Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: eh7CzneO/H80lcnwt6uKGO0hJUs+4Wvg3hJTv/0Khs0=
Subject key identifier: FC:FB:DE:9F:F4:30:F0:69:D3:97:40:9D:D0:87:C9:F0:41:8B:7B:52
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 019A52D1BB39AA661C32C0A75766153AB871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 0E96
Signing time: Wed 05 Nov 2025 07:01:07 +0000
Manifest this update: Wed 05 Nov 2025 07:01:07 +0000
Manifest next update: Thu 06 Nov 2025 07:01:07 +0000
Files and hashes: 1: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: CdR9yl2+4BjEI3SbSChLzJH4WiiC0XYlPkYp4yjbpzw=)
2: rvyb7Kg7VHmO9XnpFHi1qowlCe4.roa (hash: 7bO/x3Y8T7RLGoQjkYeWq/YNgP20ufR1tvp53Z1/QaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:bb:39:aa:66:1c:32:c0:a7:57:66:15:3a:b8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Nov 5 07:01:07 2025 GMT
Not After : Nov 6 07:01:07 2025 GMT
Subject: CN=fcfbde9ff430f069d397409dd087c9f0418b7b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:a9:5f:7a:a1:13:91:8d:79:66:d8:e6:e9:
93:66:5a:b4:00:ee:93:92:b3:81:aa:07:a3:2a:59:
0a:57:45:1e:d5:43:b0:09:5f:e2:bf:bd:c3:3d:03:
7e:fd:e9:9a:1e:6c:ac:81:fb:c3:d0:9c:4b:c2:a6:
b6:42:72:df:48:39:ed:30:be:e5:7b:d1:18:91:f7:
f9:b1:6b:92:9c:2b:b6:ac:bf:d1:65:58:69:10:19:
fb:71:6c:9c:2a:96:c3:21:09:58:30:f3:47:02:67:
cb:40:73:5b:5d:06:90:8e:57:63:2f:98:d2:23:75:
ab:8c:e1:e3:2c:48:fa:88:64:d8:f0:34:30:65:d0:
50:d7:bb:ff:b1:ec:cc:83:61:d5:e7:fb:d5:71:e6:
97:9d:3e:7f:55:60:a9:b1:96:6a:35:67:7a:f5:c5:
14:b3:ce:ca:2e:6e:bf:5a:00:f0:be:d0:87:ea:88:
81:ae:1b:a6:ac:c8:bc:20:36:23:5e:dc:18:74:cd:
4b:86:59:0d:3c:bd:ef:b3:08:37:ff:bb:4e:b1:e2:
41:32:7b:e8:e5:52:b8:ea:b2:91:87:e8:80:a0:24:
a7:f4:3c:13:d8:4b:f7:b9:b5:6d:9d:5d:8b:e1:34:
23:99:e3:ec:4b:2c:56:02:d9:bc:87:be:16:d3:a1:
f8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FB:DE:9F:F4:30:F0:69:D3:97:40:9D:D0:87:C9:F0:41:8B:7B:52
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:dc:e4:0d:de:34:16:e4:63:aa:be:32:14:14:69:cc:a8:7d:
36:d7:f2:9b:5b:a9:76:08:10:8e:77:5b:26:d4:ec:84:66:ed:
e4:02:99:1f:23:2e:9d:91:4b:14:08:32:8b:5d:63:b1:e8:09:
40:e5:dc:cd:bc:94:d7:2f:5a:92:a5:00:31:7d:ab:6a:06:9a:
80:8e:3c:d9:0b:08:67:b9:f3:55:e0:7b:1a:53:d5:4c:e0:8f:
e8:6c:d3:75:57:1e:40:91:ca:cc:3b:26:38:ff:1a:30:8f:f9:
28:7e:7a:d4:b1:8d:bb:6a:8c:a3:67:33:22:63:29:e1:99:c8:
7c:38:bb:60:a1:cb:98:23:8b:65:c0:d3:9d:89:eb:0a:f7:aa:
cd:56:0b:70:6c:a3:10:ce:66:63:33:04:93:91:9d:4f:07:63:
13:e4:e4:74:cd:57:12:f3:e5:02:15:9e:78:e5:65:37:3a:e6:
dc:9a:ff:45:67:c3:39:2f:aa:e8:b5:c9:e1:51:c7:7d:00:6f:
b0:03:f0:09:36:bf:41:4e:a8:25:fc:94:58:9d:06:86:e2:3a:
6e:b1:41:a0:9c:a1:46:17:e5:be:ba:51:ca:eb:6d:1a:68:7a:
d7:0c:9d:bc:34:ce:ea:1f:8d:eb:7f:17:3f:c1:be:2c:75:94:
39:c1:51:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:13:27 2025 by rpki-client