Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
File: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft (raw, json)
Hash identifier: z1vRlYFTc1dBO+GsBa33wEyWhVjw7UfoZrEA+EPmOWI=
Subject key identifier: FF:7D:2D:F5:B6:35:E4:C2:99:6B:11:5B:6C:D7:B4:2A:37:6F:82:51
Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
Certificate issuer: /CN=edff0ab25662757afb831675319296f63d989b69
Certificate serial: 019A71EE8B54AE35F0C34F8190AD593AA706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:00:49 +0000
Manifest this update: Tue 11 Nov 2025 08:00:49 +0000
Manifest next update: Wed 12 Nov 2025 08:00:49 +0000
Files and hashes: 1: 7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl (hash: XaLNUKtsmSJ5UBOa9g9Z+fApMbqcgy6GkPIopfhNmr8=)
2: HKJ58z8cHDMRoWp61kiI8qNU6_s.roa (hash: xkG+rFTXCO8KSFj1Ggdwhiil4ktc9BxAHUA4oj/CQxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8b:54:ae:35:f0:c3:4f:81:90:ad:59:3a:a7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edff0ab25662757afb831675319296f63d989b69
Validity
Not Before: Nov 11 08:00:49 2025 GMT
Not After : Nov 12 08:00:49 2025 GMT
Subject: CN=ff7d2df5b635e4c2996b115b6cd7b42a376f8251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:d3:41:73:6f:80:7c:40:cd:fd:80:ac:1a:
49:19:3e:73:17:e8:13:37:28:0a:2e:ba:89:3d:65:
fe:fc:9a:b2:fe:e2:cc:e6:28:98:33:d8:21:b2:4c:
1d:76:e3:8a:dc:f4:3c:d5:af:7e:3b:3d:bb:74:ca:
05:47:51:15:f8:e1:3c:f2:ce:7c:08:80:c0:55:39:
4d:1e:01:44:b5:bc:c5:fe:17:50:5e:ff:08:6b:19:
f5:d1:b0:0d:9f:cc:ab:f2:b1:4a:c2:76:5c:a6:e3:
2c:49:9f:69:be:e4:54:d5:a4:86:2e:1d:b9:12:8c:
15:fb:e7:4a:93:60:a8:57:33:f0:21:7c:86:73:bc:
71:ae:1d:96:9e:1e:13:fc:6d:ed:cb:02:14:c6:3f:
9e:c8:53:d8:eb:f0:c3:42:30:6d:fe:28:24:c5:ad:
bc:25:24:7c:83:89:a5:ec:c0:6b:40:26:f5:55:15:
88:10:e7:b1:99:53:ce:ab:78:18:fb:bc:f5:af:64:
c8:0b:71:be:d5:3f:88:ec:0b:aa:79:6c:67:0a:6f:
ed:fd:0c:7e:0d:a9:dc:b3:f9:38:61:c2:a4:96:58:
22:cb:e5:f0:15:5e:15:d4:c1:57:8b:49:1f:09:46:
7d:33:f2:82:d2:df:16:95:7d:b9:db:82:9a:c0:53:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7D:2D:F5:B6:35:E4:C2:99:6B:11:5B:6C:D7:B4:2A:37:6F:82:51
X509v3 Authority Key Identifier:
keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:96:ba:27:56:74:fc:21:71:8a:35:15:7f:33:06:d2:b9:d9:
f0:10:29:78:27:f3:5e:06:fa:a2:9a:a4:4b:bd:71:3e:d4:c9:
f6:9d:1c:aa:37:16:a5:be:00:0a:89:a1:e9:77:eb:07:06:43:
ab:82:20:26:86:e8:ea:dc:65:74:13:e2:73:18:df:85:f8:e3:
97:04:2f:85:00:37:2c:77:87:1f:dd:6c:1a:2a:6e:22:d9:1f:
da:f5:91:3e:5e:88:7e:6f:59:45:4d:af:63:12:57:be:b4:71:
2f:a0:55:0c:c3:06:ab:aa:2e:22:aa:bc:a1:94:99:a0:3e:16:
fe:89:70:8b:41:81:a1:8b:9c:3a:ff:44:89:b1:cb:37:81:4c:
e0:77:51:e8:6d:92:d6:23:94:4b:ac:7b:8f:cc:55:df:a9:4a:
82:f3:a2:83:3a:cb:f8:e3:9a:a5:e6:27:c4:2b:c3:18:75:3a:
1e:7d:b1:b5:97:10:a5:85:7f:2b:3e:9d:33:d9:e0:48:42:20:
11:94:34:86:17:81:82:c9:29:c8:cc:72:54:1d:f6:35:f1:dd:
69:b2:5c:77:1e:05:e9:9c:24:79:62:8a:ac:47:a2:0c:bd:85:
28:fb:36:61:c9:16:46:87:3b:23:e5:9d:96:da:bf:66:63:a4:
fc:c2:fd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:53 2025 by rpki-client