Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
File: t6x4DrIELIxXABtl7xVub1kxI5s.mft (raw, json)
Hash identifier: 1MJPkkp/kkJqELl7lBIN3I9YWaTFt4J6FNZazulIpXI=
Subject key identifier: 8C:0F:1F:00:14:3D:21:FB:64:2F:66:DB:9A:A9:E3:8B:51:A1:63:EC
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial: 019A21098B2D41A7532B6B60ADC9DD5C60E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
Manifest number: 0FF5
Signing time: Sun 26 Oct 2025 15:01:04 +0000
Manifest this update: Sun 26 Oct 2025 15:01:04 +0000
Manifest next update: Mon 27 Oct 2025 15:01:04 +0000
Files and hashes: 1: jop9I76IYZwBELNaT-ZQAcQ49rU.roa (hash: r++agSStViQ3qw07RB4HAaR5ym/8f71PVZva/QwS050=)
2: t6x4DrIELIxXABtl7xVub1kxI5s.crl (hash: IQmSC2X74CvJQeOmFO+R7FtZrlQG1WwdJEWelTghBDo=)
3: v7txDad3obC4fM89n81NhQg4Yeg.roa (hash: SQrktdz+pjDoi2qLtFhS7eNuomu/ooHtDXvC3qLXy1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:8b:2d:41:a7:53:2b:6b:60:ad:c9:dd:5c:60:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Validity
Not Before: Oct 26 15:01:04 2025 GMT
Not After : Oct 27 15:01:04 2025 GMT
Subject: CN=8c0f1f00143d21fb642f66db9aa9e38b51a163ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9e:67:e5:df:16:c3:d3:4c:c4:6f:ae:4b:46:
ab:cc:30:70:a1:e1:36:96:30:c1:66:e9:92:43:18:
02:6b:52:d7:66:5d:a9:65:4c:9d:40:3b:4a:5d:f2:
0a:19:a0:3f:0e:8e:5f:da:01:7f:b7:99:f2:da:f1:
42:86:9c:a4:b7:56:ae:4d:f1:d2:53:ee:21:71:8d:
46:44:25:81:ff:b7:85:2a:9b:1f:08:62:88:56:32:
95:c3:f8:e2:41:04:2e:bd:a2:d5:59:7f:7e:51:42:
9a:42:17:f3:fb:92:cf:dc:b7:de:60:6d:24:01:94:
ed:37:0d:d4:9a:18:8b:d6:a5:96:14:bd:ff:43:70:
ba:8e:ec:93:50:6f:29:41:4d:ad:c0:98:5a:7a:df:
f5:85:28:c6:d2:91:86:41:e7:d2:51:f5:31:36:f1:
52:c3:ac:82:1f:6f:3d:90:97:7f:40:a7:ee:8e:16:
7a:b6:e9:cb:44:9a:71:94:3e:f9:e8:fb:ff:76:85:
da:2c:50:68:af:0a:ee:6a:db:70:54:47:20:4e:55:
94:75:1c:ee:30:15:f0:26:7a:2c:ff:75:06:55:78:
78:ab:ba:66:ee:68:aa:7b:94:7d:e1:3e:21:5c:e1:
6f:a9:44:79:fa:c2:7b:9d:45:08:c4:94:34:23:74:
19:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0F:1F:00:14:3D:21:FB:64:2F:66:DB:9A:A9:E3:8B:51:A1:63:EC
X509v3 Authority Key Identifier:
keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c4:7b:85:17:1f:5b:8f:11:bb:cc:c6:40:f0:41:26:dd:8b:
88:a0:69:66:4b:0a:28:fe:52:ce:e3:30:33:e4:c9:43:8f:aa:
a6:67:9c:8d:ba:fa:5b:76:7c:a4:0b:a8:e0:e8:36:84:5d:09:
5b:9f:79:b2:29:56:39:27:9e:ec:02:8e:af:00:91:ec:7d:db:
d2:85:39:46:08:c5:0b:22:a7:a4:fe:10:b2:ff:a4:db:4e:56:
17:12:82:d7:a2:8b:00:bb:98:ff:a7:6a:0b:54:90:11:af:fd:
d3:1c:db:76:a7:07:32:c8:ca:5f:3a:52:35:33:f6:af:c8:b0:
20:52:d7:e4:87:4e:b8:02:4d:c9:9c:1b:64:3d:19:b7:be:22:
dd:08:3e:5a:36:c4:08:5d:0b:ab:4b:5d:9a:86:85:0d:37:99:
83:dd:36:72:5d:78:e5:55:c8:4a:c0:5f:ad:1f:72:e7:11:50:
07:29:26:10:93:e8:5a:62:49:cd:16:8e:a0:25:f4:bd:cd:af:
81:d0:cf:c2:12:fd:77:43:37:89:2a:7c:7b:bb:77:44:b8:08:
64:1e:10:ff:7f:4a:d8:c5:31:53:4d:de:d6:c6:90:3e:c4:7f:
65:f9:b4:71:ca:78:94:2b:d3:f3:c3:c8:b1:45:a0:be:fb:3f:
20:f0:7d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:57:52 2025 by rpki-client