Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
File: e-714WwUZ9p6AvGSN2U65CsQllI.mft (raw, json)
Hash identifier: R4u3Bc/QEgycysz3KH9bv1bGolUqhvUpeYYiOjAnuv4=
Subject key identifier: A1:E8:1B:FF:08:F1:8E:22:86:86:3A:EF:C4:2B:25:AD:3C:1C:4B:8C
Authority key identifier: 7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52
Certificate issuer: /CN=7beef5e16c1467da7a02f19237653ae42b109652
Certificate serial: 019A71B7A5A569D88BB5D401A246A0EE3FEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: TTLplKYMw3ALMHBQOquflMCv_74.roa (hash: xOzJXshEgFbL72SqfgJ9QFBYYI8Jm5YZHiKPrlqNSRU=)
2: e-714WwUZ9p6AvGSN2U65CsQllI.crl (hash: X7eu2NFtXk/5ru9jgq8sgT8Zzbjfr8E4ksN3cf8aUgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a5:a5:69:d8:8b:b5:d4:01:a2:46:a0:ee:3f:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7beef5e16c1467da7a02f19237653ae42b109652
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=a1e81bff08f18e2286863aefc42b25ad3c1c4b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:6c:10:e1:0b:5b:ea:90:2f:3c:61:7d:20:
69:22:cb:31:f2:a9:df:10:89:f5:f1:16:84:95:5e:
9f:7d:66:ae:58:a8:36:01:06:3b:b2:a8:1e:32:ad:
20:ab:cd:2e:41:ee:de:b4:53:e5:43:1d:25:ca:13:
cd:f4:99:dc:92:17:63:9e:6e:73:52:e6:a4:fb:37:
df:e5:f1:f6:dd:39:6c:13:9c:87:bd:fc:42:a1:39:
36:ed:2b:e4:01:d9:f6:6d:8e:c0:25:85:06:7b:90:
84:ff:47:60:a9:3a:64:d4:92:4b:77:d8:88:1c:73:
fc:83:e8:f1:65:78:67:15:75:2d:bf:2c:04:a0:3e:
6e:39:ea:84:a4:2e:17:dd:41:d9:e7:ba:1a:4e:78:
e1:f2:4e:78:06:9d:b9:4f:8d:6d:99:81:80:4b:59:
5d:a1:55:ac:f8:64:57:82:b4:95:d7:89:42:3b:3b:
5b:25:f6:05:a5:75:3f:e7:69:e1:0c:8b:bb:4a:3c:
b8:96:11:af:33:5f:c9:e1:97:ad:e4:4b:d7:50:5e:
fd:b2:f8:5b:5a:18:c7:44:3e:e8:b6:0c:29:e3:e5:
38:2c:c3:0f:9e:37:a5:f5:20:cc:f3:50:16:be:86:
73:57:f8:28:75:82:0a:ea:59:ab:d5:84:05:cf:e3:
5a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E8:1B:FF:08:F1:8E:22:86:86:3A:EF:C4:2B:25:AD:3C:1C:4B:8C
X509v3 Authority Key Identifier:
keyid:7B:EE:F5:E1:6C:14:67:DA:7A:02:F1:92:37:65:3A:E4:2B:10:96:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-714WwUZ9p6AvGSN2U65CsQllI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a2b983-5538-485e-b10f-17a69b702e1b/1/e-714WwUZ9p6AvGSN2U65CsQllI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f9:fb:60:cb:fb:98:b3:02:9a:58:f4:78:63:09:c7:79:4e:
a7:7f:90:29:8d:7d:86:19:e0:60:f1:ab:ab:bb:7d:63:77:71:
d5:93:e4:70:0c:da:22:d7:d3:b8:b6:5a:26:e4:fb:aa:c9:4c:
74:c1:9b:04:65:13:77:62:ec:1f:d1:32:40:a0:eb:3f:59:fb:
bc:05:55:74:f6:a9:60:9a:4f:2c:0a:0b:e8:d6:db:ce:0b:dc:
19:14:99:87:80:82:7e:b3:cf:30:82:02:6c:8a:ac:b7:cc:36:
48:1c:23:f0:22:aa:30:05:06:8a:6c:3d:76:07:23:5b:a6:76:
b6:27:70:de:a6:83:27:f9:cd:b5:84:84:6f:9e:3a:b6:52:a9:
02:0e:69:61:0d:b3:5c:c2:34:67:fd:91:c7:0b:11:c1:23:48:
a1:ba:12:e0:55:bc:9e:fb:54:5e:3a:d8:c5:0e:c8:2d:98:70:
94:78:74:de:d5:51:e9:29:b1:1b:8a:36:e5:75:d7:0f:df:b8:
b0:78:80:d5:2c:1d:f1:26:80:5a:5d:e2:61:50:39:2f:bf:ce:
c1:d0:d9:fc:53:93:56:02:43:ef:7a:1c:f9:65:32:fa:26:2d:
44:d0:a5:22:15:df:0c:76:73:1f:c0:ad:ef:9d:71:15:e2:f7:
42:ec:02:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:58 2025 by rpki-client