Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
File: t7GVtlEuyHh9maGy5OvYCIT5gLI.mft (raw, json)
Hash identifier: PkZHyhnUnSxLFxNbgeSSnPcsQU2FyaYJMAM3wK57CFc=
Subject key identifier: 72:95:56:6C:73:B2:66:7A:18:40:B9:3E:72:90:9B:ED:AB:0B:63:AD
Authority key identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
Certificate issuer: /CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Certificate serial: 019A7293D4A5F20AB4920D0827FC9BC57E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
Manifest number: 02FA
Signing time: Tue 11 Nov 2025 11:01:22 +0000
Manifest this update: Tue 11 Nov 2025 11:01:22 +0000
Manifest next update: Wed 12 Nov 2025 11:01:22 +0000
Files and hashes: 1: 5w_9JQX98jnIEcg67nkgGTJIRO0.roa (hash: UWly5Q/cVxLTnL0NxMmtD+E+9W1QFCDtSfYzLoDl3EA=)
2: t7GVtlEuyHh9maGy5OvYCIT5gLI.crl (hash: /1noamva7WO7Wp3v/Y0tZUoK8XNNqBwwZlrZRW3ffCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d4:a5:f2:0a:b4:92:0d:08:27:fc:9b:c5:7e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Validity
Not Before: Nov 11 11:01:22 2025 GMT
Not After : Nov 12 11:01:22 2025 GMT
Subject: CN=7295566c73b2667a1840b93e72909bedab0b63ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:d2:2a:c1:ba:fb:4b:41:a8:40:da:9b:39:
7a:6e:aa:09:29:22:49:10:69:f6:3c:f4:6d:f7:0c:
3b:7b:bb:a3:b4:38:09:90:55:0b:37:f8:65:e1:9c:
fe:d3:cc:99:e2:d2:2e:a0:5f:33:7e:f6:76:2d:fc:
f4:27:ca:a0:76:a5:f1:93:6c:28:1b:22:9a:2e:06:
4f:9e:1d:c2:58:25:15:45:8c:d6:be:1b:9d:76:e5:
b1:87:08:96:fb:df:b5:6d:34:37:f8:c3:17:d6:fb:
d5:d1:58:0c:ee:e3:b3:78:11:52:05:d8:f2:57:0b:
5e:87:b9:5b:c8:e4:0e:78:6c:24:a3:1a:14:9a:be:
5e:b1:59:b2:c2:43:86:db:55:4f:aa:74:21:68:f8:
9e:b3:a2:4b:97:1d:3a:56:2c:ee:55:c1:9c:64:b3:
95:ae:20:a0:b2:e0:f4:d3:f7:92:c6:10:6f:3a:54:
e7:fa:20:98:9f:a8:fc:37:da:2d:9b:5b:ca:11:65:
fa:13:8f:c7:f2:d2:38:cb:f2:0d:38:9b:97:02:f1:
f8:2a:97:6f:1d:56:18:9c:7f:ab:9f:3f:6f:ea:bb:
e8:c4:6d:80:e5:59:46:85:3e:a9:6d:8a:34:36:de:
19:ac:9f:c9:74:fa:a8:cb:66:15:e9:74:d9:10:2f:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:95:56:6C:73:B2:66:7A:18:40:B9:3E:72:90:9B:ED:AB:0B:63:AD
X509v3 Authority Key Identifier:
keyid:B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ce:4d:c1:47:b1:76:33:f9:99:bb:6d:5a:2b:e1:47:9f:d0:
8e:e0:f8:56:a8:04:14:ed:6a:91:77:7c:95:25:cc:e8:f4:55:
b2:78:a8:1e:5e:62:ca:93:d6:14:f6:53:b7:fa:56:25:65:2a:
5a:81:04:eb:97:cf:57:37:59:31:28:b6:22:22:0e:8c:ed:1d:
c5:53:1f:cf:e2:ef:51:18:31:4f:a3:02:dc:9b:de:35:f5:8f:
2e:85:f7:c0:45:30:c6:a9:64:fc:b4:45:67:2f:76:06:25:17:
a5:0c:a1:3f:96:8c:d8:ed:f3:b8:9e:96:d5:3e:f6:40:e8:ca:
ee:b4:58:fa:16:de:64:10:4a:15:56:fd:29:8c:9b:ce:79:e8:
64:d1:7b:d5:b2:c6:b2:06:82:59:af:ea:3c:5c:5d:ab:ee:c1:
cb:ea:de:cb:0d:a9:46:b7:4d:4b:a1:36:02:9a:4b:fa:96:04:
02:95:a7:16:52:0c:df:fe:a9:02:e8:77:89:a7:ff:16:21:12:
ee:d9:98:fa:c2:a3:30:4f:6a:64:e9:70:18:87:8b:a5:9b:e5:
b3:fa:d6:c1:45:11:fb:95:0e:8d:62:86:3a:c9:08:af:93:6b:
8a:1f:87:fe:b0:5f:90:b7:58:ea:03:b0:2d:57:fb:ea:d7:0d:
5d:7e:78:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:38 2025 by rpki-client