Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
File: S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft (raw, json)
Hash identifier: sydC4g/OQOd3jt/q7ToM39mEBlAtCuT2GKBYSb/h71U=
Subject key identifier: CA:FF:EC:9F:95:7E:65:44:EE:64:6C:47:44:D1:62:AE:49:1D:09:AF
Authority key identifier: 4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
Certificate issuer: /CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Certificate serial: 019A559B67EE0ECD5EAC5E4FD14B76FA9E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 20:00:39 +0000
Manifest this update: Wed 05 Nov 2025 20:00:39 +0000
Manifest next update: Thu 06 Nov 2025 20:00:39 +0000
Files and hashes: 1: S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl (hash: qpxL4CCzTkD3wN7NhCPTiCkjqvpTIUk/qLoG5ssJy5U=)
2: gFxIm0EvZb8E8gIGHvo_aeEdfcc.roa (hash: 9yJ9gvi6b9QCclOd8XC4YqzlpMyCr1+KDE8Ku24SaCU=)
3: yQgmgvQc_zoWSzqSU_Jv0P1q3MI.roa (hash: 5+4u/xRZxAnli4CKdBW1paOkXTRYuiJAT5ksmVQ4GNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:67:ee:0e:cd:5e:ac:5e:4f:d1:4b:76:fa:9e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf3fb8ff8ddafda89db39705f78f6418efd1fed
Validity
Not Before: Nov 5 20:00:39 2025 GMT
Not After : Nov 6 20:00:39 2025 GMT
Subject: CN=caffec9f957e6544ee646c4744d162ae491d09af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b8:8a:05:54:eb:5c:cf:f0:f4:34:be:6b:8b:
83:b2:ca:d6:64:0a:8f:22:a3:51:bf:95:25:29:8d:
50:51:29:d8:ed:b3:a5:94:2a:c1:99:03:f0:36:f7:
50:53:0a:4f:67:c1:8a:46:54:d4:aa:37:ee:24:ca:
fd:2b:0d:9e:44:18:8c:f4:97:9a:a9:84:20:97:71:
13:62:52:d3:cc:30:ef:63:0f:04:f0:4d:62:2d:67:
1a:0e:48:ef:0e:41:4c:e1:04:33:2f:10:39:02:a5:
81:1b:c9:82:6f:ba:29:bd:95:86:61:37:0b:41:4f:
c7:28:a3:3c:09:5a:58:32:c4:f9:ed:f2:4a:83:9a:
0f:74:86:52:98:f5:27:27:f7:09:07:c9:3e:9b:0c:
c5:41:08:e2:39:98:7e:af:11:a6:7d:15:f5:77:94:
f6:96:59:29:31:9f:b7:1b:25:fe:50:92:8e:b9:ab:
00:9a:f1:22:7e:64:c1:f4:f1:50:11:ca:64:19:0e:
40:a6:7f:7c:cb:e8:43:17:a1:39:6e:7a:88:96:4e:
41:81:af:4a:dc:e5:8b:9b:47:71:2e:3c:54:c4:14:
d6:70:e9:ac:32:ca:f8:9c:3a:bf:ae:01:21:ae:1e:
de:08:de:05:02:4f:b0:5f:e8:c8:cd:e2:f4:a3:43:
6b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FF:EC:9F:95:7E:65:44:EE:64:6C:47:44:D1:62:AE:49:1D:09:AF
X509v3 Authority Key Identifier:
keyid:4B:F3:FB:8F:F8:DD:AF:DA:89:DB:39:70:5F:78:F6:41:8E:FD:1F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_P7j_jdr9qJ2zlwX3j2QY79H-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7b8513-f189-4330-b6f0-d0d258e4b435/1/S_P7j_jdr9qJ2zlwX3j2QY79H-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7f:8c:4d:b5:6f:b0:27:e4:6f:c2:eb:f3:7c:3b:dc:87:60:
15:9b:01:22:44:3a:49:f4:c5:33:77:27:94:29:17:94:cb:05:
df:83:7e:15:15:59:48:8a:d5:b4:10:6d:3b:f6:2b:a5:a1:9c:
c2:83:f1:a9:b5:d4:68:20:a3:ff:37:70:cf:b8:8a:17:75:0f:
f4:b1:9c:88:28:39:f3:42:c7:89:d8:ad:eb:31:fe:55:03:92:
59:85:2e:85:13:bf:d8:6c:40:54:d5:2f:53:25:44:67:c4:13:
7d:33:bc:97:68:c4:5b:1a:ac:ca:89:28:98:ec:7c:74:f4:6b:
59:b5:71:8d:6a:d7:b9:a4:63:11:91:87:6c:d4:47:a6:cd:71:
22:68:d0:80:9c:45:bc:e7:7e:1a:85:5a:b4:d5:32:e7:0c:fb:
22:cb:28:a1:3e:21:a2:5d:23:93:8f:a4:7b:e2:d5:e8:a0:fc:
dc:ad:66:dc:8e:8a:a6:e1:8e:72:cf:e1:ed:6d:1f:1e:f4:2d:
98:4d:39:21:69:ef:71:de:79:0c:df:d4:f6:7b:39:a4:69:35:
39:38:29:99:a5:d7:91:76:b3:48:dd:39:47:bd:90:ff:1d:87:
74:62:41:ff:47:28:ed:be:2d:e7:b2:bd:5f:3b:d9:f4:2f:ec:
91:37:95:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:12:11 2025 by rpki-client