Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
File: 7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft (raw, json)
Hash identifier: 5EPZ9MGEOUy7oot7jiBYFSk8dG/T8ukr/GjKDfr7IwU=
Subject key identifier: CF:57:11:D1:63:97:F8:27:74:1D:5E:17:65:FD:5A:A6:D5:20:2A:0A
Authority key identifier: EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE
Certificate issuer: /CN=ecee470bf5109976934f51e7eaef210779a2c4de
Certificate serial: 019A729369777B0B5503DF2F4B8AD94FE8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 11:00:54 +0000
Manifest this update: Tue 11 Nov 2025 11:00:54 +0000
Manifest next update: Wed 12 Nov 2025 11:00:54 +0000
Files and hashes: 1: 7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl (hash: Z9nFuxdM1aFaOYzPf4G/HCsTMZdQ3k1NPLl4UQ3W9Mg=)
2: GOWs0802FOjDjhvj5VByRZ93Ms4.roa (hash: 0E/ca5KwIY555u3Bh3vtXM1rkOkEak6A4cwcKp+8kRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:69:77:7b:0b:55:03:df:2f:4b:8a:d9:4f:e8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecee470bf5109976934f51e7eaef210779a2c4de
Validity
Not Before: Nov 11 11:00:54 2025 GMT
Not After : Nov 12 11:00:54 2025 GMT
Subject: CN=cf5711d16397f827741d5e1765fd5aa6d5202a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:23:d3:75:7a:de:d0:51:5b:02:bf:e7:81:
d7:df:2a:a1:27:96:28:a6:05:99:03:5c:db:32:71:
f0:5f:65:a1:8a:71:08:0c:79:7b:89:84:c7:e3:78:
00:63:2c:e2:39:c4:f5:98:57:5a:98:b7:84:08:90:
0f:b6:e4:1c:64:f5:f7:84:e0:1a:fd:83:29:b7:11:
c2:5f:4c:06:a2:b0:3e:72:04:e8:57:98:84:84:8c:
79:1e:42:7c:89:98:11:ae:0d:44:36:b5:4a:7c:37:
fd:63:41:36:ac:60:ae:aa:5f:2d:ae:52:8e:f5:a1:
d5:87:ad:63:7e:b9:a3:f1:84:f4:65:ba:b6:3f:60:
0c:d7:44:91:28:fa:ed:d4:34:d0:0d:09:c5:cb:6c:
15:2e:0e:21:19:48:a3:d2:8f:10:84:fd:e0:53:a9:
80:07:78:f9:ec:4c:a0:ba:04:cb:6a:f3:c6:3b:67:
f3:cf:a9:b7:bf:f3:f0:b5:03:34:8a:15:76:e2:6c:
46:ad:9d:a4:72:3a:5c:15:aa:ca:bb:cb:65:8e:3d:
06:d5:a8:d6:75:66:a4:82:7b:89:06:70:7b:f0:bb:
25:2a:ac:29:86:45:20:0e:ce:cf:3d:28:b4:2d:63:
67:f4:f6:13:1f:41:8d:ad:fe:68:80:cc:c5:5b:13:
e1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:57:11:D1:63:97:F8:27:74:1D:5E:17:65:FD:5A:A6:D5:20:2A:0A
X509v3 Authority Key Identifier:
keyid:EC:EE:47:0B:F5:10:99:76:93:4F:51:E7:EA:EF:21:07:79:A2:C4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O5HC_UQmXaTT1Hn6u8hB3mixN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3f95d5-ae69-43bb-b531-4184ed331b75/1/7O5HC_UQmXaTT1Hn6u8hB3mixN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:13:95:13:01:08:f9:9b:4a:f6:1e:73:c3:7e:b5:47:fd:de:
2a:1a:e0:98:1a:68:e0:79:2b:39:70:7d:38:bb:1d:94:50:d7:
20:e6:07:92:7f:af:f0:a7:31:96:df:d5:31:02:7f:c5:10:11:
09:0c:4c:34:fd:3e:b4:e9:f4:64:37:3d:1e:be:6c:14:64:96:
b7:dc:4b:0e:81:91:74:d4:07:7f:1b:a5:e3:0d:ca:c8:53:aa:
61:1e:ae:33:b7:5e:01:35:bb:48:86:30:b9:c5:2c:b7:56:bd:
32:78:80:a1:2d:ac:7b:38:7d:ae:72:9b:1b:47:95:f2:14:2a:
51:e0:f5:40:ee:58:c2:f5:f1:a7:cf:a8:82:43:b0:6c:0b:2a:
af:56:cb:81:4f:da:37:83:a9:a7:dc:37:9a:42:55:63:fe:82:
3a:ce:c2:3c:02:52:5f:f9:23:be:ed:db:2c:ed:1c:5f:94:3b:
8e:61:6f:ea:1f:3f:3c:8c:01:8e:20:46:98:ed:66:32:85:c1:
9d:b8:7a:25:89:1c:99:98:41:e3:83:7d:8d:53:99:18:a3:dd:
f3:d3:87:2a:cc:e4:fe:89:95:fa:61:13:6f:92:3f:24:cb:47:
18:4d:f1:fd:4b:b4:11:79:35:05:6a:84:8e:fa:5f:57:bd:63:
dc:76:de:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:48 2025 by rpki-client