Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
File: 7zGgVPyftLFH6KmL2n5xyBrwvP0.mft (raw, json)
Hash identifier: hDJ3vRb5FPHEdH6UgpNc06fPHLu9BAlljH0rMUZiNro=
Subject key identifier: 01:FB:D6:3D:17:14:87:64:01:19:A5:46:F7:B9:D4:23:09:75:E2:95
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial: 019A71B7F0A93C064DEBC603A139D63466EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:01:11 +0000
Manifest this update: Tue 11 Nov 2025 07:01:11 +0000
Manifest next update: Wed 12 Nov 2025 07:01:11 +0000
Files and hashes: 1: 7zGgVPyftLFH6KmL2n5xyBrwvP0.crl (hash: XWQO/280J3BZXQOlrZRKxgeEAzvI1+lpQ8Q2WSTZ6rI=)
2: GCDECUA53das4KdfVgJGCGchlPM.roa (hash: Shwn+wjWeeEfwxR+SQ/E/M2IAWkZBzaDnaEJzGSP9FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f0:a9:3c:06:4d:eb:c6:03:a1:39:d6:34:66:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Validity
Not Before: Nov 11 07:01:11 2025 GMT
Not After : Nov 12 07:01:11 2025 GMT
Subject: CN=01fbd63d171487640119a546f7b9d4230975e295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:97:7a:c0:49:39:dd:d9:c9:1f:3b:db:3a:f0:
f0:c4:9e:5a:0a:fa:24:e9:1a:06:24:a8:92:ff:34:
ef:2b:99:a3:4f:30:93:4a:6e:6f:51:6b:65:af:1a:
ba:e4:08:0a:74:18:e4:4c:2e:2d:28:32:6c:92:82:
57:c0:d8:29:2b:94:70:1e:e0:04:74:30:dd:90:af:
f0:8f:ed:66:bb:9f:de:95:6e:37:ae:40:6a:b2:a7:
f7:9a:81:15:92:38:fd:63:84:63:a2:f9:9d:e2:72:
fd:9f:75:72:92:f5:30:f7:ce:1d:d4:2f:d0:d8:3e:
87:40:71:3e:22:73:18:e1:7e:1d:c8:c9:cc:d3:0d:
ec:c4:e4:ba:eb:02:a7:23:55:f0:71:4c:7f:78:20:
20:63:d7:93:53:8c:d9:e5:d1:df:bd:87:29:0d:dd:
f2:bf:60:d3:32:84:fe:28:66:ff:01:f8:5a:2c:cb:
34:b8:fc:d4:50:1b:e0:23:03:a5:0f:af:9b:ca:39:
73:c8:96:13:5c:9f:9a:ab:8e:c7:68:c2:f3:60:70:
3d:51:9a:33:84:e2:e1:e9:13:c8:1f:00:33:ba:40:
c2:ff:16:3a:53:86:d5:ef:b1:15:f2:c1:8e:c4:71:
69:f5:a7:06:00:05:a0:63:db:55:88:32:30:19:50:
b7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:FB:D6:3D:17:14:87:64:01:19:A5:46:F7:B9:D4:23:09:75:E2:95
X509v3 Authority Key Identifier:
keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:71:31:2a:68:18:1e:8a:bf:b5:fc:40:61:12:a0:53:28:5a:
3f:11:fc:fb:cd:64:83:94:22:59:21:e0:68:55:89:ae:e2:65:
b6:c0:f3:84:1d:9c:0c:1a:75:c0:7a:6b:59:a5:e2:e7:74:40:
e7:d3:04:9d:5c:26:3c:09:25:59:d0:8a:30:c4:05:ac:99:e6:
99:fb:f7:37:c2:0f:ec:39:ac:b0:30:cc:2b:63:6f:9d:f5:5f:
7c:42:70:ac:76:7e:d3:5f:4b:cb:4b:bc:1d:39:bd:e2:d1:05:
e5:31:40:6f:2a:13:cb:33:06:bd:03:e6:1e:43:ef:76:fc:55:
67:c2:51:a2:ad:0b:41:63:88:b1:48:eb:5a:72:ac:f8:8f:72:
45:5d:dc:af:7b:fa:fe:58:42:19:b4:8d:77:c1:29:43:e8:8c:
67:bf:fc:30:23:ff:86:32:2a:79:e8:0d:20:7c:eb:49:50:0c:
b1:6a:cf:a5:76:58:9d:f0:ff:fd:77:58:eb:aa:da:49:fc:50:
c3:91:e2:f5:4e:ea:7d:ba:06:ec:d3:99:4a:4e:04:b7:c9:37:
c8:c5:42:e9:18:ed:c2:3f:a9:f6:6a:c8:4e:2b:79:d9:b1:d9:
53:e3:2d:24:0e:ff:74:ea:b9:7f:a0:a1:b2:9e:2f:be:0a:7c:
e7:dc:f2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:08 2025 by rpki-client