Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
File: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft (raw, json)
Hash identifier: Lm6qHE7w+eh2hjT0FghHL5avI9V3hjedwIanV8YKE4s=
Subject key identifier: AF:64:B4:63:92:4F:5E:8B:B1:DE:CF:61:B1:6F:C9:3D:E8:8A:CA:0A
Authority key identifier: EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
Certificate issuer: /CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
Certificate serial: 019A4EF503FEC6BB670F7CDE596517EF8D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 13:01:11 +0000
Manifest this update: Tue 04 Nov 2025 13:01:11 +0000
Manifest next update: Wed 05 Nov 2025 13:01:11 +0000
Files and hashes: 1: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl (hash: xZAcVSaeFWdGfgBks3OxQFf8xNvZYYJTOKAIzGzv77g=)
2: DPoR4kUwvFP364mIcuQBwqN8-tI.roa (hash: J6AqobDr9MA8WdK/mv+gGWZFgHJa5YpnU/YQyBKG/no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:03:fe:c6:bb:67:0f:7c:de:59:65:17:ef:8d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
Validity
Not Before: Nov 4 13:01:11 2025 GMT
Not After : Nov 5 13:01:11 2025 GMT
Subject: CN=af64b463924f5e8bb1decf61b16fc93de88aca0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0a:c5:05:f7:ec:07:1a:82:54:44:b3:4e:05:
42:45:28:27:7d:29:41:20:b4:c4:d4:f3:ea:d4:f6:
46:4e:89:7d:3e:b3:64:7c:f8:af:c2:69:37:a3:3d:
04:7c:7a:64:a3:14:20:93:1a:86:29:ed:d9:75:50:
5b:86:49:e0:f7:38:ae:24:15:d3:e9:e1:14:0c:90:
87:02:fe:a1:3e:58:44:a6:bb:5c:37:6e:87:0e:41:
24:a2:bd:7d:60:1b:1c:45:9b:9f:b9:dd:1e:6e:d4:
04:ff:f1:8a:37:db:23:67:85:8b:65:ed:76:1d:3e:
0e:67:6f:91:de:d9:9c:37:a5:7d:59:a4:c8:66:2f:
33:9f:9e:b6:27:fc:6f:e0:bc:68:aa:af:26:59:af:
87:fc:af:e3:d4:91:ed:e5:2b:c0:d8:57:21:a9:9b:
2d:c9:2e:91:f8:c2:60:a5:7d:4d:94:33:62:06:40:
a3:5f:57:26:22:63:cc:a3:e9:43:9a:5a:22:4e:37:
24:d9:43:27:51:fe:1d:fd:6f:c8:b1:eb:a7:b4:35:
57:93:b2:fa:5f:cc:e1:39:e2:50:4a:20:3c:60:54:
55:27:94:79:a0:c2:59:f5:44:cf:27:a2:27:a3:ee:
60:66:ea:6f:41:c0:63:96:7f:a7:34:84:86:f4:c6:
2b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:64:B4:63:92:4F:5E:8B:B1:DE:CF:61:B1:6F:C9:3D:E8:8A:CA:0A
X509v3 Authority Key Identifier:
keyid:EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9d:bb:ce:01:51:a6:54:88:8b:4f:e7:17:60:47:8d:20:0f:
52:9c:7f:d9:45:ab:31:99:a0:e6:13:d2:ae:da:e2:c9:fb:1d:
3f:0a:c0:a7:7d:1f:d7:1e:09:40:36:89:e4:1c:6c:8d:79:39:
c0:7d:06:75:9b:8d:ac:96:f2:9e:7c:c2:7b:c6:73:87:c9:98:
80:1c:fd:19:a2:5a:41:bd:0b:91:67:2e:6a:31:f9:5f:21:de:
82:d3:80:14:05:62:7b:4d:d9:46:44:44:06:c1:18:e6:81:c3:
23:8f:b9:25:3b:0e:a3:4d:9d:a8:d2:05:b3:d2:8b:25:42:ad:
89:98:f2:d9:0f:92:b1:4d:ed:cb:7d:ac:e0:bb:fb:0a:b4:02:
1e:b1:eb:08:02:f2:ec:13:dc:6a:bb:07:8e:18:e5:0d:e5:b8:
6a:bd:86:34:3d:22:65:7a:42:56:e2:27:c8:62:c5:0e:18:ae:
7f:d1:50:22:1c:b9:76:70:2f:86:40:b9:a0:6e:3e:92:f3:61:
1d:db:04:98:16:66:60:c6:e2:6a:a0:f1:63:d4:e9:60:1c:00:
53:f4:df:72:32:86:ff:4a:f2:08:90:47:c2:e7:1c:8e:27:4a:
e2:e5:bf:51:3d:3c:90:86:02:dc:64:1d:f2:98:f9:c5:49:46:
c1:35:67:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:06:20 2025 by rpki-client