Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
File: 7UV_lpwP7DW5JtD3KkfdRLizAPU.mft (raw, json)
Hash identifier: JX0ygS/3AQjgXReOHeJJ46lTMCqsA1ZggK5VA4/B2/E=
Subject key identifier: 68:37:19:08:16:82:A0:7C:42:29:AF:70:F8:D9:EF:1D:C6:04:87:C1
Authority key identifier: ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5
Certificate issuer: /CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
Certificate serial: 019A71EEBCC2BF6EF698F25F8A92AB9C1915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 08:01:02 +0000
Manifest this update: Tue 11 Nov 2025 08:01:02 +0000
Manifest next update: Wed 12 Nov 2025 08:01:02 +0000
Files and hashes: 1: 7UV_lpwP7DW5JtD3KkfdRLizAPU.crl (hash: cj7IBE4gfxBLzonQA7wT0S3cdS3q0h/6wMvhX2393iA=)
2: nv2sWsReuDqjbbgU3JKBZoxr2-Q.roa (hash: zWnvxgzXP/IKK0889x3RFyNlj3kERukZMLtV2w01Cbg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:bc:c2:bf:6e:f6:98:f2:5f:8a:92:ab:9c:19:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
Validity
Not Before: Nov 11 08:01:02 2025 GMT
Not After : Nov 12 08:01:02 2025 GMT
Subject: CN=683719081682a07c4229af70f8d9ef1dc60487c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:a2:92:5b:a1:7e:86:d4:30:dc:a9:ef:88:
ec:55:f9:b5:a0:25:62:86:27:bf:42:b0:52:f4:f8:
d1:05:44:98:e6:06:5b:55:07:46:54:7a:47:4b:7e:
9a:96:27:47:18:31:59:48:4f:12:c0:0f:87:c6:5d:
c0:b0:32:ac:22:31:78:92:39:67:95:84:2c:1d:30:
b3:b9:44:d5:7d:f6:0f:e3:c1:cf:34:17:e0:92:6d:
0f:7e:0e:8e:d5:79:c5:1a:c0:05:0a:ed:e8:65:f2:
ed:ab:b2:66:dd:6c:e8:a1:ab:b6:c4:71:54:27:d1:
75:db:0e:f2:9e:16:35:18:5f:75:63:23:b8:92:96:
54:78:81:b2:7c:6d:a0:92:27:31:5c:03:87:4d:f2:
f0:f8:10:5a:cb:ff:1a:39:45:de:42:72:8c:18:cc:
33:07:8f:74:61:ed:ab:98:e2:51:0b:7a:e0:b0:54:
27:7d:9b:c4:ea:8e:7d:95:23:d2:55:69:b3:43:a5:
65:d1:a3:17:66:c7:c1:89:6a:37:63:16:e8:53:0e:
21:36:14:82:30:f1:7b:4c:0b:e1:83:35:92:44:e8:
6f:fa:63:00:98:b7:72:99:48:9e:af:34:6f:83:e0:
0d:7d:17:84:0d:19:d2:bd:9d:2f:1d:ba:29:5b:d3:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:37:19:08:16:82:A0:7C:42:29:AF:70:F8:D9:EF:1D:C6:04:87:C1
X509v3 Authority Key Identifier:
keyid:ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:cb:85:4f:75:7c:7a:a8:fe:ab:01:5f:1b:74:54:30:14:31:
f6:cd:be:d5:df:0c:3b:d4:43:38:1f:20:72:e7:cd:54:56:54:
f7:f7:8f:5e:0a:9b:57:02:d8:53:95:d0:42:e0:07:9c:02:51:
c2:be:84:88:34:5a:6f:1e:df:09:54:ee:64:4f:e0:ea:c2:fb:
c1:df:8b:dd:7a:87:81:b1:f7:a0:73:2f:24:95:32:cd:8e:94:
12:0e:24:69:f1:a6:ec:6b:44:6e:92:44:2f:14:4b:eb:f0:0e:
7a:59:39:5f:ce:f4:39:ce:51:c4:9a:fb:7e:ac:fd:83:fa:04:
4d:a6:93:57:9f:3b:1a:81:55:ee:e8:1e:66:f3:7a:a1:8e:d2:
19:f5:1d:6d:5b:47:af:9f:89:c6:97:06:ae:2b:b5:ff:f3:a1:
fe:73:8e:73:fb:85:cc:8b:76:89:70:17:20:a2:0d:27:ac:bb:
a4:9a:89:e1:3f:86:5c:3b:f3:e4:5a:d6:8e:58:55:79:e7:f4:
fa:90:1e:ad:8b:4b:b2:13:97:83:37:9d:98:c9:d7:5f:ab:d8:
a4:04:9d:e9:55:9d:14:c8:b1:68:af:b1:94:96:80:05:0d:f0:
c1:21:d5:00:05:b3:4b:ed:ed:a0:38:32:61:e9:1d:8f:73:ee:
46:4b:cf:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:23 2025 by rpki-client