Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
File: ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft (raw, json)
Hash identifier: +yWCR3zxxmNphJ86sB0gKzWk1+5hd/4c0PnbV9m82us=
Subject key identifier: A7:EE:46:8D:65:61:DD:7A:17:17:0E:77:12:98:69:25:BB:15:35:01
Authority key identifier: AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
Certificate issuer: /CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Certificate serial: 019A0A4A7B0A6D018F227AAD58182311E59A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
Manifest number: 0BE5
Signing time: Wed 22 Oct 2025 05:00:44 +0000
Manifest this update: Wed 22 Oct 2025 05:00:44 +0000
Manifest next update: Thu 23 Oct 2025 05:00:44 +0000
Files and hashes: 1: TK8oRVgmC_iGkqpkIUxL12Jskyo.roa (hash: WWQSgn1wOK2i+o7wtaeqJibMN9Pjr41qBXdRO7I04u0=)
2: Z6cP8UU8ou5UZa2tgmGF-TWXv7o.roa (hash: 4wKWfKiX6etE7Y85veoMkmwG3aEsU0NvUo1kjzyAViY=)
3: kcWTfdAykr4V6or-J5DNrcGjkPY.roa (hash: ogmpuXD/e22gpKD4xD0G9j8Nblm4BJXQE5obj3J5Qcg=)
4: ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl (hash: 4DbKC5aGtcfL8GyD/ilJQCe7NXI7iYku/1Z8qIjQF4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:4a:7b:0a:6d:01:8f:22:7a:ad:58:18:23:11:e5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae8ed33b70be6cc20c89fbbac77a59ca3b4c0934
Validity
Not Before: Oct 22 05:00:44 2025 GMT
Not After : Oct 23 05:00:44 2025 GMT
Subject: CN=a7ee468d6561dd7a17170e7712986925bb153501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:14:94:41:ac:f5:a9:82:8d:07:10:4d:6e:
60:40:06:80:5f:68:77:5c:17:26:17:3a:dd:99:ed:
43:f7:1e:4b:4a:16:66:83:6f:f8:fd:70:c2:a4:ce:
b3:9f:aa:5d:ef:0e:77:d3:87:e7:b1:bb:b5:ab:e5:
91:df:7f:ce:d4:51:9b:db:43:0a:5d:c4:ee:66:b5:
8a:f1:cd:86:88:3a:d5:6f:b8:f2:8d:61:de:30:84:
fc:45:98:d0:e3:02:fd:77:e7:e7:2c:44:c5:d7:d6:
30:88:8e:6a:b7:b6:7f:8d:42:65:3d:5d:ed:53:37:
a2:08:b9:f8:34:e7:5f:53:f3:60:cb:a7:92:c4:0b:
50:0b:74:b3:95:0d:53:bf:f9:15:ef:68:56:c6:26:
af:8a:63:63:6b:e4:ad:58:ef:cd:b3:1c:b4:61:28:
d8:60:b8:a7:92:9d:43:9b:85:99:57:e6:d7:af:e7:
2b:9f:b1:e5:6d:ef:d3:2e:83:71:57:f3:24:3c:f7:
9f:ab:0b:02:14:a6:83:bd:ca:2f:23:f2:6a:32:94:
ec:75:dd:5e:0f:1a:18:2e:1b:03:4c:d5:c3:b3:4c:
a6:53:06:f6:b3:ef:8f:e1:0f:a5:7c:04:34:b8:03:
f4:4c:39:6f:24:5b:b8:7d:19:d8:ab:19:68:12:4e:
b0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EE:46:8D:65:61:DD:7A:17:17:0E:77:12:98:69:25:BB:15:35:01
X509v3 Authority Key Identifier:
keyid:AE:8E:D3:3B:70:BE:6C:C2:0C:89:FB:BA:C7:7A:59:CA:3B:4C:09:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ro7TO3C-bMIMifu6x3pZyjtMCTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b71d9f-f1da-400a-b485-04dbc9ac1444/1/ro7TO3C-bMIMifu6x3pZyjtMCTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:84:d3:85:63:3f:19:e4:6e:86:0b:a7:99:c9:d7:ce:1a:b2:
b6:49:51:cd:95:87:c6:a5:01:7f:e4:e7:be:27:28:56:47:af:
03:97:25:3c:f5:67:fa:47:3d:56:61:fc:c1:fd:ce:99:85:49:
24:21:94:36:ac:68:71:9d:66:8d:bd:ed:e6:3b:e0:fd:52:fd:
e3:86:45:f7:a0:7a:b8:bb:68:54:8e:1a:e6:4d:5d:b0:2a:c9:
38:97:f1:c9:7a:66:bf:38:9d:0c:61:20:2a:90:54:3c:4a:bd:
27:f6:ce:44:70:4c:0d:6e:46:2f:7a:8d:85:a7:8b:cb:d4:42:
68:7a:54:60:ad:2f:50:03:e5:df:2b:ce:89:fb:c7:16:63:77:
f7:22:ea:3f:3e:43:b3:b0:5f:4d:04:bc:9a:41:46:59:8a:fd:
ca:02:9a:60:d9:27:2b:21:bd:cb:2a:0b:18:cc:f0:32:5c:7e:
3c:57:ea:3a:2b:f2:cc:bc:b0:9e:58:db:3e:b3:b5:a9:ad:f3:
81:b1:12:b1:db:5b:12:d6:09:15:dd:96:a0:9d:78:88:4f:30:
02:c6:5c:03:f7:6d:41:2b:07:c9:92:1e:0b:8e:cf:b5:66:8a:
86:50:8a:35:e8:d8:dd:4f:66:b0:03:a1:e6:b0:5a:e5:9b:06:
fb:ee:a2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:19:45 2025 by rpki-client