Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: erD3VHQe4jlsYJjDNRYu+tP4EgJQ25aY99IH03LpGxc=
Subject key identifier: C6:7F:02:C1:56:F7:AC:50:F7:21:CF:C5:C5:CD:71:C8:5C:C8:EE:CC
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 019A4F62732AB05F2E80A396F1DEB9DF28A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 1729
Signing time: Tue 04 Nov 2025 15:00:43 +0000
Manifest this update: Tue 04 Nov 2025 15:00:43 +0000
Manifest next update: Wed 05 Nov 2025 15:00:43 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: 0sJ4HxJQq5xa5Zt+lb8kKCjhrWwdpOIU1ljEdXbLTbA=)
2: EhgF2mlZkTj1FsMim3C6v7cm_Vw.roa (hash: AvgglEwZVk2/q4AkVtm47F0tRAyngMt6ySeFX4JReQo=)
3: MiQ5lO70RTIllrRi3q-oV9hjYQY.roa (hash: bCltxRSzrKGlzGDkjY4BpBmmHNltm/4kHnZFojNlryM=)
4: USr1BZseWrfiddVmQ3oagoYeVS8.roa (hash: fHK4bL/1/KZuBDBsjanJjPnUX5OQraHpiXiVTlsikY0=)
5: YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa (hash: fh8nT5vZdM5ZHaPxQ043knM/D5f5HwhE2yBZCYzTFqQ=)
6: afEdQgqnbCftaot9zEVr5N_KEik.roa (hash: Lhf9vxXJqsESp4nJxNUJAzjKFEVMzT7S69LVaasmd6w=)
7: rELj50bmqX-dlIZz4LmRngTG7Ls.roa (hash: Dvzjy4JJ4c7OB88K3L17CIigy3BXYYRK2W4QmjOw5Z0=)
8: tzvqdjfI-5GkWfLXDw0rhlyGwjE.roa (hash: WRtCEE9bn80NcIoJC83Nzrz1w5Lqw7rz3krWgHW5q2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:73:2a:b0:5f:2e:80:a3:96:f1:de:b9:df:28:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Nov 4 15:00:43 2025 GMT
Not After : Nov 5 15:00:43 2025 GMT
Subject: CN=c67f02c156f7ac50f721cfc5c5cd71c85cc8eecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:92:10:6f:b2:ec:c3:0c:cc:a5:49:e0:78:
6f:72:8c:8f:3d:f2:68:06:a2:f4:66:0b:0f:df:d8:
b1:ea:bb:16:3e:cc:d3:f8:71:48:dc:6e:89:e5:8b:
9a:2f:3e:63:4f:cb:24:0b:99:0f:65:af:97:5e:27:
07:e3:99:c5:e0:68:48:5d:8d:83:93:10:9b:cc:bf:
7f:b9:24:53:02:2b:0c:7b:aa:60:c0:30:dd:a7:e0:
f0:c0:a8:c9:61:23:50:dc:c7:cd:6e:b9:08:04:b9:
0b:d0:4c:4c:bd:d9:64:d9:7a:e8:68:2c:35:33:58:
eb:47:99:d9:ce:16:78:75:61:26:eb:e8:61:1f:67:
c2:3e:1c:36:a8:1e:82:e9:86:b7:e0:5f:18:98:e8:
c0:95:27:cc:3f:bd:df:f0:b0:31:cd:e3:c7:da:64:
b9:4a:4f:45:f3:79:b9:76:2b:8e:c1:be:dc:33:80:
6e:70:81:c3:91:f3:dc:33:81:ac:e6:70:d0:59:33:
12:43:d9:7a:a9:a7:d3:34:b3:e6:40:a8:53:61:94:
19:2c:fd:90:1e:27:9c:88:d1:f3:2b:09:87:e1:e0:
9d:f3:cf:9e:4f:09:99:64:5f:c9:35:10:19:6b:ab:
bc:bb:cd:22:fd:28:b4:04:27:b2:9f:b2:b0:a3:8a:
66:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7F:02:C1:56:F7:AC:50:F7:21:CF:C5:C5:CD:71:C8:5C:C8:EE:CC
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:c4:26:13:ec:8a:32:3d:f3:c2:c2:71:af:d5:dd:4b:86:5b:
f5:8c:b2:53:58:01:7c:3e:ae:64:4a:0d:a1:9c:6e:7a:e0:fb:
78:1f:e2:23:95:ce:91:68:85:6b:6d:b5:29:13:1e:96:ba:77:
8d:5b:65:cd:b4:67:a7:7c:99:52:73:ef:9e:5f:1a:c7:c0:13:
c3:4c:2a:25:12:85:2c:a0:5f:04:b3:29:c5:81:0e:f8:01:0d:
27:42:03:21:b1:7f:04:b6:42:b4:bc:f6:3b:dc:a1:1f:14:e5:
4d:e5:c9:ba:fb:5f:92:ba:fc:04:b3:8e:b2:11:ad:70:ba:dc:
ee:aa:a8:01:9e:95:28:fc:b5:14:56:f4:3a:1b:c4:89:ff:2d:
63:ee:6b:5e:da:54:e4:ce:00:09:43:d8:8e:20:1c:e8:ec:41:
d5:11:6b:89:73:23:85:47:53:d1:9b:46:8e:92:fd:a3:44:36:
4d:e1:97:4d:02:b3:87:07:be:05:4f:49:ec:52:c6:d6:9d:7d:
a3:5f:a5:cd:20:4f:c5:fc:63:34:2b:ce:69:6e:0d:5e:bf:5f:
af:06:d2:31:08:81:b1:c3:2c:41:f0:6f:12:6c:45:a3:6d:bd:
88:6c:b9:84:b1:b0:1f:25:cb:40:20:33:53:00:4e:eb:9a:c7:
5f:b1:c0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:57 2025 by rpki-client