Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: p1E3lJdOSEUbxcdnI9qRuP5emI7UttPXblDFIjiM3kY=
Subject key identifier: 7D:1C:1A:1E:BD:44:88:D8:D2:29:43:3A:75:6B:55:55:51:3B:84:C6
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 019A4D3CB9658C5262FFFD28F0FEEB4AD7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 0BBB
Signing time: Tue 04 Nov 2025 05:00:16 +0000
Manifest this update: Tue 04 Nov 2025 05:00:16 +0000
Manifest next update: Wed 05 Nov 2025 05:00:16 +0000
Files and hashes: 1: FtUQDEV_goV9Q63cZwJrNo1XKeY.roa (hash: Poc/aj2i2jRAb5gMRxZ1X3AZiJk2CkXvF60h8JBU3Lg=)
2: GOVv7UWiyAgkUB324DNsuUmKdTE.roa (hash: ADQ5I5pX9eFcLUcZ8U56+xsynmnuecGVYVarRV0N63M=)
3: PEppcNvJjXnRhJY43E_LrbZ4b6Y.roa (hash: cA6/Zn5y/f62RQujNI9AmlKGDu+DsPIKIqYlGLbyskk=)
4: YiYsGJx6tfQVO081Vxo55GvUSDA.roa (hash: XzfROabzEDDgQ3YtgsMz+CrIxVTOUzesfcSiy4Nm4h0=)
5: dltNpJjwDGHyEEOA677kBUzkRvU.roa (hash: 5oogiShbtMsUJb/98HpJq5UTDNd0RiHRIGkjEdT9ssI=)
6: tBTs9qTZvhEc-OOPlwI4K3aRl-k.roa (hash: ej0EH67XzstYQ3vD/Dm513ioNKVEsWJ6CV9bJXDlLj8=)
7: u52qW4JyOvyxFH_dm7Mf8f_9xYg.roa (hash: p5pa88452Qlp5obMC/dsSAsRdIWVZbdy4Bw3DHihOtQ=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: Niln0NafjdKcjnK6tYQfkiALlFkKGD4ULrGOJM9w8T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:b9:65:8c:52:62:ff:fd:28:f0:fe:eb:4a:d7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Nov 4 05:00:16 2025 GMT
Not After : Nov 5 05:00:16 2025 GMT
Subject: CN=7d1c1a1ebd4488d8d229433a756b5555513b84c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:a8:b6:ef:14:54:60:90:d9:be:bd:1d:15:
51:a8:1d:88:7d:f2:c6:0d:cc:e2:3f:bb:ff:20:c4:
ce:39:d6:ba:aa:04:2a:ea:aa:d3:43:42:17:74:a3:
46:7b:b2:e3:31:a7:cb:0c:a6:11:34:8b:06:df:7b:
70:88:25:52:22:ed:83:94:20:bd:7b:68:0f:41:87:
3d:58:fe:9d:80:5d:6e:8d:ae:65:1f:cb:b4:df:60:
42:39:8f:48:ae:8d:85:1e:d8:d2:e4:76:02:56:db:
56:51:36:4b:36:f1:ae:07:86:66:51:54:b7:c8:87:
bd:e5:d9:1e:fb:68:5d:6e:92:0e:96:1a:c6:4e:1b:
18:36:f2:37:4e:f8:da:92:49:96:e2:32:da:05:8c:
36:ac:54:a3:30:25:13:b4:35:08:2b:94:88:79:87:
13:74:52:e9:10:25:ea:ea:f9:d5:54:3a:c4:b8:3f:
4f:ad:f7:52:70:28:c3:82:52:b2:30:d9:30:80:c5:
44:25:d1:af:81:5d:dc:8b:b9:7f:95:a7:4f:ff:cd:
d0:fa:64:28:87:5a:63:e0:eb:e9:c4:93:fa:8c:af:
9b:50:94:90:0e:1f:6a:2a:37:c4:ab:2c:7b:65:2a:
29:92:79:52:82:99:40:19:98:7d:2e:03:dc:77:a7:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1C:1A:1E:BD:44:88:D8:D2:29:43:3A:75:6B:55:55:51:3B:84:C6
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:22:6e:4f:db:aa:78:11:c5:eb:ad:8e:a1:7c:56:e6:86:ec:
00:e5:3a:ec:dc:a0:27:4c:d7:eb:3e:b4:8e:38:26:32:e4:29:
46:63:f2:ba:0c:29:50:87:45:9a:2e:b1:e1:46:c7:94:e5:01:
43:c2:9a:99:78:56:ba:4c:aa:3d:59:5d:29:4c:59:0d:b0:6e:
04:c2:59:16:9f:c7:31:e3:cb:08:a3:d6:a8:11:86:73:c7:27:
09:11:82:72:ed:e1:62:66:66:80:2f:ba:06:28:37:69:d1:a1:
af:0a:5e:f9:ca:3d:d7:7f:7b:43:cb:54:d7:d9:d3:47:40:5b:
d2:74:84:b9:e5:bc:98:7b:11:a1:d4:ca:57:46:8d:53:8a:61:
27:87:97:49:c1:ab:fc:b5:dd:85:fd:6d:c5:63:89:f0:e3:4e:
f0:82:bd:a1:19:d1:8f:52:f1:cf:6d:6f:0b:87:81:c0:59:a6:
04:59:3f:00:c4:31:80:b2:e3:2e:83:f0:1f:5d:58:4c:f4:8a:
43:78:d5:a2:fc:3f:36:55:77:30:18:fb:db:d3:01:6f:b1:89:
d5:14:d0:17:80:32:da:68:bd:84:d7:40:89:2e:54:40:b5:68:
b4:ab:ec:12:b3:a9:0c:94:48:fb:16:0d:dd:d3:54:bd:40:16:
3a:83:70:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:44 2025 by rpki-client