Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
File: 7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft (raw, json)
Hash identifier: zCf/+Vf2cQw0lyxyZW5rwVGSOj0aeqFIOmPUIkeAg3Y=
Subject key identifier: 1F:2B:1D:55:AA:6B:72:A1:4C:C5:8A:66:36:1E:EF:B7:F9:A4:0A:1E
Authority key identifier: EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A
Certificate issuer: /CN=ee3be768d28668f490afb74e9aefe41e03495d7a
Certificate serial: 019A71B888DD56ED9613057779901AF0630B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
Manifest number: 140A
Signing time: Tue 11 Nov 2025 07:01:50 +0000
Manifest this update: Tue 11 Nov 2025 07:01:50 +0000
Manifest next update: Wed 12 Nov 2025 07:01:50 +0000
Files and hashes: 1: 7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl (hash: rU4riTjBwTA7+qPyfPI9efpFCdncpGJvdnoct9auGVA=)
2: Alm1D_jWQV3HZ_xMIEfApNUj0bw.roa (hash: roFDOJ4zN70FlLWN8DtAuHmCiQQVdXLTUDn3OTUhXvI=)
3: KOMEO3ezWZumvxO1NtiiKTGYpqs.roa (hash: y/p4zYmrPrmcic5vga+4CRguxPQrr1LrQuRZ5F/An8A=)
4: ZqzdAs8yZ3FLdUhbYW7TTyJuHq0.roa (hash: bttROiRtaf17Ko3eqx0YmSrz2YkGK+csEYw+4Lostm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:88:dd:56:ed:96:13:05:77:79:90:1a:f0:63:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3be768d28668f490afb74e9aefe41e03495d7a
Validity
Not Before: Nov 11 07:01:50 2025 GMT
Not After : Nov 12 07:01:50 2025 GMT
Subject: CN=1f2b1d55aa6b72a14cc58a66361eefb7f9a40a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:62:aa:59:e1:aa:ac:cf:2d:19:19:76:3c:23:
d2:81:4b:c4:9d:59:2d:7e:56:c8:c9:cf:e1:90:29:
20:cd:78:46:a4:71:40:7d:c9:3d:43:0b:56:5a:0e:
89:84:76:d9:db:cb:22:a5:29:10:b4:48:76:d2:70:
be:eb:e3:bc:6b:6e:1b:78:42:d1:51:c0:44:30:07:
a7:14:60:2c:44:3f:f9:8a:f7:25:1e:3f:c1:aa:17:
1c:0a:8d:cc:16:f4:67:d1:6c:d0:6a:d7:df:9c:ee:
e7:d5:8b:48:41:db:f1:ad:b0:f6:0d:e0:2c:5e:85:
e7:2f:2d:c7:38:74:5c:35:b7:37:ed:3a:83:3e:30:
38:a9:af:21:de:0a:fb:2f:6b:63:6c:6b:5b:13:2b:
63:98:85:c9:87:d3:8d:f1:2c:a2:f2:db:a9:c1:0c:
e1:e9:a8:02:57:13:22:18:da:cf:5d:48:f1:c0:e1:
19:cd:90:90:ce:be:f7:54:fd:15:2e:fb:33:85:68:
b1:1c:5b:40:36:60:b3:bd:24:aa:e6:34:9d:71:4b:
d8:9b:6f:e2:fb:84:a1:9c:84:fe:a5:1c:87:a7:8a:
05:72:f2:b6:a9:da:df:9d:6f:3b:48:5f:8d:2f:9a:
95:cd:92:b6:05:c8:b7:ad:c2:b8:f8:be:f2:16:e5:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2B:1D:55:AA:6B:72:A1:4C:C5:8A:66:36:1E:EF:B7:F9:A4:0A:1E
X509v3 Authority Key Identifier:
keyid:EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6c:ed:aa:bd:79:08:e6:38:d5:e0:27:cc:00:f6:d5:41:2e:
8c:18:80:a6:ae:f8:46:63:10:84:f8:b4:35:7d:02:ba:3b:bc:
1b:ae:90:67:9f:23:00:80:cb:8b:54:78:51:0b:f3:e8:9b:7a:
79:a0:8b:8e:99:c0:ce:6e:46:0b:b4:dc:10:aa:40:85:13:da:
a4:21:0b:99:5d:ed:56:bb:a1:b0:26:3e:7d:91:99:23:5e:e4:
92:c5:32:59:a2:eb:fd:fb:70:c7:08:30:f7:a4:b6:89:a9:d0:
5d:c3:99:9c:7a:6b:60:5f:c3:d8:9a:f4:8d:42:84:41:66:c5:
f2:50:77:c1:b2:cb:77:cd:01:89:d9:ca:ac:6c:a3:3b:22:4b:
0b:1b:f7:c1:f4:c5:dd:9e:4e:e1:5f:23:17:b1:eb:f1:d2:f2:
9d:5b:38:2f:7b:f3:3d:fc:3a:f6:3b:10:24:76:00:47:92:b9:
89:a7:e5:7e:8a:8d:e1:01:99:e6:1c:c8:ee:f5:e8:88:46:5d:
aa:cd:27:22:b5:96:0e:60:f2:75:69:49:b0:cb:96:9f:8e:6e:
70:4c:d7:96:12:d5:46:39:55:d5:21:6e:b3:76:4e:28:da:9e:
e3:ea:7b:0e:34:ee:8e:7a:02:64:ce:a3:39:67:b5:6c:5a:24:
fd:8b:32:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:38 2025 by rpki-client