Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
File: 07SieHIiWX8W0e5MQ1voaQ8QM9k.mft (raw, json)
Hash identifier: 3H7XN05OOvHNiaIj4JdWrzmVKKczdKcI2ecmQ1xaCvU=
Subject key identifier: E2:CC:FD:D5:26:BB:9B:F1:0C:DB:A3:55:06:3F:06:7D:3C:0F:0A:ED
Authority key identifier: D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
Certificate issuer: /CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Certificate serial: 019A503DD6D4BEE89122D953D7EB6C9DEE1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
Manifest number: 06B8
Signing time: Tue 04 Nov 2025 19:00:21 +0000
Manifest this update: Tue 04 Nov 2025 19:00:21 +0000
Manifest next update: Wed 05 Nov 2025 19:00:21 +0000
Files and hashes: 1: 07SieHIiWX8W0e5MQ1voaQ8QM9k.crl (hash: D8VQLi8u147rjYdIibTfW+24c3/bnlIYLXNxCQw5Ku4=)
2: _CsObP4Ze3uU9K2w6CdOR8S59eQ.roa (hash: 1vz8OL2ZT6+f1AOzld1JihOzraesTCmal5gPezTDoY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:d6:d4:be:e8:91:22:d9:53:d7:eb:6c:9d:ee:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Validity
Not Before: Nov 4 19:00:21 2025 GMT
Not After : Nov 5 19:00:21 2025 GMT
Subject: CN=e2ccfdd526bb9bf10cdba355063f067d3c0f0aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e3:89:bd:02:38:ad:bc:34:92:0f:12:a6:8f:
21:02:b2:eb:0d:e3:0c:2e:67:4e:78:df:90:e8:93:
4f:8b:16:8f:5b:ed:c4:6d:6d:5f:d1:38:91:83:a6:
33:38:9a:a0:1d:98:6d:bd:2b:d6:26:ef:72:81:85:
39:e9:0c:db:c6:a7:21:7f:22:20:9b:26:80:c8:c5:
97:f1:41:50:8d:10:3e:f8:b0:b2:15:b1:83:f0:a1:
5a:36:10:ad:0b:c5:60:28:52:84:ec:be:a5:42:a6:
52:77:6b:0d:d6:d4:d9:53:d5:3e:30:d7:2f:47:ae:
ae:88:15:5a:d4:6e:ee:88:f5:ff:54:01:3d:a5:ff:
10:ee:90:01:d0:94:ab:a4:c5:c2:75:73:e4:28:23:
6f:02:14:f3:9f:be:eb:09:39:44:d9:02:a4:1a:30:
f5:ce:b6:05:47:b7:72:08:d1:8b:3f:9b:f9:11:b6:
50:be:6d:bf:18:20:84:3b:43:54:d5:36:2a:e8:9f:
df:43:55:35:05:0d:07:09:38:b1:d6:d4:9a:da:f6:
7f:29:e0:84:20:14:8d:c5:50:aa:35:ca:b2:cf:3c:
2e:73:96:22:a1:ac:a6:04:e1:76:08:bd:a0:50:47:
1c:e4:3c:4a:08:ee:3b:f0:2d:91:dc:94:0d:8e:73:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CC:FD:D5:26:BB:9B:F1:0C:DB:A3:55:06:3F:06:7D:3C:0F:0A:ED
X509v3 Authority Key Identifier:
keyid:D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:df:53:bf:0c:7d:5d:9c:1f:14:94:dd:c9:f6:ae:6a:0d:68:
19:ed:60:de:36:46:6f:c9:3f:c4:27:49:92:61:c8:3e:cc:05:
79:a3:21:f4:a6:44:e0:ea:42:22:47:ef:34:af:a2:6d:8b:ff:
1e:d8:4a:44:14:95:2f:c0:b8:9b:56:d6:dc:4e:69:ce:0a:02:
9b:1a:f4:9e:63:7a:f5:10:6e:cf:5f:b0:fa:b2:0f:af:50:9e:
6b:23:39:c2:13:3d:24:2b:9a:65:b4:e0:c3:11:2d:0d:a8:e1:
aa:25:68:fe:ed:d9:f0:89:40:7b:da:4f:12:db:b2:d5:fa:fa:
25:03:48:88:31:14:a9:ec:c3:6a:7e:db:68:d1:40:9f:3c:53:
c1:02:f5:7d:1b:04:ab:04:72:6a:d3:a8:7a:09:4b:8d:a3:d6:
55:72:3e:04:bc:42:c3:92:89:78:48:d5:bf:a4:24:a4:94:32:
6a:35:5b:7d:75:5c:34:c2:34:de:31:23:1e:6a:44:69:98:21:
27:bd:e8:80:8e:bd:11:58:12:a3:e6:f9:cc:f6:1b:e6:2d:56:
71:74:ce:37:a9:17:05:41:76:f0:5a:ad:44:ff:16:cd:27:da:
bc:7c:ed:6b:d0:d5:af:5e:ea:31:4d:db:24:47:7d:1d:7f:bc:
52:3f:0a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:00 2025 by rpki-client