025 by rpki-client