Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: a4MD6ov5TS3IbkoFYCiK42CTISO66nRIlgwzGrtkrkQ=
Subject key identifier: 63:AD:22:C2:CF:E0:27:F9:EB:75:67:EE:92:C3:82:32:5B:AB:5A:C2
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 019A4D73849813A729D2607622B0C8597EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 05C2
Signing time: Tue 04 Nov 2025 06:00:07 +0000
Manifest this update: Tue 04 Nov 2025 06:00:07 +0000
Manifest next update: Wed 05 Nov 2025 06:00:07 +0000
Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: kMWXTYJOqeCObY44L42G7uN1tI71T7618TN4GhP2F+s=)
2: TaWWlaQdJDy__bPOa0_wHi28kgw.roa (hash: GmxVMkOCc40Mr9ux5EGho294LI1OMaDC/pTrag518As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:84:98:13:a7:29:d2:60:76:22:b0:c8:59:7e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Nov 4 06:00:07 2025 GMT
Not After : Nov 5 06:00:07 2025 GMT
Subject: CN=63ad22c2cfe027f9eb7567ee92c382325bab5ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e9:4a:26:45:28:57:bf:c0:e5:06:a9:4e:62:
c1:2b:9d:ac:01:f8:69:3e:84:6d:77:f9:43:33:62:
87:31:af:2f:4b:0e:de:8b:0f:85:e7:de:ef:aa:7b:
72:e4:4b:eb:78:c9:b5:1f:6e:b5:c2:a9:99:89:14:
6f:43:95:63:4f:de:61:57:50:f0:89:f1:02:3e:20:
19:b1:33:a7:fb:49:2b:9f:41:6c:f2:24:41:10:87:
2d:5f:14:49:ed:ee:03:54:3d:f0:45:8f:93:f3:f6:
69:7e:d1:ea:66:58:af:9d:07:20:d1:b8:da:28:52:
b2:8e:01:5c:49:6a:a6:84:78:03:d6:03:f3:1f:5d:
6e:d5:61:7b:c3:ff:63:a6:11:32:be:04:90:fb:5c:
6b:5b:43:7b:1d:0c:8a:f4:81:cc:d4:51:22:08:8b:
f9:2a:7c:48:d5:93:84:ad:c1:10:01:6a:df:2c:c8:
d8:1b:d2:dd:0a:d2:d3:ed:bf:d7:94:47:7a:1d:5e:
dd:32:57:ec:bc:1f:5e:67:85:ce:b8:a5:84:03:98:
2e:fc:ef:dc:9c:a4:86:3a:12:a2:4d:a4:98:c4:9a:
ff:3c:3d:fc:cd:31:32:af:38:00:99:80:d4:04:8c:
36:39:87:cc:55:70:9a:80:18:e4:df:a0:4d:25:a4:
27:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AD:22:C2:CF:E0:27:F9:EB:75:67:EE:92:C3:82:32:5B:AB:5A:C2
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:33:f9:f6:06:57:67:e5:51:89:49:20:be:4f:1b:30:da:c1:
0e:eb:8f:5b:12:d2:82:77:f5:ea:92:9f:d9:92:4c:57:6b:35:
05:80:b7:e2:3a:f1:08:48:e6:c5:d8:d3:e7:1a:f2:13:0a:21:
0b:55:3d:51:8b:1f:71:e7:5b:eb:ef:34:dd:f1:84:80:9f:c8:
c0:75:3b:d2:71:cb:45:80:c5:01:1b:ee:77:e9:36:61:69:b8:
36:36:d5:b3:a6:eb:e4:2a:eb:6b:80:e8:3a:1d:f3:10:41:a3:
e6:29:15:5f:d1:2c:b3:0e:47:f4:26:ec:3b:29:31:b2:a5:69:
1c:27:c1:36:03:68:51:03:3d:a1:df:02:e6:c8:f4:54:32:35:
a3:c2:a7:c0:29:27:06:f3:de:4e:88:6c:32:4d:99:9f:d6:f5:
28:1e:8c:e9:26:7c:92:7e:d2:b5:83:e8:7f:aa:98:9b:53:22:
d9:5d:c7:56:f6:c6:21:0a:e1:3f:fb:83:b2:fe:ca:06:c0:5c:
fc:cc:c6:18:79:4d:76:97:9c:18:b4:39:6b:a0:14:93:27:c6:
1c:69:72:ad:7b:14:49:bc:a0:e3:6f:88:31:0c:43:f3:ff:de:
c4:9b:aa:a3:a2:5e:b2:ae:b6:4b:15:7c:b3:bd:38:5d:2a:91:
8d:87:74:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:20 2025 by rpki-client