Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
File: S7vBBpd1qASAa1C67X7OhIq96Kc.mft (raw, json)
Hash identifier: bVqvcgq8bp3gd6PVP/1hdj6fsX0vO2HlQVPFSXFjjkk=
Subject key identifier: F4:34:0C:E4:5D:2A:92:5C:EC:41:50:F4:C2:4E:C3:04:4C:AA:59:5D
Authority key identifier: 4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
Certificate issuer: /CN=4bbbc1069775a804806b50baed7ece848abde8a7
Certificate serial: 019A70DC62FC4BE3DE564BBE18AF8F1E5A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
Manifest number: 0FF5
Signing time: Tue 11 Nov 2025 03:01:22 +0000
Manifest this update: Tue 11 Nov 2025 03:01:22 +0000
Manifest next update: Wed 12 Nov 2025 03:01:22 +0000
Files and hashes: 1: S7vBBpd1qASAa1C67X7OhIq96Kc.crl (hash: Z5FGiJOmwugtw3MEA3RTSp1REELgrNy8BSDXY3URMR8=)
2: kOwiiAs2eR9pLFxLIBL1AOIYN3E.roa (hash: 3SQNAvfGJwEZLUa1WsSC2ImeHyAv94EKwUzIAUYUAnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:62:fc:4b:e3:de:56:4b:be:18:af:8f:1e:5a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbbc1069775a804806b50baed7ece848abde8a7
Validity
Not Before: Nov 11 03:01:22 2025 GMT
Not After : Nov 12 03:01:22 2025 GMT
Subject: CN=f4340ce45d2a925cec4150f4c24ec3044caa595d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:e8:3e:74:a5:c6:0f:0b:48:f4:e6:bb:47:
aa:48:2e:13:14:74:cb:07:ca:52:78:90:78:be:01:
1b:ce:9d:fe:03:f0:a2:9a:9e:a2:ad:35:eb:86:8b:
6f:0f:3f:00:da:c4:16:9c:e3:e6:6f:c5:d1:af:bd:
58:a6:9a:77:8a:65:5d:6a:6f:0b:2f:79:12:4a:36:
51:17:cb:f6:97:41:5a:6c:9e:57:f5:27:ac:3a:b4:
d4:56:35:18:93:c8:b9:7f:98:d4:d3:86:1c:ef:78:
e6:2f:30:8d:39:8a:59:0c:be:be:75:8d:f5:cc:6f:
82:d6:bd:0d:08:b8:33:41:b4:7c:e8:0e:f8:ab:cc:
ce:b6:fb:c8:f1:a1:0f:70:f7:39:5d:1e:59:f8:db:
af:d4:e5:11:20:32:9a:ca:63:2f:59:69:f8:00:a7:
a2:af:79:a7:a6:be:54:cc:1d:df:47:95:7d:85:57:
1c:e0:a9:d0:9f:73:41:07:85:64:d7:94:86:6e:3d:
45:63:73:86:63:68:92:db:9e:5b:2d:f3:3e:b6:ad:
6d:3f:0d:79:52:19:07:96:a7:67:9b:9a:03:99:15:
1e:e4:94:60:89:c8:76:e0:31:ac:72:c2:8e:ee:ea:
bc:63:f4:c5:9d:82:ff:87:aa:ec:71:dc:77:9b:39:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:34:0C:E4:5D:2A:92:5C:EC:41:50:F4:C2:4E:C3:04:4C:AA:59:5D
X509v3 Authority Key Identifier:
keyid:4B:BB:C1:06:97:75:A8:04:80:6B:50:BA:ED:7E:CE:84:8A:BD:E8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S7vBBpd1qASAa1C67X7OhIq96Kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3ae56e-bf96-4896-a68d-9cff8496e334/1/S7vBBpd1qASAa1C67X7OhIq96Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:bf:be:42:b2:f3:8d:00:79:6c:65:36:30:59:bc:50:d0:97:
e1:5c:f4:df:56:a9:73:77:ac:01:a2:65:b0:4f:49:a8:02:02:
8f:2e:fb:44:c1:3c:ea:53:8b:d6:63:71:3c:7e:2b:1b:71:ee:
a6:33:fd:54:fe:da:d9:6a:51:5b:d6:b7:94:2e:8a:d2:6f:28:
ed:86:34:f0:9b:93:3b:46:62:58:4a:8d:89:3d:49:2a:fb:20:
d7:8a:48:28:21:d5:45:b1:0b:fd:45:cf:28:91:fb:5f:89:39:
b8:89:eb:23:1a:f0:73:c6:99:26:5a:1d:f7:c7:ca:18:b4:5c:
bb:9d:b7:d1:9f:12:ce:ed:86:53:82:e3:90:b2:af:74:9a:5d:
01:80:6a:8b:bd:70:63:cd:16:2e:1f:19:f4:78:85:b5:f0:8c:
45:dd:c1:08:ef:aa:fc:68:ae:7e:91:09:e6:d5:56:1a:7f:bd:
91:34:fb:1e:10:07:84:ba:43:7e:6c:f7:55:95:6e:48:50:17:
fd:36:ab:c2:9e:c5:f4:06:7f:57:fa:63:93:71:27:69:e6:9b:
32:02:e0:a4:9d:ff:f2:2a:03:71:9f:aa:0a:20:97:7b:11:cf:
40:e4:d9:f1:b3:81:17:b0:d7:94:03:dd:ee:e8:c3:d0:da:56:
c8:b6:ae:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:18 2025 by rpki-client