Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
File: 996iwVmT1oMXUKpjDg5oDZ7viIo.mft (raw, json)
Hash identifier: PalAI9nqQWrqqOS9TvEP64QPcQecINcaWuofO6b6ASs=
Subject key identifier: F7:24:46:C5:2A:90:9F:B6:79:85:32:7D:62:70:96:1E:69:7D:02:E5
Authority key identifier: F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
Certificate issuer: /CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Certificate serial: 019A733852E5CFF949540A36E03F585DA136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
Manifest number: 01D5
Signing time: Tue 11 Nov 2025 14:01:02 +0000
Manifest this update: Tue 11 Nov 2025 14:01:02 +0000
Manifest next update: Wed 12 Nov 2025 14:01:02 +0000
Files and hashes: 1: 996iwVmT1oMXUKpjDg5oDZ7viIo.crl (hash: IcG2X0cd86LFadJ4szp/ee1PAZX2EGXZJAF4ctSKE7I=)
2: Q_OYedJWMY4R6WjcRHhbze4rY30.roa (hash: I5gaAF/DaFJrmNnPn+q8QcrAIPjnX3NXACdoAl2BzTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:52:e5:cf:f9:49:54:0a:36:e0:3f:58:5d:a1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Validity
Not Before: Nov 11 14:01:02 2025 GMT
Not After : Nov 12 14:01:02 2025 GMT
Subject: CN=f72446c52a909fb67985327d6270961e697d02e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:09:28:b0:95:9a:cd:1d:74:55:bc:00:0b:
29:1c:b9:1f:0f:6b:f6:33:93:45:51:d3:80:a4:62:
42:39:b4:31:7a:f7:d9:58:7f:62:29:dc:8c:f7:6c:
e1:13:82:a1:25:f8:56:d9:f7:e6:f3:6a:74:04:c8:
62:17:8d:75:03:14:f5:e6:85:b8:20:8c:f5:42:5d:
56:e9:9e:f1:3b:d1:c8:97:52:fe:b9:8f:49:fb:fc:
63:36:4b:d2:7f:d8:e5:30:95:0a:74:49:e8:da:d0:
8c:3e:4d:58:09:ca:5f:4e:67:72:51:40:57:8e:f1:
fe:b9:a6:06:c6:05:56:94:69:1d:2c:be:bd:20:bb:
51:98:b6:c8:0b:76:1a:67:7c:a3:c9:c6:d3:66:da:
22:f2:d8:60:72:fc:ba:25:7f:74:f6:b1:f2:49:d1:
c3:2d:b9:67:d3:22:9d:72:27:64:ef:c7:96:cf:8a:
3c:ce:f8:a4:d6:2a:91:5a:90:8b:b0:1b:1b:62:04:
3d:ad:39:93:1b:58:dc:83:22:36:b5:cd:14:33:cc:
d6:c8:77:30:cc:7a:36:32:a9:94:4d:5c:d3:6a:88:
69:2d:8a:10:2b:d9:17:34:50:37:fb:d9:74:0b:d0:
b8:72:7b:f8:cd:ac:39:73:b3:2a:2e:69:74:1c:0d:
3f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:24:46:C5:2A:90:9F:B6:79:85:32:7D:62:70:96:1E:69:7D:02:E5
X509v3 Authority Key Identifier:
keyid:F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2e:71:82:5c:dc:00:74:e3:2c:88:2b:d1:e6:0c:17:c7:4b:
c8:84:a8:47:54:0d:86:f7:0b:cc:6d:5e:cb:84:1f:af:7b:b8:
2b:ed:1d:06:ac:e9:ca:96:52:09:cf:c7:12:ae:21:1e:b8:cd:
c3:5d:22:a6:25:44:7c:ba:a8:67:26:23:32:fd:1c:77:b8:a8:
b3:6e:9e:63:9b:cd:dd:02:50:dd:c2:d0:3f:fa:db:7c:20:ef:
9c:5d:ee:ba:c7:0d:42:b5:5c:1b:d0:5c:d9:c6:fb:85:26:bc:
9f:b9:ae:d0:c5:dc:a4:be:4a:0b:2d:8a:72:5a:87:3b:65:1a:
30:7b:c3:1a:a3:12:07:93:74:3c:34:5c:e3:bf:64:c0:9a:4d:
15:8a:ee:ea:11:38:84:60:de:13:0f:ba:92:8c:12:57:6b:81:
83:58:8b:a6:90:66:f8:24:8e:10:6f:f7:f1:16:17:8c:d8:7e:
95:dd:8b:43:85:ad:65:59:40:56:2e:1c:97:bf:99:d7:61:34:
72:ed:92:59:63:95:a1:ef:37:eb:ce:57:fb:cf:7b:21:b6:8d:
b4:d9:bb:8a:ab:3d:3d:4b:8d:ef:e2:68:c4:34:6b:09:b0:d5:
af:49:0f:19:e3:91:d1:ed:91:9e:70:33:b1:82:7b:b4:63:fc:
1b:e1:31:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:36 2025 by rpki-client