Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
File: fffP1siCamf2QqNz0TGVUwjZwco.mft (raw, json)
Hash identifier: E2gv02UwYfmgBLgVw2i5T3gy7n3ZJbF0nVdeUacv7Hg=
Subject key identifier: A7:9F:B3:CB:88:44:AF:ED:4A:BE:CD:1D:1A:EB:48:06:91:B9:58:07
Authority key identifier: 7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
Certificate issuer: /CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Certificate serial: 019A7293A9E8CB5A0819DFB46B06FA27E503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
Manifest number: 15E3
Signing time: Tue 11 Nov 2025 11:01:11 +0000
Manifest this update: Tue 11 Nov 2025 11:01:11 +0000
Manifest next update: Wed 12 Nov 2025 11:01:11 +0000
Files and hashes: 1: 1-QIjmT5ytjlZ7ZqLyFbtzizpu4U.roa (hash: XgYeIgk7TzTLjMF5WHOcmWJnxBjJamzS18zkuyda8BY=)
2: fffP1siCamf2QqNz0TGVUwjZwco.crl (hash: ltJP59m7jC+H83XNNiHsmjwf4SDSd7wR1xKTgZU6lb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:a9:e8:cb:5a:08:19:df:b4:6b:06:fa:27:e5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Validity
Not Before: Nov 11 11:01:11 2025 GMT
Not After : Nov 12 11:01:11 2025 GMT
Subject: CN=a79fb3cb8844afed4abecd1d1aeb480691b95807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:e2:b3:b6:37:d9:e4:20:93:91:b0:3f:b4:
8d:46:2e:2e:a6:b3:d6:63:8d:c0:93:6d:bc:78:f2:
b9:ed:25:0b:37:6f:e9:1d:99:b7:f1:cc:90:66:f4:
6e:70:93:7a:36:9d:b7:5d:08:78:6c:97:88:53:a2:
e9:39:cf:12:4c:1c:f1:27:4a:25:04:24:02:18:f4:
a8:ca:81:9d:45:ed:30:0e:39:46:87:84:64:13:44:
7b:5f:24:97:6d:8c:58:c0:f8:ff:3a:21:6e:68:30:
b7:00:17:dc:5d:a2:48:3b:80:1b:53:d0:16:c2:b5:
f9:95:3a:7a:57:fc:2d:f6:6c:e9:81:f9:a0:e0:8f:
26:d6:57:3e:17:f2:a9:a2:d7:ac:69:c6:97:9a:b5:
0d:6c:97:f5:8c:7c:b4:53:44:53:e6:31:2f:11:19:
1f:9a:20:64:2c:b7:08:6d:79:10:04:80:23:7c:2f:
23:80:59:81:ce:f3:b0:24:bd:9e:76:91:da:a0:ec:
48:e8:f1:2a:3e:e2:30:9d:f9:92:b6:03:35:1b:e9:
e7:c2:a5:cf:8e:ec:19:0e:c7:ef:0b:29:e0:19:2c:
ef:03:3f:c7:54:7c:60:6a:7a:85:08:93:98:99:66:
39:77:eb:88:42:68:6d:c8:00:41:23:50:03:11:68:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9F:B3:CB:88:44:AF:ED:4A:BE:CD:1D:1A:EB:48:06:91:B9:58:07
X509v3 Authority Key Identifier:
keyid:7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:01:44:25:77:d9:15:cb:2b:6e:11:1d:42:0e:67:c9:3e:03:
5a:39:f0:c2:a9:e6:7f:49:ce:4d:0d:f9:dc:bc:b2:8a:7e:7e:
d3:00:2e:3f:5f:56:32:5c:6f:10:c7:3d:f8:a0:04:6c:c1:f1:
b3:1f:60:51:d1:af:c4:5f:b5:9c:61:87:fe:2c:df:02:20:7f:
40:43:d1:2b:d7:96:31:68:a3:b8:c9:6b:9b:ef:92:62:2d:ec:
38:54:8b:e6:5f:94:50:05:5f:51:b4:5e:4e:10:7a:37:90:ef:
72:ea:c5:1b:5e:ec:b3:d0:55:5d:0b:7a:bf:95:c0:c6:2f:a6:
5c:73:62:e5:25:5b:a9:02:3e:8e:f4:37:03:18:c9:f6:9d:e4:
69:07:79:e0:ab:64:38:29:6c:90:9f:ac:0f:ab:59:20:1a:54:
19:38:55:4d:4f:0f:16:4f:bc:e7:76:35:78:fe:22:e9:6c:35:
8d:f0:bc:3c:0c:2e:32:9f:df:c0:0b:30:42:9c:2e:44:3b:73:
97:b5:b3:db:99:f6:25:f4:82:13:b5:7a:14:17:5d:fa:f2:08:
e3:df:5e:a9:9a:c9:46:79:33:54:ef:f4:7b:8b:3b:84:30:77:
a5:e0:e8:a9:fe:c0:47:91:87:7f:6e:9e:06:8e:ac:21:0d:e1:
bc:44:c8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:28 2025 by rpki-client