Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
File: V7DWfEnsEvT1QXA49twTwvk-p2U.mft (raw, json)
Hash identifier: Bq3f8ocoIRmKMcHUHzfWRh7mJgECdQG7zqQ8Ez9+CUc=
Subject key identifier: D5:D2:32:71:67:B6:D9:C2:E9:AA:23:BC:90:52:78:5E:1E:E8:A4:F2
Authority key identifier: 57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
Certificate issuer: /CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Certificate serial: 019A706E5C4AD4B3679E8FBBD18AC329EE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
Manifest number: 0F79
Signing time: Tue 11 Nov 2025 01:01:11 +0000
Manifest this update: Tue 11 Nov 2025 01:01:11 +0000
Manifest next update: Wed 12 Nov 2025 01:01:11 +0000
Files and hashes: 1: V7DWfEnsEvT1QXA49twTwvk-p2U.crl (hash: s1qKthm6txrZsaaeez6y6OPnAWjOvRRXILI1zbMzJ7A=)
2: aTC_FMtzHsZtI14wbnunZmi33Jw.roa (hash: wvwgvmerl+Gv6gcyDvl/OWVT3i3Y0FpbzMV8nbDfYyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:5c:4a:d4:b3:67:9e:8f:bb:d1:8a:c3:29:ee:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b0d67c49ec12f4f5417038f6dc13c2f93ea765
Validity
Not Before: Nov 11 01:01:11 2025 GMT
Not After : Nov 12 01:01:11 2025 GMT
Subject: CN=d5d2327167b6d9c2e9aa23bc9052785e1ee8a4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a7:6e:57:3f:02:1a:0a:c5:82:c5:a1:3e:f3:
33:fd:d4:bb:19:3e:23:5d:76:81:19:35:5b:33:9f:
aa:ea:7d:1e:c6:8d:3f:42:34:42:d4:c7:24:33:e9:
7a:2f:31:34:78:4d:43:1e:39:4e:3b:48:46:ab:39:
cd:85:31:aa:56:2a:a2:16:2a:c1:ae:02:f3:7c:28:
f0:44:6e:f1:c2:2d:e7:84:fa:8f:4a:dc:f9:4e:15:
48:9a:3a:be:bf:d8:b9:85:a3:50:22:91:ef:08:64:
47:b0:1e:ac:75:3e:95:9e:76:64:02:61:d3:f9:df:
31:22:f7:74:da:1c:02:e2:4a:4c:d3:45:0f:f0:16:
cb:b8:4d:30:1d:a2:91:c3:3c:04:ab:f2:82:da:db:
39:08:cf:69:50:38:91:63:57:71:24:37:8a:bc:87:
79:79:d3:97:ff:90:5c:84:f3:df:45:68:20:a0:c1:
53:f2:e4:aa:03:73:50:2b:f5:58:bb:60:e4:53:94:
76:90:4a:e0:3e:64:f2:35:98:6a:8d:48:82:46:2b:
8f:72:2b:af:f5:4e:c1:2d:39:9f:7b:29:f4:c2:b7:
47:8c:93:70:24:3b:22:aa:52:a4:10:64:b8:5f:20:
f5:17:b4:38:ac:b8:cf:88:7b:f4:1f:0a:d2:67:29:
82:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D2:32:71:67:B6:D9:C2:E9:AA:23:BC:90:52:78:5E:1E:E8:A4:F2
X509v3 Authority Key Identifier:
keyid:57:B0:D6:7C:49:EC:12:F4:F5:41:70:38:F6:DC:13:C2:F9:3E:A7:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7DWfEnsEvT1QXA49twTwvk-p2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/851657-044d-47d3-afc9-c3a8375f90f9/1/V7DWfEnsEvT1QXA49twTwvk-p2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:de:c6:1b:ac:5a:66:28:d3:84:f5:0c:67:0e:bb:8c:4c:21:
21:cb:65:06:db:49:dc:fb:99:68:a8:95:f9:c8:a6:95:c3:c2:
b5:d3:06:c2:22:08:c1:f1:47:07:d1:bc:9f:be:ed:93:8a:2f:
2b:98:13:13:8c:60:a6:a7:7b:26:27:4c:53:5a:5a:db:49:cd:
d4:53:56:78:fc:48:14:0d:56:11:fa:92:9e:95:ba:34:38:25:
92:ce:bf:25:a2:c1:d5:c7:13:64:8f:0d:30:92:69:2e:bf:28:
03:e8:3a:55:85:83:40:dd:61:19:50:cc:9a:d3:51:e7:1e:6e:
e3:76:11:fb:d5:53:d3:73:a0:fc:da:b7:f5:11:ca:f2:90:0f:
15:56:64:ed:8c:e8:f8:a7:9f:90:4f:51:31:4b:dc:52:27:bf:
8f:5f:d1:d3:2e:91:1a:d1:bb:44:1f:95:46:73:01:0b:55:cb:
ad:1c:ca:ef:08:43:4f:8f:ac:09:a6:f8:25:85:84:79:77:8c:
a7:25:46:74:70:53:25:00:05:a7:02:8d:e1:9b:70:57:25:8f:
ec:41:c8:eb:01:4d:fb:84:9d:29:96:4b:7b:c4:25:fc:22:0c:
ac:bd:a7:8a:f4:d7:78:b5:e4:ff:1c:1b:30:3b:9f:32:84:27:
f0:d4:fb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:46 2025 by rpki-client