Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
File: v7STRXsvAuabhfcY3MFqmp7w_NE.mft (raw, json)
Hash identifier: clZdXF47nsEmyY0CZ+WvT1/nhn/PwXsPYabI8hlLiB0=
Subject key identifier: EF:7B:92:FA:AA:00:83:AF:4E:D2:45:41:2D:68:24:23:BF:8A:1B:A8
Authority key identifier: BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
Certificate issuer: /CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Certificate serial: 019A56E497599309EF0D7518BD783D3E606A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
Manifest number: 0BC0
Signing time: Thu 06 Nov 2025 02:00:12 +0000
Manifest this update: Thu 06 Nov 2025 02:00:12 +0000
Manifest next update: Fri 07 Nov 2025 02:00:12 +0000
Files and hashes: 1: FtUQDEV_goV9Q63cZwJrNo1XKeY.roa (hash: Poc/aj2i2jRAb5gMRxZ1X3AZiJk2CkXvF60h8JBU3Lg=)
2: GOVv7UWiyAgkUB324DNsuUmKdTE.roa (hash: ADQ5I5pX9eFcLUcZ8U56+xsynmnuecGVYVarRV0N63M=)
3: PEppcNvJjXnRhJY43E_LrbZ4b6Y.roa (hash: cA6/Zn5y/f62RQujNI9AmlKGDu+DsPIKIqYlGLbyskk=)
4: YiYsGJx6tfQVO081Vxo55GvUSDA.roa (hash: XzfROabzEDDgQ3YtgsMz+CrIxVTOUzesfcSiy4Nm4h0=)
5: dltNpJjwDGHyEEOA677kBUzkRvU.roa (hash: 5oogiShbtMsUJb/98HpJq5UTDNd0RiHRIGkjEdT9ssI=)
6: tBTs9qTZvhEc-OOPlwI4K3aRl-k.roa (hash: ej0EH67XzstYQ3vD/Dm513ioNKVEsWJ6CV9bJXDlLj8=)
7: u52qW4JyOvyxFH_dm7Mf8f_9xYg.roa (hash: p5pa88452Qlp5obMC/dsSAsRdIWVZbdy4Bw3DHihOtQ=)
8: v7STRXsvAuabhfcY3MFqmp7w_NE.crl (hash: VZytEn1YqZ7+9PBI+XKqCLtJ7yHHt7o1ysyQTjTOJis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 02:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:e4:97:59:93:09:ef:0d:75:18:bd:78:3d:3e:60:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb493457b2f02e69b85f718dcc16a9a9ef0fcd1
Validity
Not Before: Nov 6 02:00:12 2025 GMT
Not After : Nov 7 02:00:12 2025 GMT
Subject: CN=ef7b92faaa0083af4ed245412d682423bf8a1ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:75:54:44:5a:5b:12:fa:52:2a:9b:6e:ff:
ce:2e:f3:15:a8:57:3b:2a:d2:a2:66:d5:ce:4e:e6:
75:ed:ac:d8:2c:47:bd:b2:9a:e1:7f:c3:ac:94:eb:
ef:69:96:19:ee:3f:ab:80:d2:1c:79:24:77:25:74:
b8:d7:c9:62:a2:c6:45:a9:24:11:7c:9d:88:4c:fd:
0c:3b:00:fc:8e:82:89:95:1a:c7:c2:af:47:89:9b:
13:37:19:47:52:71:d6:9b:01:d8:a2:a4:b2:bb:d7:
db:54:40:b0:6e:05:6b:9a:92:12:7e:10:ba:50:1d:
b1:ee:60:09:dc:aa:3a:89:a1:0d:05:dd:86:64:02:
4d:e4:f6:b9:45:8c:b5:56:e6:a2:e7:44:0d:94:22:
f3:cb:d4:8d:48:12:ae:5c:c6:4c:30:92:46:85:77:
38:07:41:05:5c:51:5b:86:4e:08:8d:db:00:0b:27:
61:65:23:33:28:7b:2c:9c:4b:24:fa:b0:b0:8c:80:
09:5d:9d:b6:a7:4a:94:3a:be:38:6c:52:a7:0b:50:
2c:59:3b:d7:bd:d4:79:3c:6f:f5:e4:57:f5:77:a0:
90:c7:e4:3b:fc:ed:55:88:a9:c8:3a:74:9b:11:99:
34:71:eb:d5:2e:6e:7c:a0:f6:f6:e4:1d:13:d7:4c:
2b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7B:92:FA:AA:00:83:AF:4E:D2:45:41:2D:68:24:23:BF:8A:1B:A8
X509v3 Authority Key Identifier:
keyid:BF:B4:93:45:7B:2F:02:E6:9B:85:F7:18:DC:C1:6A:9A:9E:F0:FC:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7STRXsvAuabhfcY3MFqmp7w_NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a4141d-8498-42f4-b2f3-1f6409848150/1/v7STRXsvAuabhfcY3MFqmp7w_NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:84:ba:04:dd:ae:57:bb:48:cf:83:3c:f3:2a:9b:c2:b6:7d:
31:bb:70:fb:cb:df:2d:86:e5:1f:ed:5c:36:ef:0e:f5:d2:1c:
ec:20:b7:73:d1:0c:9d:f2:a1:6d:95:6c:90:2e:ef:74:85:da:
a8:85:9d:f6:62:13:37:66:01:44:16:b7:dc:d6:a5:e2:7c:5a:
e1:1e:37:05:47:55:1a:6c:8e:d7:ce:ba:0d:be:20:df:4c:eb:
06:9b:ec:a1:2a:29:9e:2a:0c:91:2a:7a:aa:08:dd:7e:44:53:
9a:9b:6e:fb:45:fa:1c:aa:00:8a:df:9a:11:78:c4:e3:99:0a:
de:1a:1d:5d:ad:df:ca:c4:93:b4:a8:b0:2f:22:93:ff:37:f7:
8d:e7:fe:4d:14:7e:e0:a3:04:40:a7:2b:77:be:3f:e2:18:ec:
a5:08:94:ce:f2:0c:72:6d:b7:ca:b1:d7:12:c4:24:32:5d:b5:
5f:9f:71:b5:45:91:9c:27:46:06:5c:bc:5f:48:cf:9d:63:a2:
7f:81:cf:d1:65:bf:01:bf:70:95:5f:d8:ba:eb:8b:55:09:61:
27:45:17:65:01:a8:26:de:6c:25:a8:81:f1:ca:3f:8b:69:46:
a2:da:ba:11:47:3d:fa:19:66:dd:cd:81:da:3b:53:a9:f5:bf:
bd:9f:13:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 09:20:49 2025 by rpki-client