Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
File: 7aJsQI_Ge3UnNMyZfzYw269vYG8.mft (raw, json)
Hash identifier: 75VhHpk23V/Iu+PU+ZOmnX3AKQGySITInX5UYPgaI9M=
Subject key identifier: 47:5D:2B:FB:84:8E:6C:54:6C:E8:6A:F8:00:48:22:74:0B:16:7A:76
Authority key identifier: ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
Certificate issuer: /CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Certificate serial: 019A72261AC8D8CC88B40D726B8A6DCF70DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
Manifest number: 0B97
Signing time: Tue 11 Nov 2025 09:01:31 +0000
Manifest this update: Tue 11 Nov 2025 09:01:31 +0000
Manifest next update: Wed 12 Nov 2025 09:01:31 +0000
Files and hashes: 1: 7aJsQI_Ge3UnNMyZfzYw269vYG8.crl (hash: 0Rth1t5YHVz8tQWG+FiOTFJOLYFsFXXL4uHa6JIMqdQ=)
2: JN4F6grFlB3Dj8-hg1uFDcOXCEE.roa (hash: K8bXo6vEOSPG5pKmJ8Ir19tJNgI9+I5+FHzJIbxUZek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:1a:c8:d8:cc:88:b4:0d:72:6b:8a:6d:cf:70:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Validity
Not Before: Nov 11 09:01:31 2025 GMT
Not After : Nov 12 09:01:31 2025 GMT
Subject: CN=475d2bfb848e6c546ce86af8004822740b167a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:ce:a1:81:8e:a8:e1:c0:92:ee:2d:17:a4:
23:0e:62:28:3b:17:b6:f8:86:9d:e6:2c:2a:d2:00:
6d:4b:e9:12:88:d0:bf:72:e2:7b:6a:7c:65:78:6d:
3c:13:70:24:38:a4:4c:67:5c:fe:91:e6:5e:ae:40:
e5:b3:6b:f1:50:61:0c:42:2e:39:ee:81:e0:86:48:
8f:a2:d6:a1:1d:42:40:24:66:4a:b5:7b:e9:66:94:
ab:2f:5f:11:1c:05:39:6b:79:3a:47:82:cf:cb:e6:
54:54:50:6e:cb:3f:99:1a:16:03:5a:03:b1:22:81:
cf:95:e4:38:4e:2c:7b:64:cc:9f:29:19:65:b1:81:
7e:e0:ba:0b:d9:ce:5d:0a:0d:4e:57:e5:3c:ee:25:
9a:52:9a:4b:0d:51:72:95:1c:3f:60:91:a3:26:d0:
02:37:fe:c3:9e:3f:d6:7d:86:24:db:c0:96:d7:1c:
b4:db:da:54:a9:f2:e2:5b:d0:60:48:1f:1e:0a:cc:
32:79:dd:c3:e2:dd:4e:72:2d:f2:e5:cf:21:85:e3:
53:67:ab:88:32:e8:53:8d:43:f8:ba:2e:57:2f:89:
e2:23:92:92:9c:8b:8f:4d:b8:fa:30:dd:eb:3e:6d:
d7:9a:c4:66:d9:7f:eb:b7:c6:fb:29:e4:ef:dd:d8:
34:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5D:2B:FB:84:8E:6C:54:6C:E8:6A:F8:00:48:22:74:0B:16:7A:76
X509v3 Authority Key Identifier:
keyid:ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:61:c9:a2:e0:d7:ad:f0:a4:ef:59:cb:fc:22:21:73:3d:db:
ec:f1:71:45:f5:c6:d5:d3:81:b1:52:50:4e:84:be:81:3f:68:
f4:db:40:54:06:bf:4b:9e:d0:0f:14:ac:30:da:4c:32:b8:b0:
43:ec:53:70:33:0d:92:91:4b:cc:1d:4f:c3:82:b1:46:68:52:
b8:ff:91:6d:d9:b2:db:66:73:61:4d:4f:27:b0:4c:65:0e:5b:
5e:86:71:56:b1:05:99:30:4d:a1:a4:76:e3:e5:6f:69:98:e6:
a8:f8:f3:5f:10:3a:22:90:fc:e0:1f:a6:90:b4:83:ea:44:57:
6b:c5:b2:e9:a7:8f:f7:09:2b:12:0e:15:1d:1c:d4:e4:46:19:
9e:be:a6:5f:9a:4a:bf:ec:46:77:ec:96:a4:90:0d:a7:d6:1f:
b7:26:b7:84:38:68:4e:15:7b:70:75:05:88:35:b1:10:ac:80:
2a:c6:19:3f:79:7d:14:02:ad:4d:cf:96:4a:84:d3:2c:c3:a8:
e9:85:7c:a2:dd:39:30:54:fc:2b:20:b1:2c:b5:e0:e1:74:88:
50:ac:22:11:84:63:ef:f6:ef:7a:60:a1:cb:a8:56:d6:9b:29:
db:ab:17:d0:cb:c5:86:e6:5f:a6:c1:b9:03:fa:c6:c2:71:bb:
6e:3f:36:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:52 2025 by rpki-client