Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
File: 7MzCuQnHyBXKzLX85THDJSb63Vo.mft (raw, json)
Hash identifier: GGaym4niY/4fiBdMy9oQXq63nX5wF/bqi1RPKI+UywI=
Subject key identifier: B0:DE:E1:AF:13:72:28:18:FE:33:B6:E8:ED:62:EF:4A:94:E2:E8:78
Authority key identifier: EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
Certificate issuer: /CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Certificate serial: 019A51509D547BA82A9BF802736AEEA27599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
Manifest number: 140B
Signing time: Wed 05 Nov 2025 00:00:28 +0000
Manifest this update: Wed 05 Nov 2025 00:00:28 +0000
Manifest next update: Thu 06 Nov 2025 00:00:28 +0000
Files and hashes: 1: 7MzCuQnHyBXKzLX85THDJSb63Vo.crl (hash: ebOeMbzVLVtXyykTlk3dTFH0CbwCIFynV7B0mIvFXRY=)
2: tR3pNPDNeYZnwqD0svzDk3Ft8pc.roa (hash: d4XwjGHz7UNgEluKmVoFqdXRfZ0+gtbIwXNWFgp5zDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:9d:54:7b:a8:2a:9b:f8:02:73:6a:ee:a2:75:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecccc2b909c7c815caccb5fce531c32526fadd5a
Validity
Not Before: Nov 5 00:00:28 2025 GMT
Not After : Nov 6 00:00:28 2025 GMT
Subject: CN=b0dee1af13722818fe33b6e8ed62ef4a94e2e878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:ac:56:d8:c2:44:40:07:37:41:98:b6:3f:
1b:9c:b8:00:74:ee:d0:81:58:36:8f:fc:5a:ba:dc:
7c:c3:54:dd:57:43:7d:de:d4:6c:e6:25:a2:77:f4:
85:02:cf:58:e2:9c:b7:ee:b6:c9:cd:1d:51:67:70:
e6:ef:68:4b:9e:e9:95:90:58:ee:65:bb:8e:ba:cc:
6a:3a:69:06:d7:8b:ce:fe:dd:b5:f7:8e:62:7f:0b:
5e:8a:89:81:55:ba:a1:18:9c:d7:86:47:39:32:15:
45:e4:f5:5b:7e:c0:da:1d:5a:33:ba:9c:a1:d8:42:
00:b4:05:cf:ff:78:bc:4c:03:3b:76:c5:1f:03:20:
a3:b7:dd:9c:c7:18:35:b5:6d:c5:6b:ca:46:e9:d2:
af:fb:d0:b7:1e:62:cc:58:49:e2:29:0e:fc:bf:8a:
78:d2:d6:d4:88:98:d7:2e:4f:87:39:dc:7a:9b:4e:
37:75:df:3b:f2:4e:fe:1d:67:8a:b7:6d:fc:ec:1e:
81:c1:04:49:49:d5:9b:8b:aa:0e:09:93:f4:5a:9b:
f7:75:1c:fe:2b:d4:a8:73:b1:f2:f8:60:7a:8c:54:
2c:d0:4d:00:94:49:5f:3f:3c:2b:92:a5:97:07:bf:
66:63:e0:22:5b:8d:a0:75:87:90:e3:e3:63:a1:4c:
49:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DE:E1:AF:13:72:28:18:FE:33:B6:E8:ED:62:EF:4A:94:E2:E8:78
X509v3 Authority Key Identifier:
keyid:EC:CC:C2:B9:09:C7:C8:15:CA:CC:B5:FC:E5:31:C3:25:26:FA:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MzCuQnHyBXKzLX85THDJSb63Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d201e6-906e-47d8-8923-6efab9b176d9/1/7MzCuQnHyBXKzLX85THDJSb63Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:eb:73:29:03:77:84:74:07:2b:2b:42:23:67:f0:90:26:51:
fd:c7:50:92:41:ba:56:6b:73:2f:a9:8c:1f:51:c3:67:2f:e8:
26:28:90:7e:2e:7b:76:ab:8b:a7:d8:a0:c7:da:1a:96:bf:a7:
67:dc:e0:af:51:dc:9e:d1:73:a8:e6:64:00:ce:43:55:44:4d:
5d:1f:1e:33:22:0d:7c:f7:64:7b:63:25:a4:36:93:38:d5:47:
75:d8:80:7d:33:9e:ef:00:e3:b5:d0:67:9d:7b:78:97:c4:47:
42:52:4c:fb:b9:c0:7a:5a:72:2e:7a:24:7f:0c:53:a8:e8:8b:
ae:95:f3:f6:64:9a:57:0f:52:e9:22:20:53:cd:2b:0e:a3:ee:
89:02:8f:58:84:d8:1e:b5:eb:5d:76:b6:04:2d:37:f8:92:f0:
64:5c:a3:ce:2b:88:f4:81:eb:45:27:e3:ce:46:fa:8e:69:32:
7d:64:40:34:2a:b7:73:d7:3a:25:58:42:9f:24:72:3c:9f:c3:
08:6f:fd:b0:0c:20:20:fc:e6:6c:7b:4e:66:51:5d:55:d7:fd:
23:07:df:b6:07:87:5e:2e:b1:3f:7b:9f:b9:58:bf:df:77:0d:
a9:1c:9e:90:29:6f:2c:b6:a6:79:39:e5:ff:54:82:a7:ac:72:
db:e4:34:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:15:36 2025 by rpki-client