Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
File: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft (raw, json)
Hash identifier: DT2F21Y0jnmiuWDkK6C4ooXB+KZw4eb6hUlVlA72tbI=
Subject key identifier: 57:07:8D:67:54:DF:D5:1A:97:63:D0:01:1F:4D:82:FC:33:82:72:84
Authority key identifier: FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
Certificate issuer: /CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Certificate serial: 019A7149AEF98BEE75B7C4BC2EC503D5FC33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 05:00:45 +0000
Manifest this update: Tue 11 Nov 2025 05:00:45 +0000
Manifest next update: Wed 12 Nov 2025 05:00:45 +0000
Files and hashes: 1: 1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl (hash: bI2ZRh/phQmrH1gD+qC/3MKL1Txalq3QGWWuFZe/LvM=)
2: XF73C-FcSSxJQ-8xYAlTFyAP5_I.roa (hash: rhy91ygxYwJGIax/8YbxBHZVS3S7+RqnvU3dEA+5QuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ae:f9:8b:ee:75:b7:c4:bc:2e:c5:03:d5:fc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb26952b1213f9cbd1d8c9671fb22357ad8d322
Validity
Not Before: Nov 11 05:00:45 2025 GMT
Not After : Nov 12 05:00:45 2025 GMT
Subject: CN=57078d6754dfd51a9763d0011f4d82fc33827284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b7:6b:30:31:54:35:07:2b:67:d6:d7:02:80:
e1:1e:06:05:4a:28:d0:10:93:22:f9:75:1e:6d:b2:
3d:4a:71:e7:ec:1f:b0:a7:c2:fb:bf:1e:89:7d:d2:
09:4e:5c:8d:fb:c4:f8:1e:5c:43:7d:35:cb:49:9a:
22:3e:c1:18:d2:4f:47:37:18:e2:a8:4a:da:13:af:
eb:e0:7b:a8:5b:ef:d4:61:de:f5:e9:f1:e2:d8:d0:
39:49:57:77:43:ce:9f:07:94:6e:3c:7e:e6:5a:29:
d9:46:7a:a3:97:77:f9:14:f0:5b:e8:0e:ec:30:15:
1b:a9:42:06:06:5c:09:b3:01:36:1f:eb:e1:f0:3b:
01:20:2d:ce:4b:b6:a7:9b:7b:ef:a6:99:89:a1:8d:
cd:78:3e:ad:c3:75:21:ef:ec:e6:33:d8:7a:d8:83:
8f:34:1e:08:bd:22:63:ab:85:38:e9:27:79:72:7b:
65:ba:25:b9:b2:b7:d5:d5:15:21:93:68:2a:33:54:
1d:28:c9:dd:2a:74:a0:f2:d8:76:f8:7f:bd:2a:6b:
f5:4d:0d:3a:0e:88:a5:6e:43:59:64:83:d1:7e:15:
08:cc:d0:89:59:34:0c:da:a1:9d:55:f7:fd:5e:b5:
3e:15:a5:4d:f7:15:a6:a7:da:c9:8d:a1:bf:ec:fb:
2f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:07:8D:67:54:DF:D5:1A:97:63:D0:01:1F:4D:82:FC:33:82:72:84
X509v3 Authority Key Identifier:
keyid:FB:B2:69:52:B1:21:3F:9C:BD:1D:8C:96:71:FB:22:35:7A:D8:D3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/25998d-4b7a-42b2-b46d-dd23291f7a19/1/1-7JpUrEhP5y9HYyWcfsiNXrY0yI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b0:88:67:47:63:1f:96:6a:c5:51:47:3f:35:b5:b3:22:46:
94:35:20:46:dd:0c:d2:e3:8f:7c:4a:36:1c:52:ef:1e:d1:e4:
6a:e4:a3:1f:65:21:e1:c0:75:1d:14:6d:f0:53:d6:2b:f4:13:
c7:b4:91:3b:96:a5:91:b5:fa:85:63:a4:56:5c:df:c3:ed:c9:
0e:15:fb:73:b8:25:e4:5a:4b:75:b0:eb:03:25:f1:7c:e2:3d:
2e:69:c8:82:63:2f:5b:07:23:cd:5d:a7:9e:c1:eb:d2:30:17:
ed:b7:00:de:09:67:04:0a:d1:88:d1:a9:4d:af:23:52:e7:d3:
5b:c8:64:75:4b:f9:78:2b:bf:1b:31:fc:65:2b:4f:57:f2:78:
72:95:f2:52:34:4b:98:42:44:94:8e:02:06:86:7c:d6:7a:3a:
3d:6e:e3:4a:4a:2d:4c:b4:22:c7:44:74:b6:57:d5:4b:87:3f:
d0:65:76:9e:f1:38:4f:38:3c:b5:3e:ef:47:17:92:ba:d6:4e:
a6:41:7c:03:26:c2:42:c9:e2:4c:1e:93:e8:89:b3:8f:b3:c8:
bb:42:4c:6e:12:e4:51:67:79:1d:43:03:f8:ee:22:83:ad:19:
4f:9c:f3:53:a1:a6:a8:ea:b7:b1:92:68:99:4f:30:93:23:fd:
42:6d:48:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:20 2025 by rpki-client