Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
File: 7a4BhsaCMBS8LELQTqZQv1zLmXY.mft (raw, json)
Hash identifier: zX1aP5VZcQYli7A1a6DGU1imFDLDAMypVIx0WnjL7yY=
Subject key identifier: 30:A5:42:B6:1B:41:6A:D1:92:52:7A:5D:CC:A3:05:0C:2F:86:29:63
Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
Certificate issuer: /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Certificate serial: 019A725C5682690EFC98ECAB969408276B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
Manifest number: 164F
Signing time: Tue 11 Nov 2025 10:00:45 +0000
Manifest this update: Tue 11 Nov 2025 10:00:45 +0000
Manifest next update: Wed 12 Nov 2025 10:00:45 +0000
Files and hashes: 1: 79CA17Xn5GUSh_OtX3g6kBkGEK0.roa (hash: E0hRb7MlGtqWbRGEjrJTx2utqhVHTzEFD8Hy89KBmzw=)
2: 7a4BhsaCMBS8LELQTqZQv1zLmXY.crl (hash: vcBXaY3aedSidv4LuYYITTOVdG5lN8XOOMjkLxuuL84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:56:82:69:0e:fc:98:ec:ab:96:94:08:27:6b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Validity
Not Before: Nov 11 10:00:45 2025 GMT
Not After : Nov 12 10:00:45 2025 GMT
Subject: CN=30a542b61b416ad192527a5dcca3050c2f862963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:60:ac:35:97:e2:bb:40:96:af:b3:b4:62:37:
78:f5:cb:69:b9:2a:b3:69:f3:8b:9f:96:57:fc:c0:
8f:51:c4:05:09:0e:74:ef:01:06:8c:77:13:7b:6a:
51:ad:e5:4b:59:47:7a:94:01:08:59:1d:41:c9:08:
d8:89:3d:48:1d:b1:5b:aa:04:af:8e:31:96:aa:fd:
7a:32:11:da:8a:66:c8:67:b1:0a:d5:50:b5:e5:4b:
ed:df:9c:f1:cb:d0:0d:9f:fb:d4:41:6e:95:51:84:
8b:3d:aa:5b:e3:52:34:86:f6:f6:bd:7b:c4:06:bd:
d9:ee:09:f5:56:4a:78:2f:e7:7e:3c:c7:8b:4e:9b:
7d:72:e7:8f:79:f3:8d:d7:27:cb:51:4e:45:b7:34:
e8:d4:a3:0d:bb:1c:b2:f0:29:4c:c1:3b:f0:a1:23:
56:12:5c:a1:b0:3b:e2:ac:93:c2:c4:b8:69:83:21:
cf:93:3b:c8:98:5c:e0:66:78:fe:3c:22:c8:86:ed:
96:d2:f6:3d:9b:8d:e6:95:35:a1:44:85:13:45:d2:
e7:22:e4:fa:24:3a:b1:a3:f8:c1:1c:32:e3:78:4a:
94:33:95:3f:55:f3:be:0a:40:e6:c7:4f:82:ae:f4:
cc:d4:7f:87:5e:ad:5a:11:9b:da:99:50:b6:83:a4:
ab:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A5:42:B6:1B:41:6A:D1:92:52:7A:5D:CC:A3:05:0C:2F:86:29:63
X509v3 Authority Key Identifier:
keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:65:7a:4c:28:f8:37:37:e7:32:e0:5a:4d:81:28:c3:ca:77:
e1:86:32:4c:18:07:d7:07:ad:3c:e0:84:93:81:0a:d4:0b:90:
79:86:c5:86:17:50:53:33:92:6e:d7:b6:13:4d:58:4e:ab:3c:
78:76:49:58:24:17:07:e8:0c:a1:78:c9:d1:87:f7:19:04:c9:
90:63:68:d0:42:ac:e4:17:4a:97:76:1e:ba:0e:9d:57:1e:f7:
58:a3:d5:70:0e:b6:60:0d:6d:a1:96:20:de:75:a6:e7:b0:f2:
56:bf:3a:b9:04:14:a1:62:39:a4:54:dd:6d:3e:f8:66:2f:c1:
9e:a5:4a:86:2b:8b:38:b7:0d:c4:54:6d:b6:e7:b0:5a:28:54:
5f:95:a7:4b:23:15:49:f2:31:99:e1:fd:35:ca:5e:6a:bc:84:
b6:2c:49:72:a0:39:28:12:ca:fd:5b:d9:29:77:5b:c8:08:65:
d9:ac:5c:d2:a9:56:d8:64:23:32:af:9f:f6:a1:fc:a4:65:a3:
6f:f2:8d:59:5f:a0:46:6b:7b:20:54:07:da:a7:d9:47:9c:04:
71:67:2d:26:df:e0:50:ff:f7:44:38:6b:f3:1c:79:95:83:d9:
c7:5e:56:88:6b:43:ce:65:30:b0:98:0a:5a:c1:16:5d:65:e7:
fb:51:61:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:09 2025 by rpki-client