Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
File: 7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft (raw, json)
Hash identifier: vv4J53Lg3kZnu3i/4B1bP2vPjDyZvdkCJXpudgUebzg=
Subject key identifier: 5A:3B:44:77:DE:A0:09:1E:AA:5B:D5:32:CE:15:A9:4E:CC:92:89:A4
Authority key identifier: EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35
Certificate issuer: /CN=ee9f79ab1d59847ff1f2e961218c159af264d835
Certificate serial: 019A50E3DB8B282D3B33D06323D732943C67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
Manifest number: 102C
Signing time: Tue 04 Nov 2025 22:01:41 +0000
Manifest this update: Tue 04 Nov 2025 22:01:41 +0000
Manifest next update: Wed 05 Nov 2025 22:01:41 +0000
Files and hashes: 1: 1-FL3J5HDX1AzUYYBni119Abw4So.roa (hash: Pv3mjZGTlo0qp9Lt3NOhk+KT7N8R0d7IbCiwPWeiu1s=)
2: 7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl (hash: CZyk0/4US3d7+NpMrUwRyAWWRb1llJPrTAxonlFnOHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:db:8b:28:2d:3b:33:d0:63:23:d7:32:94:3c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9f79ab1d59847ff1f2e961218c159af264d835
Validity
Not Before: Nov 4 22:01:41 2025 GMT
Not After : Nov 5 22:01:41 2025 GMT
Subject: CN=5a3b4477dea0091eaa5bd532ce15a94ecc9289a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:72:c9:db:fd:e8:ab:d3:13:d2:52:b6:41:
90:3e:c0:79:3b:07:9f:0b:ab:28:ea:06:4d:27:f9:
50:a5:a9:6d:3d:8d:ca:f3:3f:11:48:ef:1a:9b:1a:
11:99:2c:8b:fc:1e:ec:f3:ba:8b:8c:1e:2e:75:cc:
37:a0:a8:94:8f:16:ac:ad:19:c9:97:70:f7:c1:07:
99:e7:1b:4a:33:93:94:ec:ce:c4:57:40:fd:7f:52:
3c:fe:10:89:e3:14:d2:17:17:9a:d9:8d:dc:ee:74:
4f:a7:45:91:6a:33:67:89:bd:4e:d5:77:4b:61:6e:
03:5b:fe:39:fc:d1:0a:e4:2a:b1:a8:80:ae:8d:d5:
a9:ad:83:82:4e:78:95:90:51:c2:d5:4a:94:81:9f:
4e:93:49:a1:64:38:45:ae:1b:8f:7a:1e:7b:97:3b:
74:ba:0b:4f:48:ef:6c:b6:04:57:3d:3f:e6:d1:e8:
53:55:20:19:d5:17:7f:48:5d:ef:b9:57:b0:cf:80:
35:5c:35:f9:3f:6e:be:71:35:72:58:56:f6:e4:97:
42:33:44:2c:77:ed:dd:7a:a6:7e:03:85:b3:10:3f:
6f:d0:8e:b8:45:39:59:c1:4e:54:59:df:8a:2b:60:
da:46:fb:ad:7d:f2:25:54:1c:2a:11:27:08:a8:3c:
60:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3B:44:77:DE:A0:09:1E:AA:5B:D5:32:CE:15:A9:4E:CC:92:89:A4
X509v3 Authority Key Identifier:
keyid:EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4a:32:a8:b4:7b:ac:c7:e3:6c:93:9c:c1:2d:a1:29:89:0a:
2d:3d:e6:ef:46:69:4f:4b:0a:22:6e:9b:47:0a:ec:37:07:bd:
19:5f:40:e1:b6:92:63:6d:a0:28:ed:fa:54:61:d5:ce:1d:00:
d0:f3:68:7c:12:ca:39:2a:c6:22:63:42:79:6f:c8:3e:d2:2c:
68:24:d5:33:39:c8:57:1d:d0:e6:68:86:c2:4c:5d:e1:50:39:
bf:7c:68:ca:bb:bd:db:08:8a:27:3e:ca:85:ad:d9:a0:37:b8:
b3:9d:3b:b2:1a:1a:34:d0:4a:69:23:b1:e5:d5:98:89:38:a7:
66:8b:f9:5e:f6:e1:0d:a2:1e:6e:97:e0:b2:e6:44:71:53:b9:
71:09:60:00:60:ad:b7:04:10:d6:c2:18:43:fc:a0:6a:d1:ba:
0e:95:fb:51:ec:83:8c:31:5d:9f:2d:54:58:41:c2:bf:bc:f7:
20:ab:5e:4b:15:0e:ff:5d:5b:bc:78:67:f8:d4:21:92:eb:99:
bf:ec:7d:aa:b0:f4:d0:c0:39:f0:06:cc:99:1b:46:60:46:7f:
46:56:3a:2f:e9:ac:06:ae:09:c9:6d:37:cd:2a:50:19:3f:93:
df:cc:20:3a:4c:5a:91:ec:5a:f1:59:ff:61:31:e3:dd:1c:e9:
24:aa:03:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:47:56 2025 by rpki-client