Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier: KwUnSjIuN//u41rNiCRtNxauFjNNCNCqqtqhQZsTNKE=
Subject key identifier: 77:CE:75:AA:37:CD:B6:43:C4:48:99:AB:96:4E:2C:5F:37:27:32:44
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial: 019A1DD0C56D0F4AF40E44123CA7F148B7FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number: 16F2
Signing time: Sun 26 Oct 2025 00:00:12 +0000
Manifest this update: Sun 26 Oct 2025 00:00:12 +0000
Manifest next update: Mon 27 Oct 2025 00:00:12 +0000
Files and hashes: 1: SE867Co1dWwT9rn_iwUHdqZbJb8.roa (hash: gDn91MwxNsmg9NA7daGFqFT1lPwuLwOn38cGeI8H8VA=)
2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: vb6hXommCFJ562IUATf5Csbg7asdsA5zjQTz+psghGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:d0:c5:6d:0f:4a:f4:0e:44:12:3c:a7:f1:48:b7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Validity
Not Before: Oct 26 00:00:12 2025 GMT
Not After : Oct 27 00:00:12 2025 GMT
Subject: CN=77ce75aa37cdb643c44899ab964e2c5f37273244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:61:dd:41:8b:a8:81:99:22:74:86:95:d7:7d:
93:3c:4a:4b:86:81:e1:8b:1d:96:20:a5:32:31:e7:
b8:d1:33:30:c0:0e:3e:7e:5a:57:07:33:66:10:ed:
85:39:fb:bf:25:14:d1:8f:02:8b:4d:d6:f9:42:1e:
28:2e:fa:cf:59:c1:ac:f4:f2:86:1b:a7:e0:cb:1c:
06:61:56:ca:82:5e:6d:f4:d8:db:71:77:e0:fe:99:
b8:e6:99:29:1e:9d:f0:03:0a:bd:0f:62:24:1c:05:
10:57:f6:15:b7:3f:11:18:02:2c:18:5e:89:45:f2:
81:ac:4d:58:1f:16:1c:12:ee:33:ac:9c:32:31:ae:
68:1a:86:84:dd:2d:f4:53:c3:31:88:5c:76:75:b8:
0f:d9:be:25:9f:e3:85:41:88:dd:3e:76:b9:6d:1c:
95:10:56:c2:87:94:09:ee:43:e3:a6:06:6d:89:4d:
73:b0:23:56:85:5e:a4:fd:ae:d7:ff:64:f6:d1:6a:
d1:d2:18:bf:dd:fe:64:5e:36:4a:c1:82:45:69:75:
60:18:84:46:0f:6b:be:a4:65:5b:11:80:3e:80:5d:
74:32:be:d7:56:30:d4:b0:50:a4:0f:44:ce:00:e2:
bf:f7:e2:f5:8c:ff:40:22:54:be:9b:5c:02:29:b5:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CE:75:AA:37:CD:B6:43:C4:48:99:AB:96:4E:2C:5F:37:27:32:44
X509v3 Authority Key Identifier:
keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:09:42:1b:5e:3e:20:c7:b2:a7:7f:2e:8d:53:d7:a4:e8:d2:
3f:54:eb:ac:ec:04:42:4b:b7:a6:17:7c:c8:02:53:e0:45:69:
06:f9:17:4b:c5:90:00:4f:b2:5e:1b:24:8d:22:48:be:dc:08:
6f:e3:b4:b6:55:55:ca:da:c4:71:15:1e:cd:c7:e8:01:ee:ff:
d4:3d:45:ea:b9:a3:c9:52:eb:32:29:4b:24:3b:8b:56:30:ea:
0c:b0:5a:3d:30:b3:24:18:0d:63:f4:ba:6f:cf:d3:b3:cf:1a:
6d:f6:d2:3a:98:02:66:09:a8:32:f4:8b:f7:36:2c:58:d9:c8:
8e:de:68:f9:9d:31:f4:5b:ad:23:f9:39:0b:96:4e:c5:f7:44:
23:1c:e4:62:b7:db:52:cd:66:ac:7d:f9:96:0c:8c:a1:1a:55:
b6:19:6f:13:74:35:a2:cb:4b:0c:5d:75:12:42:64:c9:96:fb:
5c:1e:4a:15:26:85:b3:fe:38:3e:1f:34:04:49:13:7d:83:f2:
23:02:24:bc:b6:b0:4b:eb:96:45:8c:2f:0b:15:8a:a0:37:48:
87:ea:4a:be:2d:a2:6a:fd:03:90:68:e9:80:dd:fa:c1:11:5e:
2c:7c:b7:7b:bf:40:7c:4b:1a:93:3b:af:6e:c4:50:f7:54:95:
70:ea:cb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:12:25 2025 by rpki-client