Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
File: 7PfKn_r-cqMJZvfkPZK1jndM50E.mft (raw, json)
Hash identifier: S34mba+9d2hHWm6zN083rMpYEP4P7s07iqa5fDhIKpI=
Subject key identifier: FE:37:DF:67:3A:FB:1E:26:34:18:47:BF:54:F9:51:5B:78:1B:B6:55
Authority key identifier: EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
Certificate issuer: /CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Certificate serial: 019A4FD02335374A926ABB53A409F691E326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
Manifest number: 120C
Signing time: Tue 04 Nov 2025 17:00:31 +0000
Manifest this update: Tue 04 Nov 2025 17:00:31 +0000
Manifest next update: Wed 05 Nov 2025 17:00:31 +0000
Files and hashes: 1: 7PfKn_r-cqMJZvfkPZK1jndM50E.crl (hash: pTTZBc68AtsFP3Vfjs26CaBMJb1pGgdaYnDdehFqsLk=)
2: j-wumpm8bgZz2aXq3WW1uyM7CGA.roa (hash: sbRRHDlTVstpRJS8Rp0RxMYJ2O6mjuNLI+lW12IAgE4=)
3: rxB_SKD05flXCVb5a9Y1L-kYSOM.roa (hash: xxBSeAniUfhkRNjna0RuKk7EzeOrdkzGj8pWxibPVsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:23:35:37:4a:92:6a:bb:53:a4:09:f6:91:e3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Validity
Not Before: Nov 4 17:00:31 2025 GMT
Not After : Nov 5 17:00:31 2025 GMT
Subject: CN=fe37df673afb1e26341847bf54f9515b781bb655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:b1:e6:d2:f0:9f:a8:1f:b6:d7:7a:65:96:
f2:68:3a:b2:ae:9e:69:23:40:b4:3e:88:be:83:f3:
56:84:f5:38:d5:85:ce:5a:2b:16:d4:9a:52:85:64:
8b:95:64:88:fd:a8:32:7a:d0:81:55:b4:62:d3:a1:
4b:42:a1:05:01:63:cd:42:81:ff:1d:7b:c9:55:ab:
55:8d:77:8d:21:e3:92:92:dc:c3:0a:13:ac:5b:61:
61:ab:cc:ca:41:8d:82:06:05:2e:ca:4e:05:32:27:
45:b5:77:da:e9:5c:bd:93:35:6b:fe:e3:b1:d8:c4:
a0:ce:45:53:df:f6:f8:ed:fe:db:ac:94:ae:c5:f7:
bb:d1:bc:b2:52:2e:75:59:9d:ff:eb:de:c1:92:8f:
f8:0c:0a:18:11:10:91:29:fc:52:c9:2d:a7:eb:ad:
95:26:74:d1:23:2a:a1:f8:a9:d9:cb:b8:09:92:d7:
ed:97:e1:42:40:1f:ca:e3:e5:82:18:33:0b:1f:49:
95:6a:3d:0e:63:e0:16:d3:47:c6:2e:ec:08:04:d9:
f7:28:b2:2d:ee:db:2b:9f:2d:5d:6a:2a:0d:83:31:
1e:5d:c1:b3:fd:0b:6f:55:e8:90:b0:7a:e3:ae:db:
fb:b2:9c:82:8f:0b:fa:17:2d:9c:a1:b4:35:c0:5f:
41:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:37:DF:67:3A:FB:1E:26:34:18:47:BF:54:F9:51:5B:78:1B:B6:55
X509v3 Authority Key Identifier:
keyid:EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:59:1a:e0:55:50:fb:a6:9c:da:b0:a1:44:69:47:bd:23:80:
f4:3d:cd:80:4f:7d:09:90:5b:fe:93:eb:2b:0d:8d:65:20:d5:
55:2d:22:bc:34:bb:7c:77:20:31:7e:ba:b7:e2:c0:76:be:3c:
f6:1e:85:a0:3a:87:8e:84:d3:48:42:b6:14:0c:96:cc:52:22:
10:3c:3d:21:c1:9a:cb:f4:70:ed:32:fa:17:58:85:b8:fe:8d:
64:7b:b0:4c:3f:03:f0:37:4d:a8:75:66:c9:a5:a2:b0:f3:e6:
a8:c2:99:53:fd:fa:5c:75:3f:8b:52:c6:d4:4c:fa:d3:c0:f1:
f4:2f:7f:62:0f:7f:d7:1e:30:de:3e:69:e5:de:25:cd:3e:07:
3e:59:e7:ec:50:5c:4d:92:d0:a1:36:09:b4:52:c9:93:8d:d2:
e1:fc:93:74:05:ff:d4:29:f5:27:1d:b8:bf:49:c4:b7:b1:16:
21:5d:67:dc:41:99:7a:4a:37:ca:6a:2b:d6:f2:4a:2b:e5:14:
0b:3c:59:26:80:a0:c0:95:82:e7:a0:cd:09:0f:90:cf:eb:f0:
9a:33:a4:82:4a:6f:8c:58:85:d2:28:d3:bc:0a:03:c5:eb:ef:
bf:79:3a:1f:3f:08:b0:01:25:8c:d8:85:14:4f:6b:ce:46:95:
40:f9:22:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:16:42 2025 by rpki-client