Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
File: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft (raw, json)
Hash identifier: f0gNiV5faoJc+TmHdI3ssoBeDTk/yzSZ0vPpxdd0Ei4=
Subject key identifier: C6:1A:88:56:0C:1A:A9:69:7F:16:8B:9A:F0:80:63:30:D8:C8:75:45
Authority key identifier: EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
Certificate issuer: /CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Certificate serial: 019A4E18BCBC7C41B6F45EC02A2674019E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
Manifest number: 0B70
Signing time: Tue 04 Nov 2025 09:00:35 +0000
Manifest this update: Tue 04 Nov 2025 09:00:35 +0000
Manifest next update: Wed 05 Nov 2025 09:00:35 +0000
Files and hashes: 1: 7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl (hash: dTZJXsEEYgsI51B5fMcq8DtUFJQH1ikhcJ8HIQDoX1w=)
2: UVCnnFZZjUR9w6yDQp9NPqjljfo.roa (hash: f6rKRc94PJnhp1qRU3+PGFxmR5pPPhe+G7K5mMW7jGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:bc:bc:7c:41:b6:f4:5e:c0:2a:26:74:01:9e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eceba2e659794b12215df1fa8abe3fcbd6686df7
Validity
Not Before: Nov 4 09:00:35 2025 GMT
Not After : Nov 5 09:00:35 2025 GMT
Subject: CN=c61a88560c1aa9697f168b9af0806330d8c87545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:40:4f:42:63:fa:19:c8:32:1b:dd:03:0d:
0b:8a:95:d6:41:20:99:46:df:f2:fa:38:ae:b9:27:
de:a1:0b:ba:af:df:fd:8c:8e:f4:69:81:8b:90:f2:
0a:3b:6c:01:9e:ca:bd:f7:26:2c:a3:ce:50:7e:e8:
9b:b6:75:e9:ee:5a:6b:a7:c0:20:c1:37:71:b3:b9:
be:a5:7c:b8:f7:ef:da:81:3f:8b:95:12:49:8c:6b:
b7:d2:ab:cb:17:33:53:d6:17:46:0d:31:76:44:20:
66:f5:8a:a7:19:fc:6b:8d:bf:5d:26:21:a8:21:d0:
32:46:f5:65:38:e8:09:98:6c:5b:59:7b:16:33:ed:
4a:e5:7c:e8:17:b6:ea:3a:5b:27:19:79:35:58:1d:
f2:bb:43:74:b8:53:56:9d:fd:e1:33:55:04:99:31:
b2:f2:2f:0b:be:0e:c3:0d:0f:e2:85:0c:45:8a:6a:
4e:65:ac:25:0d:ca:a1:40:71:78:ba:8a:0a:59:16:
b0:ab:1c:46:52:c1:e0:79:40:ee:61:e8:80:a4:24:
b6:91:21:d3:86:9d:72:f0:f9:3b:ea:66:9e:7b:80:
45:69:50:ef:7f:21:c9:e8:fb:93:2d:df:0b:dc:5a:
0a:89:b5:95:01:64:c7:b3:de:e6:d1:af:21:ba:fc:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1A:88:56:0C:1A:A9:69:7F:16:8B:9A:F0:80:63:30:D8:C8:75:45
X509v3 Authority Key Identifier:
keyid:EC:EB:A2:E6:59:79:4B:12:21:5D:F1:FA:8A:BE:3F:CB:D6:68:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Oui5ll5SxIhXfH6ir4_y9Zobfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/b31fec-50c0-47c7-983d-ebe2dc401616/1/7Oui5ll5SxIhXfH6ir4_y9Zobfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:21:60:4f:01:a4:57:86:e8:72:ed:d6:4c:4f:a9:b5:9d:fd:
1f:d0:2f:9a:c6:a3:4a:3d:b9:93:84:70:13:e7:b2:8e:c6:7f:
78:26:25:ad:de:ab:f9:ac:9c:ad:e7:e0:22:92:d8:9d:29:e0:
51:78:2f:7b:e9:97:bf:dc:2d:d1:f9:46:c8:de:c2:72:98:99:
e0:a9:ab:92:87:42:3d:0d:ee:6c:19:8c:07:e2:d8:a8:4c:ab:
a2:52:44:67:64:db:07:21:7f:e2:a1:12:bb:68:bf:79:bc:80:
a4:64:2d:6a:9d:fb:2d:1b:d3:b2:84:5f:49:9c:8d:89:9f:c5:
9f:93:29:5e:bd:de:b4:58:94:bd:a6:d4:6f:43:16:5d:f1:b1:
07:21:dd:8d:7c:ab:d7:42:4c:59:63:87:ae:a7:2c:56:2d:a0:
8b:d0:c0:e9:6e:fa:16:56:74:4b:2e:fb:28:5a:b0:7d:dc:54:
b7:04:1c:75:fe:20:93:b5:37:2f:3b:d2:aa:d4:67:53:fd:6d:
0d:0d:29:5b:ff:e8:84:30:aa:25:d1:43:11:91:d6:80:fc:67:
b8:95:a7:9e:de:cd:64:21:0c:69:22:0a:f9:b7:01:f8:0f:88:
c6:36:31:70:f8:72:de:d5:e7:5d:15:7d:2d:ff:61:63:3a:a0:
dc:64:b8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:22 2025 by rpki-client