Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
File: 7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json)
Hash identifier: rN3bO2HDxHzflUnWoN4ltt9rOiM3degwtIgDD9W1wCc=
Subject key identifier: C4:4E:58:2C:E4:62:F1:22:6A:B5:C1:DB:26:06:3F:52:FD:02:A7:07
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 019A4EF58C607B020795921BA51E21BE6D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
Manifest number: 083C
Signing time: Tue 04 Nov 2025 13:01:46 +0000
Manifest this update: Tue 04 Nov 2025 13:01:46 +0000
Manifest next update: Wed 05 Nov 2025 13:01:46 +0000
Files and hashes: 1: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: xPdSQ5RlsLaiiiiVDFUKDPcOEhCxDrOyqE3RrhjLkug=)
2: NS3PLsvPHZ5BNMXscaI6lUiQ-_0.roa (hash: ifHPopmI8C/fWhHZ7kUlh0L0Qv3UiOcYMZNGauolx84=)
3: SbkVZx35DZkFyVg9B2PgqJ5H5dY.roa (hash: hRekjjnAg6h7a7cb6mrdtQIFkMy6cN1akvAzAJVtwDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:8c:60:7b:02:07:95:92:1b:a5:1e:21:be:6d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Nov 4 13:01:46 2025 GMT
Not After : Nov 5 13:01:46 2025 GMT
Subject: CN=c44e582ce462f1226ab5c1db26063f52fd02a707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f4:aa:55:bd:6f:32:b3:2e:61:d4:e3:bb:6a:
8e:32:b8:f3:b1:79:ff:31:ab:a9:90:46:11:54:35:
d6:d6:46:73:72:d3:f3:0f:e6:d2:4b:f6:62:72:72:
89:41:ee:c2:3e:42:a8:98:39:1b:7a:89:45:1b:e4:
e2:5f:14:ec:fa:9d:95:e6:bd:3f:35:f4:ef:41:26:
9c:d6:32:9e:1d:fa:59:65:a0:6c:32:45:83:c3:c7:
b3:5c:31:1b:f5:98:3c:60:26:31:fe:bf:0b:6d:86:
a1:d9:01:df:66:3c:96:91:cf:66:36:02:da:cd:cd:
63:e0:d1:4a:2b:07:e2:37:3a:10:c7:81:20:e3:87:
79:a6:ba:a8:88:7a:e3:73:d7:6f:bf:57:38:33:ba:
16:6e:72:51:7a:52:19:a7:77:09:00:4f:cc:77:8d:
62:0f:60:0e:c4:a0:c1:6b:81:97:45:96:a5:2d:c3:
49:37:6b:cf:b9:64:80:ad:5c:af:13:fb:19:b1:0d:
9e:23:98:93:9a:2e:66:a8:2e:b9:20:ba:8a:a2:ba:
59:a9:3e:99:ad:0b:6b:c6:2c:b0:5a:89:c4:72:81:
28:d3:29:00:63:2d:b3:fd:ce:f9:80:26:2d:99:28:
a1:b3:ba:f2:30:30:76:94:8e:e0:77:bb:39:38:f9:
56:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4E:58:2C:E4:62:F1:22:6A:B5:C1:DB:26:06:3F:52:FD:02:A7:07
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:fb:54:b4:3e:7d:ab:9f:bf:11:8c:f8:3f:e6:e3:65:2e:bf:
2e:e2:dc:6d:f0:93:c7:a9:07:3f:66:86:be:07:8f:ad:83:f2:
87:4d:57:c0:c6:66:5b:9e:2e:10:d9:ed:ff:4a:6c:26:28:f7:
a4:ef:a2:14:fc:98:db:74:ea:6d:92:27:77:34:ae:25:36:ed:
68:f3:3d:8b:8b:d0:7b:92:38:57:60:0c:3b:98:4d:ef:22:a1:
d5:a7:9a:12:76:4b:d9:49:36:6e:59:0f:80:78:03:4c:7f:80:
1a:0a:56:ff:57:d7:0d:f0:3a:2d:16:0f:4e:d5:3c:21:15:09:
1a:ef:c0:ac:2b:2b:77:14:a2:a6:4a:4b:af:55:a4:4e:cc:ee:
0b:b2:ee:64:ca:7e:b8:6f:33:5b:f8:b4:99:3b:55:fd:32:4d:
c8:cc:93:08:6a:fa:fb:fe:64:22:4b:c6:95:36:bb:f2:86:37:
19:81:7f:e5:0d:b9:b5:23:47:f3:e2:ff:4c:84:6c:83:63:41:
0c:66:61:68:61:47:59:b4:b0:01:db:ec:a1:4b:7d:63:7a:64:
7b:ea:71:4b:5c:f7:ca:0c:6f:32:96:e5:07:ba:87:12:34:67:
18:43:72:39:2d:51:e6:04:34:54:82:d9:15:1e:4d:03:62:71:
ad:7c:4f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:43 2025 by rpki-client