Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: eD2xToPRqEadDdP5jJKRp+H/oJVen23KRn2+SaJcPuc=
Subject key identifier: 2E:98:76:61:13:2D:F7:89:52:7B:B7:EB:2F:A2:77:9E:DB:19:35:E8
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 019A4E4F848E8BB16708D7DF79FB867949DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1716
Signing time: Tue 04 Nov 2025 10:00:25 +0000
Manifest this update: Tue 04 Nov 2025 10:00:25 +0000
Manifest next update: Wed 05 Nov 2025 10:00:25 +0000
Files and hashes: 1: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: LliaexqNMz0jOvPocOBse+nhPU85P7mAMCdb8VRJPaI=)
2: y2IPmXUvA-hOkWs492ksc-DWCKQ.roa (hash: qKtRuRd69clPPsqawIh09HUba2GRDePDsao1bLap4SI=)
3: zrX35UZIaDQ7gsBizHdrkf-Nup0.roa (hash: YG/4j+fW6PNSItLJkk/6gbwhIYXjKk9jfgVFuX7jzdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:84:8e:8b:b1:67:08:d7:df:79:fb:86:79:49:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Nov 4 10:00:25 2025 GMT
Not After : Nov 5 10:00:25 2025 GMT
Subject: CN=2e987661132df789527bb7eb2fa2779edb1935e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:eb:e4:0e:0e:2c:5e:bb:3a:bd:ca:04:53:
4e:9e:3c:b7:b9:5b:7a:8c:5c:b7:44:f7:4c:d6:98:
ba:1b:e7:7d:04:eb:1b:3d:f3:ed:d5:40:ba:fa:bd:
90:c3:8f:4b:53:03:b6:53:9a:e2:ef:f4:ee:4c:3b:
ab:80:72:69:62:50:86:f3:5f:81:09:cc:93:42:c6:
40:da:a6:c8:e0:6a:5b:6c:74:b4:ae:b3:22:6b:07:
82:1d:48:c3:21:21:30:d5:28:d7:31:2c:f5:39:82:
3e:57:74:76:c4:1c:7d:6c:c2:44:5e:bd:37:9c:2a:
db:8d:49:5c:fe:43:64:bc:76:80:5c:9b:79:26:e6:
86:72:c0:1e:fc:52:9c:07:cd:ae:54:20:be:57:a8:
14:35:f2:69:71:41:38:fb:4a:20:fc:84:fb:35:67:
18:b1:9b:b2:a8:32:94:7a:8b:21:16:00:ce:fb:25:
03:75:b3:9f:34:b5:a7:0a:4e:53:f9:05:0c:93:eb:
8d:65:01:28:66:8f:38:40:12:4c:52:e7:77:90:f8:
fa:82:6e:4f:95:d3:4c:1e:5a:a0:b8:6b:ba:bc:e9:
44:af:e7:e6:e3:b3:c3:57:b4:e2:47:05:8f:3d:16:
4d:c2:dc:54:b2:64:b5:31:e1:75:89:eb:36:3c:cb:
35:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:98:76:61:13:2D:F7:89:52:7B:B7:EB:2F:A2:77:9E:DB:19:35:E8
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a0:07:d2:58:a9:17:34:d7:4b:f3:74:d8:1e:a3:12:57:79:
06:89:89:a9:87:91:a9:eb:77:61:56:92:a9:cd:4d:fc:3d:d4:
93:d3:bd:66:30:df:a3:b0:55:94:aa:59:12:d2:21:14:0b:4a:
12:24:76:af:8c:10:a3:9c:63:ae:34:07:8e:9b:d1:1e:97:97:
96:33:0d:dd:50:1a:d3:7c:ce:e5:2d:cc:ab:d4:cb:12:aa:0e:
f9:f0:71:20:23:47:47:dc:56:cf:a5:6a:30:04:86:2e:49:3f:
e3:e6:1a:51:5e:02:08:4a:57:fa:51:51:bf:71:85:a3:fd:b2:
12:1a:54:f6:df:27:43:57:50:4e:f9:e7:f9:c1:1f:7e:61:56:
55:1c:86:f0:f6:ae:65:32:5f:56:6a:bd:9c:bc:6c:e6:59:1a:
2b:18:83:84:8b:fc:62:9d:a2:28:b2:18:6e:92:b6:0c:12:de:
f3:72:a3:48:07:9c:b7:ce:e3:98:ee:23:da:7f:2c:8e:06:23:
72:46:ef:4d:6a:53:30:d1:33:3e:c6:6b:fe:45:6a:18:49:b4:
d4:39:5d:3e:65:20:e3:7a:b1:52:e0:e1:fc:85:29:d6:15:1d:
e8:17:60:5a:e3:48:de:12:a8:61:73:0f:fd:da:71:d6:c5:98:
08:01:15:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:10 2025 by rpki-client