Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier: xxlDcduxCEQBikPx1mVAWp3zSa29oQYYWzeA4+oTPOE=
Subject key identifier: 57:7D:0A:83:3C:34:F4:C8:EC:11:0E:72:D8:B2:C2:5C:48:31:88:65
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer: /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial: 019A00DA01D1A75FF59F77527A344974C331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number: 0668
Signing time: Mon 20 Oct 2025 09:01:18 +0000
Manifest this update: Mon 20 Oct 2025 09:01:18 +0000
Manifest next update: Tue 21 Oct 2025 09:01:18 +0000
Files and hashes: 1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: TYy0Za3yAeSBVPW6SNz4CcIQxR1XVBUEc839W3F+zJ8=)
2: t01s41tuzCg0n-ebuqBLNh-kZ8U.roa (hash: gu7VW+b5U5NLSfKbHP6Ioqtp4/dVeiqqPEeW+qWaaC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:01:d1:a7:5f:f5:9f:77:52:7a:34:49:74:c3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
Validity
Not Before: Oct 20 09:01:18 2025 GMT
Not After : Oct 21 09:01:18 2025 GMT
Subject: CN=577d0a833c34f4c8ec110e72d8b2c25c48318865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:18:98:13:3b:a2:c4:46:3c:af:48:8d:ac:
4e:78:c4:64:f1:af:4c:f5:53:b0:2f:43:e2:89:85:
65:5c:88:4f:8f:2c:19:92:29:08:86:98:be:c7:84:
4c:4f:b7:3c:25:0d:f0:91:51:ae:ac:da:2a:fa:97:
23:aa:29:2f:1d:f6:b7:7b:72:f5:82:72:2c:43:18:
f3:ff:11:9d:2c:94:a3:9a:fa:2e:95:1b:bd:1f:77:
70:36:53:6b:b8:4c:51:bc:dd:14:d9:fc:e3:52:f5:
87:1c:60:31:db:31:4c:5a:71:05:af:11:bd:d8:4d:
9a:56:6b:67:2d:cc:6c:0d:d7:d6:03:94:37:ab:80:
6d:78:46:41:d3:ad:3c:bf:2b:d1:16:f4:fd:39:69:
fd:2a:af:9e:24:30:95:8e:ff:d1:b8:97:b4:c4:f2:
7b:36:a9:ed:86:77:1a:dd:b2:0a:f2:ef:25:7f:de:
2e:66:fc:99:0b:4a:ea:5d:b4:ca:d3:91:3e:d3:6c:
f3:03:06:25:31:72:f3:28:da:d2:ab:28:8b:66:2f:
be:a0:94:20:f7:cc:77:4f:42:20:8b:65:7e:5f:3b:
1c:6b:82:92:45:15:9b:0b:8f:1b:83:ce:e6:d0:e1:
b9:93:87:c3:d1:ba:95:9b:34:7b:51:69:e6:2c:fd:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7D:0A:83:3C:34:F4:C8:EC:11:0E:72:D8:B2:C2:5C:48:31:88:65
X509v3 Authority Key Identifier:
keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:55:96:e1:db:19:a2:bd:74:f7:94:f2:21:cb:60:b7:6e:f6:
9d:ec:d1:f4:83:28:e4:8d:d7:7f:5f:b3:fb:cf:61:b1:11:13:
4c:bd:be:e9:ec:f4:fb:80:25:80:36:63:48:89:ef:42:a7:96:
4c:e0:1a:7d:a5:8e:a5:46:e5:79:75:18:b8:fb:69:1d:6b:82:
e5:3c:d3:01:25:35:6c:4e:2f:d9:40:be:6f:b6:7e:35:34:17:
ea:0a:b1:7f:cc:74:e5:f8:2a:54:68:4f:60:61:dd:50:fb:a4:
03:ae:b0:a5:2c:f4:19:fa:fd:4c:62:bb:85:32:d0:7e:a0:f7:
38:a1:93:89:ae:67:52:b9:35:2b:da:ee:28:65:9c:32:42:19:
6d:22:d4:2d:02:87:13:86:be:b9:c8:ff:88:b3:b6:0e:c9:7c:
58:bd:da:37:ff:81:65:fb:da:6e:93:f1:24:6b:c1:b4:b5:f2:
42:68:ea:56:29:2f:42:9d:da:e1:86:3f:9a:3b:21:f2:5c:3d:
cf:62:06:e6:40:c1:bb:ed:20:38:84:59:16:d4:40:51:77:08:
3f:2e:74:ce:45:16:5b:b7:fb:5e:78:f8:3a:70:ec:21:e1:74:
26:8d:d6:0a:9e:96:03:4d:d8:ee:6a:b0:1a:0a:7c:fd:d6:ca:
e7:bf:f8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:08:07 2025 by rpki-client