Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
File: t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft (raw, json)
Hash identifier: zIPW+bo5x2nmgAEdWNZvKxBpEdX8oooDLxsQbF8YkpY=
Subject key identifier: 54:D0:6F:58:AC:44:37:79:19:FB:EC:9A:D3:1D:E5:F2:2E:C2:F8:DF
Authority key identifier: B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
Certificate issuer: /CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Certificate serial: 019A4DE1A7A98FD5B3DA3149AD7FF95CD2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
Manifest number: 0560
Signing time: Tue 04 Nov 2025 08:00:25 +0000
Manifest this update: Tue 04 Nov 2025 08:00:25 +0000
Manifest next update: Wed 05 Nov 2025 08:00:25 +0000
Files and hashes: 1: 5UnHlEhm50CtuwPcH8NrwNWIRVE.roa (hash: WYorLJXt+zMh+fr/A2gm/2FsojIk0FopUtuRBXlC1D0=)
2: t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl (hash: 77D4SaAGRkhGjuJsl2YmDSrPNwwf6SlU2ZV3wZZNqOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a7:a9:8f:d5:b3:da:31:49:ad:7f:f9:5c:d2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b92bdea5b97acabc2f658c412bf746ee0e207d
Validity
Not Before: Nov 4 08:00:25 2025 GMT
Not After : Nov 5 08:00:25 2025 GMT
Subject: CN=54d06f58ac44377919fbec9ad31de5f22ec2f8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:09:b4:b8:fd:f6:3a:d8:b3:05:9b:c8:b0:55:
0b:7f:cf:64:4c:6c:27:1b:6f:74:27:0e:08:b2:05:
1a:6e:45:69:cd:7f:0e:e7:1c:ef:af:b6:0c:4d:ba:
34:c9:54:02:60:25:e0:e2:85:af:c9:be:8e:cc:7b:
47:8c:44:16:51:19:cd:63:81:9c:63:91:89:69:6c:
27:8f:4a:06:50:ba:d9:47:7c:48:6b:1b:ff:b2:bf:
ad:f8:8c:51:70:62:9c:22:5d:c4:c5:4f:70:6a:71:
9c:65:a3:13:ab:46:1a:de:20:2f:af:56:eb:7d:41:
53:41:40:5b:86:1c:91:6f:64:f3:88:f8:5f:91:38:
b6:09:df:a3:75:8e:f5:b0:69:d3:5c:0c:a3:df:b6:
24:91:3c:14:1a:4a:cb:50:37:6f:a6:01:96:a7:12:
40:7a:39:b9:3d:0b:de:cb:9b:38:07:f7:f1:34:3f:
1f:bd:c6:6a:bf:69:a0:16:71:2a:a0:12:0a:30:fd:
2f:03:05:15:20:31:77:6f:be:d7:66:97:14:d2:03:
a1:fb:0b:fe:84:a2:ff:f0:47:29:b3:ba:d7:13:85:
ae:ab:6d:3d:bf:70:de:1c:ae:03:7f:ff:f4:87:18:
44:df:a6:9d:de:8c:a6:c4:9d:59:ee:99:13:16:0e:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D0:6F:58:AC:44:37:79:19:FB:EC:9A:D3:1D:E5:F2:2E:C2:F8:DF
X509v3 Authority Key Identifier:
keyid:B7:B9:2B:DE:A5:B9:7A:CA:BC:2F:65:8C:41:2B:F7:46:EE:0E:20:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7kr3qW5esq8L2WMQSv3Ru4OIH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7b6448-4fdc-474a-a082-dd9009b3317d/1/t7kr3qW5esq8L2WMQSv3Ru4OIH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:da:88:b9:5a:bf:b5:65:7d:14:e2:b1:11:bf:af:2a:c4:b3:
c8:06:86:9a:c1:c2:dc:cd:d1:6f:81:5a:e8:8d:af:05:99:bc:
e2:82:63:fa:7d:d4:55:13:95:c1:a3:d2:8f:39:5e:5e:a2:d9:
c3:4c:20:e5:ab:b1:b9:77:05:13:5d:06:f8:42:4e:ac:b0:c5:
84:1c:4a:e7:c6:70:56:d5:ab:07:4f:50:5a:d9:67:db:03:77:
1c:52:16:39:86:05:7f:6e:a3:72:a9:8a:2a:17:74:0e:f7:1d:
7b:58:1e:50:63:12:40:b7:5b:65:07:0d:10:b3:c4:e1:24:02:
53:88:10:88:96:18:eb:4b:a8:17:62:04:73:16:16:64:b3:a7:
66:8f:34:4e:2e:ec:94:c0:d4:78:bd:dc:54:c4:cc:b8:fd:cc:
f4:fa:81:29:de:09:70:29:37:7a:0a:ab:0c:2b:4e:f6:61:b1:
f6:ed:b8:6d:ac:2b:48:36:67:17:49:0f:e7:80:ce:c8:5c:e6:
b0:55:35:8c:c6:2b:12:79:f7:1e:fb:d2:3e:1e:9d:fd:91:6f:
a6:19:4b:74:86:f4:f3:39:66:72:1c:c0:b8:b0:43:15:e4:f3:
f9:4a:c8:af:eb:72:9c:58:a0:5a:87:d5:62:55:93:9f:03:2f:
8c:31:f3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:11 2025 by rpki-client