Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
File: d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft (raw, json)
Hash identifier: Zzbrv5I1/cj9m06eFNrZSmcLCezS6vYPAa5mgt0YoN4=
Subject key identifier: 80:1A:76:7A:CE:FB:AF:75:C2:59:AC:CA:BD:8D:1E:D9:2A:B1:60:76
Authority key identifier: 77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
Certificate issuer: /CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Certificate serial: 019A2855890530F5068EBF78200448F12C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
Manifest number: 12FF
Signing time: Tue 28 Oct 2025 01:01:25 +0000
Manifest this update: Tue 28 Oct 2025 01:01:25 +0000
Manifest next update: Wed 29 Oct 2025 01:01:25 +0000
Files and hashes: 1: LfrSVtlH9do-60_TEx27lHKNfrQ.roa (hash: TpFdLJ2bXCpVRx0+Pt6yo0AUPtighW1Vwfu+RYNR6uM=)
2: Y5oWWSqH2f4PzIF1caWpoS6C0uI.roa (hash: 1+Bd1mblfzXz4N7C24HyQvcSfHhcXd/iMBMWLlVj9RQ=)
3: d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl (hash: xEP0CqU/L5xUchMPENDj62AuOGz5qPTUti/1KoHWAkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:89:05:30:f5:06:8e:bf:78:20:04:48:f1:2c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e8bbf8643abd62ff3f42bec4c0b2db977596d7
Validity
Not Before: Oct 28 01:01:25 2025 GMT
Not After : Oct 29 01:01:25 2025 GMT
Subject: CN=801a767acefbaf75c259accabd8d1ed92ab16076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:8a:27:d8:21:93:37:d3:39:bc:12:d2:f8:
33:b7:3e:3f:51:4b:dd:4b:47:4c:18:c9:de:42:10:
49:04:17:a1:b4:ef:89:87:43:3b:02:fe:ee:fe:6c:
9c:ab:af:86:b8:87:76:8f:af:6c:31:e5:18:4d:5c:
41:df:6a:92:46:7a:e8:4c:58:06:41:f8:49:70:df:
0c:59:78:fd:2d:cb:b6:8b:6d:fa:e0:bf:f8:65:a1:
ab:72:9c:d4:23:f6:aa:b8:d1:74:8b:ad:e2:4e:4d:
88:90:e1:ca:bc:d7:64:d7:cb:b3:5f:d5:b0:5e:4d:
1d:c7:43:43:25:0f:a4:b8:14:64:38:82:7d:0d:41:
96:3d:b6:3f:22:b2:19:b7:44:5c:90:40:61:76:b5:
f2:79:5c:4c:a4:ca:76:3f:52:34:5c:c7:97:fc:55:
96:2d:60:b0:f9:17:1e:5d:07:96:5c:e8:27:2c:e7:
bb:a5:26:89:7a:d9:fd:62:0e:6f:81:02:d8:7e:43:
e4:13:19:b7:89:11:dd:c4:d7:4c:8e:2b:8f:dd:f5:
5a:e5:cc:22:0a:0c:02:71:53:c9:d3:b3:8d:d4:70:
29:1c:09:fc:f4:26:d5:9d:1d:3f:2e:05:38:4a:47:
e6:2c:40:ce:90:eb:1a:76:37:08:d4:db:fa:2c:cf:
89:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1A:76:7A:CE:FB:AF:75:C2:59:AC:CA:BD:8D:1E:D9:2A:B1:60:76
X509v3 Authority Key Identifier:
keyid:77:E8:BB:F8:64:3A:BD:62:FF:3F:42:BE:C4:C0:B2:DB:97:75:96:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-i7-GQ6vWL_P0K-xMCy25d1ltc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b870e7-7f1e-49ce-b1f9-44ccd1b51f10/1/d-i7-GQ6vWL_P0K-xMCy25d1ltc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:9f:3f:08:40:96:a7:d8:e3:f8:a9:6e:69:b3:70:a3:54:2b:
6c:ba:45:19:cf:f9:17:38:93:19:de:70:a2:8c:7e:1d:88:50:
05:eb:0d:13:4b:13:cb:37:16:36:e9:bf:76:3c:9e:f6:fe:f8:
6e:d6:b3:85:58:9d:e1:02:ce:a3:f0:0f:31:72:75:1a:fa:2b:
4f:71:bd:6e:b8:da:f0:5a:7a:77:c1:1d:6a:f1:46:ba:cb:14:
b7:b4:30:6b:2a:ef:53:24:b5:f4:de:4f:bf:fe:c2:72:90:87:
aa:ce:60:21:72:7e:f3:86:5f:6a:3d:b6:c4:29:f3:1f:f3:3d:
2b:0e:8f:3a:35:a0:3a:f9:1d:e3:29:3f:dd:95:9e:70:34:ef:
4e:51:93:33:9c:8a:b1:fe:40:23:71:4c:21:6d:a9:91:b1:de:
1e:82:d2:80:74:9d:b5:f8:f3:d0:0b:36:1d:76:be:6a:7e:aa:
46:55:f4:a8:30:91:3b:85:c0:5d:c5:0b:9f:74:8c:05:1f:1d:
90:39:3e:27:c4:a7:a0:58:fa:b5:74:b5:84:df:21:71:1b:77:
25:6f:86:49:1a:66:3e:ff:5f:01:41:b7:2e:44:53:22:ce:17:
ba:21:83:56:4f:5a:cd:fb:8d:c3:df:2e:66:46:35:ff:e1:6f:
eb:37:4d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:45:37 2025 by rpki-client