Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier: /+8lTZh6fbSseLW9Pt6OpCGirlTTsh3e1J8cY/CrjFw=
Subject key identifier: AF:44:B1:60:C1:B9:31:9A:9F:86:2F:2A:98:01:F0:F3:2A:52:74:F6
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer: /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial: 019A70A4C87172D922D10377F31E717A10C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number: 0624
Signing time: Tue 11 Nov 2025 02:00:38 +0000
Manifest this update: Tue 11 Nov 2025 02:00:38 +0000
Manifest next update: Wed 12 Nov 2025 02:00:38 +0000
Files and hashes: 1: ey_HbPVH-fdSqz0HYztvUA0UE4I.roa (hash: upy8JLus6gUmjxLyY05s4dKH4rsD9BpLxwpFWnLAb38=)
2: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: iME+BAUqrTsNdaHl974NDdhNf3AacliJIlo2VdSoGR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:c8:71:72:d9:22:d1:03:77:f3:1e:71:7a:10:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Validity
Not Before: Nov 11 02:00:38 2025 GMT
Not After : Nov 12 02:00:38 2025 GMT
Subject: CN=af44b160c1b9319a9f862f2a9801f0f32a5274f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:18:14:2c:82:56:d1:98:8e:49:2e:82:52:
69:c0:88:24:84:e3:59:83:e6:5d:3a:a4:c6:ea:9b:
ab:c0:22:4f:ac:ca:ce:4c:3d:b5:64:19:d6:95:4d:
87:ce:4d:d6:9a:3a:6f:50:cb:dc:9b:41:27:69:ee:
21:79:02:c9:a1:b1:04:50:3a:67:ed:03:7e:c2:d2:
5e:19:53:6f:ea:90:f7:4a:39:65:a3:06:10:bd:e2:
02:24:c3:e0:bf:c5:ee:03:7b:74:c9:d0:36:64:dd:
4e:15:26:19:eb:ad:00:de:cc:e5:e0:af:a1:0b:dc:
ad:cb:61:e3:5f:fe:47:b6:2b:6b:0d:d0:d4:e0:79:
e1:9a:fc:a0:73:cd:fa:7d:c9:b6:94:16:15:20:f9:
c3:e9:4b:d9:03:a5:ab:12:28:c3:97:0f:30:21:fc:
cf:36:28:ed:e5:9d:c4:1d:19:3d:46:17:a5:be:5b:
aa:26:bc:1a:76:19:e0:90:c0:13:7d:23:27:08:b3:
04:5d:4d:2b:c0:95:e0:d5:84:96:5d:5c:b7:37:94:
68:17:8a:f6:26:c5:17:b6:a7:cc:f1:9b:5c:4a:86:
9a:6b:a4:bc:7e:eb:e5:25:85:e1:19:48:89:74:ce:
96:27:67:a3:6e:75:fd:da:b5:e3:77:5f:3a:60:4f:
73:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:44:B1:60:C1:B9:31:9A:9F:86:2F:2A:98:01:F0:F3:2A:52:74:F6
X509v3 Authority Key Identifier:
keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:19:aa:85:71:f1:8a:d7:2c:00:2a:93:33:e6:26:ba:af:6c:
eb:a9:7f:98:49:c9:be:2f:64:b3:bd:cf:23:89:e7:da:ad:d5:
49:bb:15:dc:c2:8a:42:e8:fc:67:42:67:76:de:7a:ff:ef:7b:
5b:a9:cc:52:7a:09:19:a9:c0:ee:05:ed:43:9a:29:83:18:82:
56:cd:00:7a:2a:0b:84:e9:fc:b2:19:2d:bc:70:4f:98:a7:b1:
9f:1f:af:76:8a:43:9d:c6:83:cd:c3:e2:c3:35:b4:7d:80:66:
07:ae:8f:e1:aa:03:83:d5:d9:b6:50:e0:b7:01:0d:c8:dd:d2:
04:46:ee:66:e5:25:4d:41:d4:00:34:c4:a4:4e:de:79:1e:21:
1d:90:67:3f:78:7a:ad:1f:9b:a5:5f:73:83:a3:a5:83:a5:3a:
40:63:9c:eb:55:a1:a1:f9:e7:05:33:6a:04:c3:cf:82:81:6b:
1c:cb:c0:1e:62:c3:f1:fc:2b:31:45:87:7a:85:10:e9:09:21:
32:14:26:91:c5:88:b4:44:7c:8a:f2:1b:e5:7d:ca:72:77:ee:
bf:b6:24:5b:43:a8:68:ff:8e:84:43:62:57:8a:90:c5:5c:f7:
6c:f5:69:36:ba:9e:c8:d7:84:07:e6:a8:24:be:4d:2a:60:a1:
9f:be:73:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:35 2025 by rpki-client