Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
File: 670ir7gN-togA9QOVG2v03_4af0.mft (raw, json)
Hash identifier: 0aLdGQmU5aOFitEM7tTvKzIEoD1nkrK4j8+ok3iumeU=
Subject key identifier: 0F:D8:6F:8F:3F:A6:EE:76:6F:7E:26:CA:93:EB:D3:51:D6:7D:B9:35
Authority key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
Certificate issuer: /CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Certificate serial: 0199FCFD818A2BEB20950504453773C72247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
Manifest number: 05D7
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: 670ir7gN-togA9QOVG2v03_4af0.crl (hash: Vb4qFtEQK80FYkG/V9MDNuNxvsnamR0nJjG/znVSMrM=)
2: Lg69_8_Hwhk8sLJu5EjPC6QyXmo.roa (hash: KXCYGeobuTRdhwIdNvFIRapr7Co2MUanxSVUEVx8L70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:81:8a:2b:eb:20:95:05:04:45:37:73:c7:22:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=0fd86f8f3fa6ee766f7e26ca93ebd351d67db935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4b:b3:58:b5:68:7b:6b:f6:70:df:fe:ef:12:
2d:ee:7f:ea:42:88:b4:4f:7e:0c:41:db:17:ba:c0:
a8:0e:f0:6c:ee:67:49:fc:ab:03:3c:fd:84:8b:33:
c4:ba:eb:d1:cd:29:35:eb:92:1a:de:d2:0c:fe:79:
65:28:4d:4a:32:6b:7b:e8:c8:84:25:a5:9d:a5:5f:
20:87:ce:d4:d2:30:34:72:94:20:4d:17:50:c2:61:
a4:d3:f2:c0:03:c4:2a:f7:66:d9:a3:f5:ec:4b:a6:
74:b9:70:f8:13:29:ef:82:5c:8a:44:96:00:9a:2e:
93:7d:74:aa:ad:e0:32:e8:4a:4e:96:17:0d:26:e3:
97:a8:3e:4c:7b:08:c3:dc:7d:89:24:96:b9:6c:4b:
41:de:c4:c9:69:d5:69:8a:eb:43:d2:25:a6:f2:22:
e2:e4:95:36:e7:3b:ec:18:e3:18:3e:db:5b:2b:ce:
81:d3:60:f3:e6:7f:87:49:3f:93:7c:e1:78:13:ef:
b6:5d:42:70:0c:fb:7f:be:7e:f6:75:15:85:79:d1:
4c:63:85:dd:da:c9:aa:28:70:ae:9a:06:3c:39:fe:
1d:16:ff:0b:e0:ed:78:fe:ae:98:58:70:10:d0:a3:
5a:60:8e:f8:cf:71:f1:ff:76:45:4b:cb:d9:3c:7e:
50:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D8:6F:8F:3F:A6:EE:76:6F:7E:26:CA:93:EB:D3:51:D6:7D:B9:35
X509v3 Authority Key Identifier:
keyid:EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:40:c2:76:dd:62:2c:67:4d:04:63:45:2f:ab:f1:34:ee:47:
f2:9b:59:d7:2d:69:ed:ab:25:a6:fb:e7:f6:09:32:81:e3:2f:
45:68:d5:60:fb:0a:18:8a:58:0d:b6:5a:c7:7c:36:ea:33:d1:
8d:7b:29:a2:d1:5f:71:0f:2d:62:4d:71:bf:c2:0b:81:95:d3:
75:39:c0:93:54:15:df:f3:13:c8:06:8b:d2:ef:23:bd:5c:5f:
03:b4:34:1a:7c:1e:06:4f:46:b7:74:60:24:f3:cc:4a:67:64:
13:a4:3a:72:3c:9c:62:8e:f3:77:85:53:20:66:c9:b8:c5:26:
f9:33:2c:17:52:e1:54:bb:b9:41:8a:c1:c7:e9:91:b4:0a:f0:
17:a8:42:ec:e5:1c:dd:e1:b0:16:83:f0:05:c2:f2:4e:1a:02:
b0:ed:71:de:d1:d3:2e:30:08:65:6e:92:65:f5:1f:20:f3:85:
4c:81:5d:e8:04:cd:bd:ad:29:67:64:53:d0:63:f3:9b:56:5c:
03:b2:56:df:79:f5:e5:f0:1a:30:a4:e3:79:b7:23:7d:c5:ec:
cf:de:54:72:53:75:bd:f1:f9:de:b3:0e:b1:a7:6f:e0:02:a9:
3b:cc:61:8c:59:2f:14:a7:fa:f3:ef:ec:00:f7:74:1c:43:60:
76:c4:3f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:22 2025 by rpki-client