Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: lORk1xbTiXZG3XJG4CpR0xLWFVm4ZtgmwtFvyfog0nU=
Subject key identifier: 7A:CC:87:46:9B:33:40:6C:43:21:19:FF:5F:48:0A:57:BE:10:69:2B
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 019A3421E6219954982752D4E4E312FD1E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 1701
Signing time: Thu 30 Oct 2025 08:00:28 +0000
Manifest this update: Thu 30 Oct 2025 08:00:28 +0000
Manifest next update: Fri 31 Oct 2025 08:00:28 +0000
Files and hashes: 1: 697cAJc5ww3rq8-l1VuLwBpxIdc.roa (hash: btaRkUjrugna/WWsgPD4k728P+M+Z1FNlrq9vxtZCME=)
2: DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa (hash: K2abCfRZZHcX+YntqkfA1f/D7lChaJuQZeWDdJ7QE9s=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: GE9mmlVgzei4uIj4L6gkhgvQ3Kw1HCvv8oOnQv5/7qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:21:e6:21:99:54:98:27:52:d4:e4:e3:12:fd:1e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Oct 30 08:00:28 2025 GMT
Not After : Oct 31 08:00:28 2025 GMT
Subject: CN=7acc87469b33406c432119ff5f480a57be10692b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2b:1c:0e:cb:2d:c9:6c:fd:ee:2f:47:a6:16:
69:63:c5:e6:12:53:e3:86:ce:b0:5f:a1:06:4b:90:
79:8e:61:2a:4c:f1:6b:a2:09:4e:60:4c:fa:68:ba:
4a:7a:b5:2e:4b:31:52:59:09:b1:71:6a:23:54:fd:
c8:0d:95:9c:6f:dc:e9:82:eb:be:a1:1b:49:49:63:
fa:f6:b8:76:5b:5c:fe:3b:82:d4:b2:6c:02:04:37:
04:61:83:10:80:de:8a:5b:62:42:3b:4a:cb:01:f5:
42:02:72:02:ae:c8:bf:82:21:f4:78:c0:26:b8:b4:
7c:25:ef:76:8f:72:c3:78:89:57:45:a9:00:3f:16:
57:12:71:d7:48:0e:c0:2e:5e:41:cd:38:76:0f:53:
6f:d6:48:a6:d5:42:43:01:75:14:85:0e:14:ce:39:
07:03:cd:7a:c0:a5:07:50:fb:a3:06:a6:cb:8b:c7:
93:06:de:9a:6d:59:90:8b:a8:c6:ac:bf:db:0c:55:
36:c4:04:a1:a7:00:4b:a9:d7:51:e1:b5:e8:b4:56:
8d:9e:8c:85:7f:3d:0c:89:c7:fd:e3:62:fe:d6:f0:
a6:b0:4b:df:59:c0:85:51:5b:0c:be:81:86:fe:7b:
be:e3:65:92:66:68:17:5a:95:17:a1:f6:00:91:6f:
b7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CC:87:46:9B:33:40:6C:43:21:19:FF:5F:48:0A:57:BE:10:69:2B
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:3a:5c:f3:87:39:7c:4d:39:3e:8a:01:ec:cf:30:be:1f:f1:
c3:02:7b:9f:a0:82:8a:f7:a7:18:59:2b:2b:fa:ae:92:1c:73:
fe:9e:69:18:66:df:7e:70:70:29:08:a8:b8:4f:a7:9b:40:88:
d4:f5:da:07:a6:87:9a:55:00:64:17:68:00:65:65:3f:1b:ad:
f4:cb:b0:38:18:3f:15:f5:49:2e:26:f3:b6:8a:4b:cf:ad:93:
de:ee:fe:c5:ea:39:f5:58:c3:a2:92:50:23:fc:d5:4d:0f:80:
e2:fc:7a:67:98:cc:54:c8:54:90:4f:46:7f:f0:d5:15:2c:0f:
34:68:3f:f7:59:5b:d7:28:6a:71:6c:0f:2d:a5:2d:c4:19:fc:
18:6f:77:4a:2b:f1:f1:37:f3:8b:cf:d4:6a:5a:e3:da:df:dc:
e1:b4:b2:97:8d:6e:05:4a:77:37:f3:69:a1:eb:57:ff:f9:da:
cf:3c:1c:99:62:22:bf:70:c6:a1:56:32:93:ae:06:47:bc:33:
30:93:03:55:09:a5:58:77:c0:01:40:41:d5:6d:7e:26:26:e2:
ff:9c:c7:90:58:ad:5f:d6:92:0c:9b:04:5e:60:60:22:14:61:
ce:49:a3:b1:f5:a0:9d:ab:30:da:f6:22:eb:e1:a3:a1:13:d0:
44:4f:e1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 14:59:07 2025 by rpki-client