Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
File: 7V6DgxLgSu-flTbiDNQSg6e4t3s.mft (raw, json)
Hash identifier: GwUYTjVjIue+zd6DHRes0m5SWccfbEJKVFOfgenOTog=
Subject key identifier: 37:75:1C:F4:65:28:28:25:E3:E8:B6:D0:05:A9:7C:C6:81:67:25:41
Authority key identifier: ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
Certificate issuer: /CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Certificate serial: 019A4E8661FEF9BE7406F917103D243EDC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 11:00:20 +0000
Manifest this update: Tue 04 Nov 2025 11:00:20 +0000
Manifest next update: Wed 05 Nov 2025 11:00:20 +0000
Files and hashes: 1: 7V6DgxLgSu-flTbiDNQSg6e4t3s.crl (hash: HMXFTHCPKGMVP0heTKfxS6i869zewLj4HBvMRK8tXus=)
2: CU_2_6zid5vFMzzdCV2Mp3wVdj8.roa (hash: SmeUvVuEhfInXhWNJ0VU7sOK6/ghCJAsk+fSAJsrYgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:61:fe:f9:be:74:06:f9:17:10:3d:24:3e:dc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Validity
Not Before: Nov 4 11:00:20 2025 GMT
Not After : Nov 5 11:00:20 2025 GMT
Subject: CN=37751cf465282825e3e8b6d005a97cc681672541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:f2:06:b8:db:7f:75:a9:01:cf:63:7a:c5:e5:
1d:b1:6f:07:26:7d:13:49:77:26:85:e4:8c:d3:8a:
8f:8c:d5:b9:d5:89:bf:24:4e:cb:22:e4:9c:70:3c:
8e:60:02:15:50:83:91:6c:2e:a6:40:52:c7:92:6b:
23:91:c2:e3:9a:dc:0d:22:9f:16:4f:d5:5a:30:22:
72:94:ec:54:12:44:71:e6:63:7b:00:e6:a9:d0:55:
4d:ec:34:5e:d4:5d:39:f3:f4:8f:58:2d:75:b8:93:
8b:a5:10:b5:3e:24:bb:f0:95:84:0a:77:34:2c:22:
57:4c:f0:3d:14:96:3b:9d:10:f6:dd:fc:20:19:f9:
5d:47:25:81:68:45:6d:17:fd:31:a1:56:56:66:4f:
d1:44:b0:57:03:fd:21:96:c6:62:4e:6f:9d:6e:ec:
89:84:f3:54:79:88:a2:2d:e0:08:e6:f8:e5:82:9f:
bf:15:98:5f:8b:22:ce:d0:a7:03:6e:ca:46:0d:fc:
2e:72:30:03:14:d5:e1:6b:2d:68:4b:dd:cc:08:69:
11:bb:5b:1b:37:09:8a:af:ef:61:50:64:89:dc:6c:
b7:91:27:90:d4:7a:cd:87:8c:5a:c9:5c:2a:e1:6a:
c3:0e:e9:e4:4e:e2:9d:83:dc:ef:6d:fd:07:1a:9c:
60:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:75:1C:F4:65:28:28:25:E3:E8:B6:D0:05:A9:7C:C6:81:67:25:41
X509v3 Authority Key Identifier:
keyid:ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ed:c8:57:1e:7f:60:a5:10:35:c0:52:bc:91:db:7d:0e:cc:
c6:f8:08:88:07:a7:bc:ee:43:29:e0:43:82:7d:34:6b:ca:4a:
3e:fd:89:d4:df:33:c7:67:3e:68:65:fe:94:ca:98:52:64:2e:
3e:4e:33:6d:1a:68:b0:12:10:cd:e5:33:74:97:ee:d9:50:2e:
53:23:3f:ac:87:97:b2:83:1f:2c:0c:31:20:00:63:92:ee:f8:
30:41:62:43:09:5a:98:cd:ab:ad:db:9a:45:e0:da:8f:64:f4:
8e:9a:4c:bf:ce:ed:e5:12:ee:dc:89:a4:83:0c:ed:82:f0:c0:
4a:01:cb:de:22:21:5d:83:9f:fe:a7:5b:93:bc:b7:63:36:f9:
74:c2:87:e1:df:d3:a7:89:ca:d0:1b:7c:dc:ae:a8:d5:c8:c7:
4e:55:49:bf:49:cc:ad:d9:20:a7:b6:10:8d:a8:43:d5:21:72:
16:7c:6f:43:3f:61:97:2d:0d:a2:86:7d:57:a0:cb:0d:82:c8:
47:06:ad:2e:bd:11:ce:75:a0:b3:95:71:80:95:d8:26:c1:fd:
6a:c9:bc:54:dd:ad:48:78:cf:0c:4a:19:1f:d9:54:10:08:45:
05:18:00:5f:6f:f3:44:47:c8:bc:f5:d3:1e:c8:1e:10:3e:4a:
51:bf:ae:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:01 2025 by rpki-client