Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json)
Hash identifier: ot1SigMnC95DCd4keAi+hpLcTaV6onEQBkdUdA9/ZL0=
Subject key identifier: D0:2D:D8:68:6B:8D:53:3E:D2:FA:9A:B8:19:A6:08:FB:6F:C3:9B:39
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 019A725CE573137DBD77040BF9879446ACF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:01:21 +0000
Manifest this update: Tue 11 Nov 2025 10:01:21 +0000
Manifest next update: Wed 12 Nov 2025 10:01:21 +0000
Files and hashes: 1: 36Bb65z44MAsVTDbQRVeDeDmufQ.roa (hash: uPSc0dWD/LjqPKmpNOCLQpNBH6/TFH+CbImLmGpMPVg=)
2: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: 6z6BQYaz2Jy8JEp/qljYGvWmehceoq1d9Pd/HrvxHfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e5:73:13:7d:bd:77:04:0b:f9:87:94:46:ac:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: Nov 11 10:01:21 2025 GMT
Not After : Nov 12 10:01:21 2025 GMT
Subject: CN=d02dd8686b8d533ed2fa9ab819a608fb6fc39b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:5e:54:c4:01:6a:77:3c:a4:aa:d7:39:75:
79:a6:95:7b:e6:07:c1:17:65:c2:b1:95:58:c0:79:
6e:bc:27:3a:5a:db:48:25:f6:71:f1:47:af:8c:a3:
fc:d3:b6:7b:2c:af:f1:c0:9c:58:76:cb:a4:b0:9a:
68:c5:30:95:89:55:8e:9b:51:18:a3:89:4c:bf:1a:
88:3a:b6:45:bc:e4:b0:13:ab:0b:b3:42:52:92:8a:
13:17:f0:44:e1:6e:d7:43:81:19:c5:d7:51:f7:6d:
e7:0a:7b:4a:66:65:9b:39:9a:5a:63:8b:10:61:1f:
62:be:36:a7:f4:43:14:6c:2a:81:00:cf:f6:19:7f:
4c:cc:99:d1:40:85:94:3c:af:26:56:f5:18:3a:14:
43:f5:56:b2:7e:e4:2f:02:8f:21:92:a4:cf:30:f5:
4a:64:20:6c:73:a5:e3:f8:fb:2d:7a:e7:2d:7b:85:
d2:fc:17:ac:3f:2e:67:bf:d0:c3:27:c9:3e:f4:5c:
85:26:a4:95:06:da:94:49:cd:c1:b3:67:18:a0:a7:
37:3f:18:35:18:87:14:6d:88:52:1f:44:6f:a1:ce:
d8:6b:36:a8:05:53:58:5b:02:c7:4d:db:ed:85:17:
4d:37:e6:32:a4:93:78:d5:d1:7e:b9:c4:56:bf:a0:
9a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2D:D8:68:6B:8D:53:3E:D2:FA:9A:B8:19:A6:08:FB:6F:C3:9B:39
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:68:af:22:47:c8:a8:61:6b:e6:f8:e4:0b:51:13:3a:cf:98:
a5:12:69:4a:ac:86:a6:01:85:2f:1c:d7:60:0e:74:d5:e4:5d:
88:54:10:9d:10:66:2d:35:3e:36:b1:33:d0:39:01:e8:e6:26:
b8:3c:4a:0c:6c:4b:ef:83:ac:80:2e:64:31:2e:0a:5b:3e:63:
69:b3:9b:a7:95:4b:01:45:cf:2a:00:42:b6:a7:0e:9f:23:6e:
d7:d9:5f:df:72:1f:f2:a5:59:ce:f2:8c:f9:d8:5c:26:77:f9:
d3:2f:29:08:bc:f3:03:fb:f1:f5:5f:61:e5:01:6b:d3:3a:c8:
00:dc:33:0e:83:62:bb:3a:be:0a:17:cc:ea:0f:25:ee:b4:5c:
51:a3:7f:fc:c6:0e:b9:88:d3:10:b7:ed:74:dd:75:fc:c9:a1:
d9:1a:db:b2:62:ee:19:0c:e9:da:7d:94:ce:84:81:62:1e:c3:
22:da:73:d3:0a:4d:f1:0e:8d:75:76:1d:17:51:34:ff:aa:8d:
74:6c:d3:3b:4e:9e:11:bb:b5:9a:6f:61:70:bc:57:9e:06:c0:
b5:f4:51:2d:32:74:1e:eb:ed:9f:1c:78:04:bc:09:cc:73:ce:
c5:b5:1d:3c:76:90:05:5b:a6:2a:93:ed:83:51:ea:b4:9c:1d:
33:e7:a8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:57 2025 by rpki-client