Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
File: t7Z7pXn0ikIHrECav08BGUBG6jo.mft (raw, json)
Hash identifier: yiOmmnslS5OZ+NUAXhgW8AodAK86xtF3hOzu0NrztAY=
Subject key identifier: 88:8A:AE:86:FF:68:FB:68:82:1B:83:88:F6:82:08:F4:CB:34:1E:E9
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Certificate issuer: /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial: 0199FDD99300D7786B9B9D837731105EE682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 19:01:58 +0000
Manifest this update: Sun 19 Oct 2025 19:01:58 +0000
Manifest next update: Mon 20 Oct 2025 19:01:58 +0000
Files and hashes: 1: k-hTaQknXDp2DKuP6vvaZN3brec.roa (hash: IoaNc7VRuQAEFnNwpBORifvWy2POOqQygfpjoy01lPY=)
2: t7Z7pXn0ikIHrECav08BGUBG6jo.crl (hash: IeSnne6JcN0vGld7uMkKgZR06cbjLCehXmg05W565p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:93:00:d7:78:6b:9b:9d:83:77:31:10:5e:e6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Validity
Not Before: Oct 19 19:01:58 2025 GMT
Not After : Oct 20 19:01:58 2025 GMT
Subject: CN=888aae86ff68fb68821b8388f68208f4cb341ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:e7:b1:36:05:ad:ed:42:2b:10:b7:54:02:
3f:31:fe:0b:ae:fc:7f:18:ab:54:78:b1:7f:8b:22:
72:b1:da:b3:3b:0a:e1:cc:45:43:4e:24:1e:fd:d1:
9f:45:ea:0c:af:c4:2e:5d:3c:64:5e:b1:35:2b:93:
d8:8a:a6:fb:eb:d3:59:5e:98:3a:46:45:9f:ee:35:
f9:37:f4:45:b0:8c:ea:c3:02:c0:a0:04:1a:95:ec:
2e:5a:01:a8:73:a2:ba:3a:c9:df:2c:b8:d6:f0:fb:
6a:6e:d7:1b:d3:37:88:05:d3:22:de:36:8a:b1:2f:
89:03:68:52:cc:56:03:70:9b:30:49:b0:d8:b7:29:
a5:92:f6:b3:3b:b7:be:6e:bc:3f:b7:1f:93:13:c0:
3a:ad:3c:55:46:8e:4c:64:04:7e:79:b3:20:24:f1:
aa:cc:0a:ec:c3:2a:d8:a1:92:f7:b0:13:8a:6b:4d:
00:08:de:70:89:0c:4e:dc:7d:79:ce:1e:f7:d8:f9:
02:a0:69:de:cd:66:d9:8c:ef:16:2c:5e:f2:3b:97:
88:8f:53:f7:ab:dd:a8:13:9e:94:44:d0:64:2b:f6:
d5:15:26:42:0c:b7:a3:a4:51:09:4f:e0:57:e1:81:
4b:5f:7f:b9:09:70:9c:c7:87:b8:ed:e4:c5:df:4b:
6c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8A:AE:86:FF:68:FB:68:82:1B:83:88:F6:82:08:F4:CB:34:1E:E9
X509v3 Authority Key Identifier:
keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ba:18:8b:71:78:fa:e7:2d:f1:fc:ad:c1:36:0a:a9:90:9c:
17:42:30:4b:f5:97:03:74:a5:49:c5:34:a0:a3:56:d4:3b:1f:
29:12:86:f1:fb:20:9d:80:12:1c:c5:19:49:c5:50:ad:07:0f:
98:35:e1:8e:9b:dd:5e:b3:41:30:48:cf:1e:26:3a:27:d4:08:
dc:9a:08:c2:89:70:4b:61:95:04:b6:90:8a:44:86:15:24:cd:
c0:52:33:45:37:6f:57:28:01:a4:88:8f:41:24:17:ee:f0:a8:
f8:c1:21:33:06:75:d1:03:26:1c:55:b2:23:af:83:a9:49:e0:
35:5f:70:ba:d4:1c:c5:ac:6c:eb:55:2a:b8:02:1c:b3:35:4f:
68:ad:b1:87:3f:b5:62:3d:65:ea:eb:7a:cc:8c:c4:89:a2:78:
bd:cb:15:18:45:37:32:5d:07:c3:69:57:ce:f3:b5:79:35:62:
34:1e:3a:66:41:bd:ad:0e:d5:39:a4:ac:a5:29:65:64:4c:c7:
ab:a0:e0:4a:7d:33:7f:62:80:18:fd:eb:10:48:34:0b:c8:ef:
c9:fe:28:1d:da:27:b9:00:bf:d6:70:cf:fd:b6:12:cb:ec:4e:
c5:5c:ec:54:da:e0:bc:c9:ef:8a:15:d2:25:0b:fe:40:54:33:
a9:c0:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:18 2025 by rpki-client