Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
File: EdGf2unFPY0oseQcqROcM1VrpiU.mft (raw, json)
Hash identifier: 1RtT2cPversVanvFBtigpfpJkimw8j0yasOdyvZdV3k=
Subject key identifier: 27:10:FD:7F:2A:DC:A1:52:29:CC:4B:DC:FB:26:BE:A2:C6:AA:ED:27
Authority key identifier: 11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
Certificate issuer: /CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Certificate serial: 019A73A644724EE30085C26D5591430BF1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
Manifest number: 0B7F
Signing time: Tue 11 Nov 2025 16:01:07 +0000
Manifest this update: Tue 11 Nov 2025 16:01:07 +0000
Manifest next update: Wed 12 Nov 2025 16:01:07 +0000
Files and hashes: 1: EdGf2unFPY0oseQcqROcM1VrpiU.crl (hash: 8hPzhS5pX5baxMXYOKd5cAdyM/C/Q9OGij0WIHJoihE=)
2: hjbzdQG0z4fmkgxJ5yW_AFN2Z3I.roa (hash: FIaXEpRqjmfrs5VrZ6nFL+BtqxgLq2lRPch8+CMAMWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:44:72:4e:e3:00:85:c2:6d:55:91:43:0b:f1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d19fdae9c53d8d28b1e41ca9139c33556ba625
Validity
Not Before: Nov 11 16:01:07 2025 GMT
Not After : Nov 12 16:01:07 2025 GMT
Subject: CN=2710fd7f2adca15229cc4bdcfb26bea2c6aaed27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:86:d0:45:24:36:74:50:7b:7e:cf:3c:5b:f9:
73:1f:d2:7d:96:80:68:d4:76:69:a7:3e:b7:ec:ce:
4f:f7:b4:06:86:8b:a3:30:31:da:f0:42:b9:65:4a:
a8:8a:19:b9:a8:75:36:84:a9:19:5b:56:8d:a9:84:
b4:a8:c6:4f:2b:dd:3c:92:51:b0:f2:ea:94:46:0b:
52:61:4b:3f:44:33:a8:8c:8f:00:00:70:a8:3e:64:
b9:cb:62:7c:5e:dd:36:b1:8b:ab:30:f4:3d:83:93:
22:d4:d5:09:7f:1e:07:da:82:2d:53:45:56:1b:f6:
7c:f1:12:a2:ec:ac:86:b7:49:ba:50:41:ef:ee:98:
5f:94:46:a6:b8:6b:86:cd:71:3d:32:03:c2:b4:95:
37:6b:73:20:73:1b:fe:f0:ca:10:f4:99:88:b0:25:
6c:d5:aa:86:91:fc:b8:bd:df:7d:8f:a2:8d:5e:58:
cc:da:27:41:67:7b:5a:e9:20:a9:8f:c8:dd:03:8f:
7f:ea:b5:2b:7d:b6:ad:8e:12:5c:20:3c:0b:fd:eb:
d1:70:ea:2f:16:fe:74:e3:f9:02:81:d4:5a:9a:66:
ec:87:d9:3a:b0:8e:db:87:76:3d:33:bc:9e:b0:83:
0d:54:2d:5b:57:49:1e:5f:88:45:93:32:1a:37:3e:
36:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:10:FD:7F:2A:DC:A1:52:29:CC:4B:DC:FB:26:BE:A2:C6:AA:ED:27
X509v3 Authority Key Identifier:
keyid:11:D1:9F:DA:E9:C5:3D:8D:28:B1:E4:1C:A9:13:9C:33:55:6B:A6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdGf2unFPY0oseQcqROcM1VrpiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5c46d2-9818-4afc-880e-1cc5fd2544e9/1/EdGf2unFPY0oseQcqROcM1VrpiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8a:94:df:e7:72:cf:1c:0f:ea:6d:2e:3e:05:c7:a9:9a:66:
c4:2d:c5:89:14:76:0c:0a:d4:6a:fb:30:fb:a2:0b:8b:dc:47:
2c:83:77:27:fa:72:b5:e6:2f:e4:36:8c:f1:dd:88:de:e0:74:
8a:14:4d:28:d0:1d:bd:f3:6e:93:af:73:f5:05:3f:61:c0:bd:
08:eb:a8:59:6e:36:70:1a:6e:07:83:6e:33:dd:33:0c:fc:73:
30:e2:b2:26:0f:d2:9d:6a:4a:69:51:c8:e5:df:6e:af:11:d4:
2b:3e:7e:b5:06:e4:cd:47:4b:f7:df:c4:b8:35:17:1b:2a:fc:
fa:2c:b6:c5:33:27:ce:9e:8b:9e:5c:09:f3:52:33:55:48:61:
6e:81:bd:11:d0:ed:b3:cd:18:43:27:15:9e:67:9b:51:38:7f:
03:60:e5:80:90:ea:d1:e9:66:24:ba:1c:f3:9f:88:77:36:51:
96:65:14:c1:ab:de:99:64:9c:1f:0e:42:eb:76:3b:36:f8:eb:
fc:78:be:9d:5d:89:e2:a5:56:2c:75:ec:76:47:63:0c:06:9d:
1d:d7:ec:03:18:89:91:c8:2b:0e:87:b1:db:6e:39:c8:ae:2c:
a4:de:15:90:d4:0c:5a:7f:c3:1a:ea:93:4e:18:8f:17:0c:ba:
aa:57:13:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:34:22 2025 by rpki-client