Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File: 7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier: 3TMPONm7wJGuhn0YRo3zk1K3sPsq6YPUiay4LAB1Kp4=
Subject key identifier: 85:86:9B:5A:C1:81:74:D7:BD:44:3D:A7:E1:BC:70:A2:C9:55:96:60
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial: 019A7149C1448F70B1B2C1FCD434A84772B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number: 058C
Signing time: Tue 11 Nov 2025 05:00:50 +0000
Manifest this update: Tue 11 Nov 2025 05:00:50 +0000
Manifest next update: Wed 12 Nov 2025 05:00:50 +0000
Files and hashes: 1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: Rt4M0xcmFtZWe/dAg0GEoTtnBAmHOf1H1+SzT0BUvc4=)
2: jO8_WTUfYU8WgAweNsy-XdM5HxE.roa (hash: DSCWbkkOzf+/qzK5D7cI20PP8IqsbGas6Mu8jntukrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c1:44:8f:70:b1:b2:c1:fc:d4:34:a8:47:72:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
Validity
Not Before: Nov 11 05:00:50 2025 GMT
Not After : Nov 12 05:00:50 2025 GMT
Subject: CN=85869b5ac18174d7bd443da7e1bc70a2c9559660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:5a:b8:6c:15:7c:42:b1:24:1a:7f:dd:70:45:
e9:ea:a4:12:24:54:c0:79:9e:60:45:40:91:5b:56:
02:8b:f8:e1:48:ce:f2:69:d7:bb:b1:62:45:36:81:
42:d2:37:6f:a3:99:f3:ee:e3:84:46:7d:9a:06:ff:
67:56:2c:db:2c:c5:11:30:35:63:b6:56:17:4f:2d:
35:7a:88:34:bf:31:dc:c4:53:aa:32:95:07:93:e3:
04:28:af:33:55:60:6b:78:f4:d9:9b:a7:c5:7c:3e:
81:99:25:d4:6f:da:8b:9f:09:3f:3c:e7:58:91:d8:
2b:67:31:7f:a3:a0:54:43:98:65:29:c1:d7:c7:3e:
3c:d8:15:e5:39:dc:bc:dd:af:a9:c8:f4:3e:02:a9:
14:8e:63:02:86:20:33:89:23:7a:51:29:73:3a:87:
68:cb:b8:36:12:53:3f:67:41:2f:91:ba:07:8f:10:
ba:aa:08:9e:6a:38:b4:28:8b:dd:18:f9:14:ee:1b:
17:4f:c1:43:c6:db:10:0e:5b:b9:5e:6e:f4:e7:a3:
cf:15:15:93:3f:fd:ec:3e:d8:76:e3:f7:ad:82:62:
39:76:30:80:c2:d2:12:26:fc:a4:4c:f8:1a:89:00:
13:cc:96:be:98:18:ff:73:66:9a:09:29:c3:60:13:
7e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:86:9B:5A:C1:81:74:D7:BD:44:3D:A7:E1:BC:70:A2:C9:55:96:60
X509v3 Authority Key Identifier:
keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:62:6c:a5:96:5d:2f:b4:a7:a7:ef:f2:60:9c:1a:fe:32:5b:
0b:be:6c:b6:af:c6:38:d4:0c:d0:7d:95:3e:25:0e:e9:31:ab:
6d:cf:ba:b8:68:43:7f:9a:96:63:ec:05:ad:cf:c4:21:c0:c7:
1f:5c:52:e9:fd:6e:7d:0e:75:c4:15:cf:a0:6b:58:81:f2:79:
e4:b8:cc:69:d7:40:57:34:a5:a8:a1:21:4e:4e:48:2a:1f:7f:
7b:78:33:7f:7e:26:db:25:a8:bc:16:a2:c4:ab:ac:0c:d4:2a:
f5:e0:5e:7d:bc:2d:5a:2b:1e:8b:58:f9:9c:43:d2:cd:6d:43:
b4:29:95:37:13:03:47:9d:73:46:09:0e:aa:2d:42:59:9a:93:
ac:08:9a:93:f4:be:73:9c:aa:96:3b:5d:4d:4b:15:f8:89:c7:
02:16:39:99:5d:32:18:65:f1:1f:8c:25:a9:5e:ad:19:4d:ac:
c2:db:bb:bc:46:eb:9f:87:9e:91:9b:a8:bf:69:00:db:11:3e:
69:b9:cc:f9:7f:21:22:e3:8c:0b:ca:6d:c3:8f:f1:87:a6:0b:
ed:a5:4d:27:24:25:28:c7:54:10:3c:17:7c:09:21:56:41:af:
82:60:c4:c8:a3:65:25:cb:30:82:07:89:60:33:9d:3f:49:aa:
3a:e7:7d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:50 2025 by rpki-client