Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
File: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft (raw, json)
Hash identifier: XTCQCVqPtaDmQEwuUpN13o4guo/VDvoRadPujRfZTrE=
Subject key identifier: 5F:82:7E:7A:CD:43:21:3E:E0:97:86:66:0A:45:63:3D:A7:2D:4F:46
Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
Certificate issuer: /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Certificate serial: 019A0411825F5FEE6A8A3EB9DF08CFF2A63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
Manifest number: 0960
Signing time: Tue 21 Oct 2025 00:00:47 +0000
Manifest this update: Tue 21 Oct 2025 00:00:47 +0000
Manifest next update: Wed 22 Oct 2025 00:00:47 +0000
Files and hashes: 1: 6nsqKOpq5i7jyqObkwahl2KnBOE.roa (hash: nmfKFa4ZtcKyaT+5uc3ZueRsJc4oH7PPPfEcOlbfYZ4=)
2: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl (hash: Kf04fQJgYQ/ty4s/ohbjG/gtDuevjqL+TY2iMTopzpc=)
3: Yj9PA6aeUtKYWCCoUG8L0f7j_qw.roa (hash: 0+mZF7z1M4OKvtgh5d9B1G6Igb7jbzUV0Z2SYrMCHRs=)
4: kk1C5U0B-HdKeXhcCeQ-8nE85UA.roa (hash: 7VOTUurZCEd1fY/Owp1HWKN7p5rc+6dbyjJFc9pRgek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:82:5f:5f:ee:6a:8a:3e:b9:df:08:cf:f2:a6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Validity
Not Before: Oct 21 00:00:47 2025 GMT
Not After : Oct 22 00:00:47 2025 GMT
Subject: CN=5f827e7acd43213ee09786660a45633da72d4f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6d:64:d7:1d:8f:a4:2f:61:54:be:32:af:3a:
82:ed:8d:c2:fd:a8:81:83:e4:1c:00:39:ee:57:e1:
a3:1f:c2:6f:43:28:c7:bb:76:e7:8d:25:89:97:28:
15:f8:89:30:77:e0:52:73:0c:40:b3:76:f2:80:6d:
6c:c5:4d:66:50:4f:a6:6a:63:47:f1:3d:9e:e9:7d:
ba:0c:50:37:ac:07:34:73:c4:df:e0:0d:b0:d8:f7:
32:e2:77:c8:f9:d8:fe:db:d1:0b:96:2a:10:e1:16:
6f:41:18:57:d2:b3:75:30:72:ab:a5:db:5a:81:2d:
2c:ae:a6:75:f8:f3:81:3b:de:61:a0:0e:c7:39:87:
0a:7e:a6:0b:a6:d0:19:08:6d:2e:90:d8:9f:56:d6:
f0:9d:5c:aa:85:df:2b:fa:1c:52:1d:44:72:96:75:
c4:52:da:d7:b2:11:90:4f:c8:fc:dd:d8:13:4c:5f:
e4:34:86:34:ed:fe:03:96:56:83:28:b8:fa:5b:9b:
04:82:23:e9:61:0a:dc:f1:75:36:ac:c9:93:5a:bd:
96:3c:00:a2:51:d0:bd:37:c4:da:ab:55:14:e9:43:
13:00:03:d6:ce:30:8d:93:3e:3f:05:e1:10:0c:31:
14:83:73:f4:d5:ad:ac:a3:07:8b:a1:3d:93:13:2f:
f1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:82:7E:7A:CD:43:21:3E:E0:97:86:66:0A:45:63:3D:A7:2D:4F:46
X509v3 Authority Key Identifier:
keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:9b:8e:07:17:08:22:cf:2a:7a:60:c2:47:11:7c:18:67:f8:
c5:43:bb:94:a7:05:eb:fc:e8:33:62:a8:13:2d:fb:1f:34:88:
ba:c0:06:ff:b5:63:9c:91:18:8e:7d:8a:55:93:22:51:8b:ee:
ad:60:5b:0b:dd:1e:24:46:51:17:96:e1:e0:0e:57:7d:a4:70:
98:91:f9:db:1a:53:8b:11:98:fc:e3:0a:66:b5:73:b8:8a:8a:
31:ac:10:f6:08:89:e5:40:7d:3c:72:2b:73:51:2e:3c:a7:b2:
3d:76:d0:6b:58:3d:d7:2a:18:c7:51:be:a6:4a:80:2c:7c:03:
cd:8b:c1:f0:54:5b:ae:a5:2e:c1:49:24:14:59:5b:71:9b:78:
94:24:1b:4d:14:9d:fc:d0:6b:d2:c8:2a:75:51:ba:84:a6:c4:
b0:7c:3b:7a:9e:3a:89:a5:36:8e:c9:5b:02:18:e9:8e:48:69:
0c:5b:22:fd:29:40:07:33:0a:b8:c3:25:8c:41:1c:79:e0:62:
d3:f8:51:ce:04:7f:52:2b:09:20:3c:d6:d6:ad:83:7e:35:72:
20:b3:be:7f:fb:fc:19:60:aa:30:30:04:bc:f7:bd:23:0d:a5:
5b:30:4e:d7:cb:e5:aa:70:f8:92:03:80:f5:54:e8:c1:b4:32:
18:9b:85:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:07:51 2025 by rpki-client