Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: NfpKUf86//2OYXlXAmJYZoZOB4GcQR9ArDLXfAI4K0M=
Subject key identifier: CD:D5:00:93:2C:0D:CE:9C:6A:51:34:94:D6:B8:2D:5A:4B:2D:E6:EA
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 019A4EF4C0BB055918A9E9C216F53BFD40DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 15C3
Signing time: Tue 04 Nov 2025 13:00:54 +0000
Manifest this update: Tue 04 Nov 2025 13:00:54 +0000
Manifest next update: Wed 05 Nov 2025 13:00:54 +0000
Files and hashes: 1: 0gLTYHFKjg375hsnlvJFz59V6iA.roa (hash: llgY0FMidtstSH+ZglQ3pmXrL20fdwyExaunpMoHzJU=)
2: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: LWsI4bkefaw44HZKU3NZikg5QmCIwOrCdBFCViQPs/o=)
3: hzOaBQqeJ1MZ-KZ4P7SZyCz4SP8.roa (hash: DRgkBXK2IQa5GIAmZXZtCYy6nVN5G7CPCGzy+FvJU0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c0:bb:05:59:18:a9:e9:c2:16:f5:3b:fd:40:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: Nov 4 13:00:54 2025 GMT
Not After : Nov 5 13:00:54 2025 GMT
Subject: CN=cdd500932c0dce9c6a513494d6b82d5a4b2de6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ed:30:ba:0d:73:b9:8d:2d:93:c4:85:d9:05:
aa:47:b3:b5:26:3c:a5:04:04:e2:62:00:bf:81:d2:
26:b1:1c:5f:41:48:48:03:0d:b2:0c:18:23:27:a8:
c0:27:2f:84:cf:a9:94:d5:d9:54:38:d7:50:99:e7:
59:a1:d7:1b:ba:da:e1:49:ed:a9:15:70:1e:d3:08:
17:34:2a:0e:9c:33:4d:07:2a:43:da:c2:58:83:a1:
59:b7:a5:f6:30:2c:dd:72:fa:99:cd:35:f6:ae:cb:
3e:e4:f2:1f:7e:92:d0:39:d5:8a:26:77:8e:ff:de:
10:35:4b:74:45:82:03:a1:1d:56:32:fe:7f:29:4c:
e4:e2:64:af:60:09:f9:68:97:28:42:3d:70:43:04:
f1:df:95:b1:e0:47:f9:59:4d:f9:87:43:1e:80:c7:
49:41:e4:97:0f:44:95:36:ad:6e:b9:86:38:59:73:
50:bb:77:e3:ec:87:47:d5:39:03:79:89:22:27:81:
5b:b7:40:cd:9d:05:5f:0f:56:78:08:12:ec:4e:0a:
14:c2:37:12:d3:fe:37:ca:86:fe:4b:8d:ac:22:86:
b5:e9:ab:e5:2c:00:d6:18:ef:46:7c:de:1c:3a:bb:
49:d8:1a:3f:d0:4a:e5:ea:f9:96:ac:76:7f:67:b1:
18:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:D5:00:93:2C:0D:CE:9C:6A:51:34:94:D6:B8:2D:5A:4B:2D:E6:EA
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6c:94:5c:25:95:5f:f6:4c:82:61:f9:f9:74:c4:10:11:53:
ce:25:e0:63:e0:a6:fb:56:b5:c6:35:64:ef:e2:f1:e9:25:0d:
b2:ac:f7:10:a3:64:47:3a:95:ed:b3:d9:41:5a:0d:ba:88:af:
7a:19:b4:12:a1:f1:ef:23:ba:d3:08:58:be:8b:fc:d9:8b:27:
94:bd:bb:4f:76:fd:f7:11:58:6e:26:4a:ba:e5:f5:31:4e:b8:
e5:d1:97:94:cb:16:cb:94:48:0b:b8:99:9d:ec:00:a0:ff:1f:
51:eb:34:7c:b2:da:ba:4d:3f:fe:0a:b5:ec:c5:eb:31:c0:59:
07:1b:31:39:87:37:58:d8:0e:3c:6e:c1:6c:74:b2:4b:f8:81:
87:21:04:86:33:f1:d9:b4:aa:c9:8f:51:40:b4:cd:be:1d:83:
70:a8:a0:98:af:5d:e7:1a:78:46:2f:6f:a0:62:ea:84:ee:9c:
06:13:ab:84:41:87:6f:76:62:5e:2b:ec:56:93:00:b2:c7:79:
47:9b:e1:0d:d5:ae:19:90:9c:c9:06:39:1a:cc:d3:ef:82:83:
a4:59:82:8c:71:af:43:2d:0c:e3:e9:e6:ad:41:5a:bb:7d:99:
37:9c:c2:5c:21:85:78:ae:2d:3e:b2:37:53:5e:a1:56:31:5d:
9a:73:28:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:59 2025 by rpki-client