Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
File: 557xnCc97e0ZzvazaDmzzrAe3v0.mft (raw, json)
Hash identifier: fvlgaBvWoIpAB+9GM+IASUkWbWQHRubTiM0NjuGZ+3k=
Subject key identifier: 7A:EC:D5:94:31:F7:B4:6F:CC:C2:0C:03:E1:D5:6F:12:C9:DD:AC:29
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 0199FFC8B7922E4937FDF7FC420183159A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
Manifest number: 0BB5
Signing time: Mon 20 Oct 2025 04:02:48 +0000
Manifest this update: Mon 20 Oct 2025 04:02:48 +0000
Manifest next update: Tue 21 Oct 2025 04:02:48 +0000
Files and hashes: 1: 4T7ohvim9PbetIc4Qlo9d9QA59Y.roa (hash: mTKqtI5PGB6Qq88qvBp2p7P3TnbGVtFteHmcAmCxgPg=)
2: 557xnCc97e0ZzvazaDmzzrAe3v0.crl (hash: zznzMYsLVUBYwMWI9lolL08/zT2E31bQ7LI8iX+pBZs=)
3: hoeiky0Yvquu-vh4T1lTnZlhbwc.roa (hash: TG3DycSrjgCYww4lJAKepUSf5xECf8vQNK+sCZjEIS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:b7:92:2e:49:37:fd:f7:fc:42:01:83:15:9a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: Oct 20 04:02:48 2025 GMT
Not After : Oct 21 04:02:48 2025 GMT
Subject: CN=7aecd59431f7b46fccc20c03e1d56f12c9ddac29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:9f:83:3c:9f:b4:3f:d0:70:ac:ce:87:e4:
fa:f8:2b:df:8c:e9:eb:1e:dd:5a:3d:a9:08:c0:c1:
84:03:05:95:2a:d9:fa:9d:52:09:c5:09:8c:57:69:
63:b2:55:60:a7:2e:35:a1:62:02:68:3d:34:05:65:
1d:34:80:9d:8f:49:82:79:33:15:ee:c3:26:e6:ef:
1f:6a:61:0e:8d:de:18:c9:45:f3:e9:b3:c1:3e:ec:
44:28:77:ec:42:f1:fc:89:80:88:26:a9:c5:d8:8a:
09:99:1e:4a:a6:19:e0:3f:04:88:9e:92:a8:64:50:
e2:0e:d8:1f:d4:01:f4:d1:b5:cc:bc:b7:24:41:c9:
c3:7e:86:93:25:ec:50:09:a5:6a:dd:37:23:e8:6c:
e9:e8:23:37:02:0b:48:2e:8e:89:db:91:1f:d5:c6:
c1:2e:8d:5a:9a:14:c8:00:2f:12:47:ef:6f:5a:bb:
a8:84:81:cc:6f:fa:9e:55:0b:1e:1d:a8:86:41:e6:
94:b9:5d:4e:3e:bf:df:a5:de:b5:eb:8f:60:20:6e:
64:ad:cd:b4:32:af:52:34:46:9f:b9:f9:bf:92:92:
53:d7:90:f7:1c:be:53:82:51:a2:6a:2d:75:9a:11:
44:b1:ab:e4:db:57:ca:6c:49:86:a3:85:a6:96:0b:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EC:D5:94:31:F7:B4:6F:CC:C2:0C:03:E1:D5:6F:12:C9:DD:AC:29
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d4:00:b3:a0:49:e3:a4:04:aa:20:aa:93:f0:0a:8a:d4:98:
95:e4:9b:7b:99:d7:82:55:96:30:b6:78:09:67:95:c9:d4:99:
63:c6:55:a2:4f:13:e2:72:87:02:ca:ca:47:ab:bc:89:b8:bc:
d4:81:d6:dd:91:71:20:cc:83:38:08:a0:47:49:09:85:39:93:
e3:e7:22:fc:47:37:d8:d0:85:82:a6:f0:e4:a0:79:df:cf:fe:
97:21:8f:f7:b9:b4:53:19:16:a1:26:45:15:92:36:8b:71:a4:
98:25:db:ef:c4:b2:81:8b:60:52:8d:e7:2b:68:49:41:7c:ba:
38:41:20:bf:10:1a:a1:3d:f5:ca:d2:2b:af:2c:ab:91:9b:32:
d9:1a:9b:fe:2d:85:31:2c:89:d2:a3:6b:f1:e6:66:f2:8e:b1:
4a:a2:3f:df:5f:06:12:33:09:e8:29:b5:04:ed:17:8c:8b:e0:
b6:0b:97:90:38:73:87:93:c9:b2:00:fb:8f:b7:be:c8:0d:7f:
78:2a:31:47:ec:fc:a0:f4:43:eb:24:f5:d7:26:45:0b:2a:d9:
b5:68:9f:64:a3:65:44:d8:36:5d:b3:8d:42:b0:ab:55:bb:41:
c0:43:17:30:a8:0e:64:9e:30:ad:67:41:5f:94:9b:eb:3d:d8:
5b:16:dc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:08:57 2025 by rpki-client