Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
File: t7GVtlEuyHh9maGy5OvYCIT5gLI.mft (raw, json)
Hash identifier: N8Qg7daPn4lFkIqSXneGvA8MRv5QKWQNZUKvnmUkVFE=
Subject key identifier: 00:C4:CC:D3:3C:5F:76:0C:AD:FA:4C:D1:7D:15:8D:B3:47:CE:47:E8
Authority key identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
Certificate issuer: /CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Certificate serial: 019A4FD05211FA91A2DC4B663B420942980D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
Manifest number: 02E8
Signing time: Tue 04 Nov 2025 17:00:43 +0000
Manifest this update: Tue 04 Nov 2025 17:00:43 +0000
Manifest next update: Wed 05 Nov 2025 17:00:43 +0000
Files and hashes: 1: 5w_9JQX98jnIEcg67nkgGTJIRO0.roa (hash: UWly5Q/cVxLTnL0NxMmtD+E+9W1QFCDtSfYzLoDl3EA=)
2: t7GVtlEuyHh9maGy5OvYCIT5gLI.crl (hash: Nk6UjXxX5i2SiaQhL9Ti6sN5HT7KuB/SKDJslDqxgn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:52:11:fa:91:a2:dc:4b:66:3b:42:09:42:98:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Validity
Not Before: Nov 4 17:00:43 2025 GMT
Not After : Nov 5 17:00:43 2025 GMT
Subject: CN=00c4ccd33c5f760cadfa4cd17d158db347ce47e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:19:d7:a6:49:14:99:53:65:c0:cd:6f:ca:
68:19:10:11:ea:0a:97:ef:52:cc:5f:82:e1:59:f0:
3a:d4:41:ba:b4:25:06:f3:a4:2d:c2:66:95:11:13:
4b:28:70:74:9b:42:5f:cc:b1:85:83:7f:07:13:9d:
ce:2a:16:a7:89:06:f9:4c:19:ed:5f:4f:67:7a:68:
07:f7:ed:7c:94:36:c4:05:00:02:25:be:21:45:3e:
cd:83:b1:24:99:d6:41:71:97:aa:93:0b:77:3d:bd:
3c:1b:6f:2d:57:c3:81:33:6e:ce:ff:6d:49:51:f0:
3c:d4:d9:43:ab:c3:1d:94:a4:29:11:0a:34:8f:04:
16:ec:3f:fa:bc:d0:8d:51:2c:f0:e8:b5:d7:9c:7d:
a5:cd:ce:74:a6:b6:13:2b:ef:bb:3d:20:60:b9:22:
12:86:36:d3:59:2e:cb:dc:ff:52:47:a5:75:29:2f:
e4:31:18:6d:27:8b:1c:9a:31:b9:cb:b8:9c:a9:11:
80:86:15:f5:9b:9f:7d:92:5c:b3:0a:3e:20:23:a9:
42:73:fd:1f:e4:e4:56:5c:9f:e0:30:16:19:0c:c5:
04:17:f6:23:26:5f:88:b3:eb:41:d0:46:c3:ac:cf:
11:c6:dc:01:9d:2a:ec:bd:11:01:89:77:3d:e4:57:
17:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C4:CC:D3:3C:5F:76:0C:AD:FA:4C:D1:7D:15:8D:B3:47:CE:47:E8
X509v3 Authority Key Identifier:
keyid:B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:36:65:23:55:b0:62:fe:7b:68:dd:e9:bc:48:4a:96:5c:6a:
7e:03:c2:f1:c3:7e:34:1a:79:09:f9:78:67:f1:07:29:fd:7b:
52:57:55:a5:e3:e2:b6:18:90:d8:ab:64:61:1e:97:2b:33:76:
f8:ea:6c:c9:ee:55:54:d4:40:1f:ab:ad:47:2a:d0:dc:c1:c7:
b9:13:76:14:2c:fe:a1:13:20:56:33:a0:c7:ad:96:bd:2c:1d:
10:a1:b9:d5:93:ae:6f:af:4a:81:91:bb:8b:16:51:56:8b:73:
e5:8a:21:00:a8:af:35:1d:33:02:61:87:4e:93:db:13:e6:6e:
47:48:6f:b7:e4:87:02:a7:69:f9:95:b7:25:38:40:dc:1e:be:
18:49:90:bb:f9:ab:cc:59:de:12:6d:67:c6:5b:50:7a:cb:78:
7e:1b:6a:06:17:47:e1:6e:e5:ea:94:05:ae:17:a2:5c:b4:6f:
79:b8:f3:38:2e:84:5b:69:a4:bb:69:58:ac:34:e8:4e:8d:0d:
7f:e7:59:d4:e1:2c:02:c9:8b:33:d0:ac:dd:6e:25:53:cd:de:
16:e2:b9:0c:f4:62:2f:f1:b7:e5:25:f0:c0:16:8e:d3:11:f9:
c7:63:44:01:04:fe:98:01:02:30:61:57:fe:e6:b3:47:f8:79:
41:04:cd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:31 2025 by rpki-client