Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier: lUQS/FS4J7aaN1Gpr/SLvOaNVKugm45ouAuEFgzsuY4=
Subject key identifier: 18:6D:EC:6D:F7:D9:22:D2:D4:15:59:CE:E6:42:EF:A1:FF:69:97:1F
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer: /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial: 019A4E18ADA48B3D862E9A30920279779057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number: 0690
Signing time: Tue 04 Nov 2025 09:00:31 +0000
Manifest this update: Tue 04 Nov 2025 09:00:31 +0000
Manifest next update: Wed 05 Nov 2025 09:00:31 +0000
Files and hashes: 1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: klKBpc1Cw+QSJt0NMR/ketUfrXVLyHc0WyQ4QJ5dxTE=)
2: t01s41tuzCg0n-ebuqBLNh-kZ8U.roa (hash: gu7VW+b5U5NLSfKbHP6Ioqtp4/dVeiqqPEeW+qWaaC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ad:a4:8b:3d:86:2e:9a:30:92:02:79:77:90:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
Validity
Not Before: Nov 4 09:00:31 2025 GMT
Not After : Nov 5 09:00:31 2025 GMT
Subject: CN=186dec6df7d922d2d41559cee642efa1ff69971f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:bb:c3:e7:7e:9f:a4:87:2b:4f:b1:14:d3:
3a:db:e6:64:1b:8a:ad:4c:97:87:aa:44:09:e8:a2:
cb:1e:65:4b:04:1a:aa:60:81:b3:ff:83:bb:2e:2d:
a1:bc:5d:50:34:f0:bf:a7:20:da:de:74:5f:9d:4e:
31:d9:ba:ea:f9:b5:17:6e:0d:fb:fc:a2:1e:9a:9b:
72:1d:49:eb:29:3d:60:d6:b1:8b:bf:5a:05:ab:a8:
97:bd:d3:eb:df:15:05:3f:d8:ab:18:a5:d7:35:a1:
54:d0:7d:88:68:8e:d3:49:72:76:f1:9e:b1:5b:02:
c1:5a:77:2a:9d:d7:05:6e:77:35:8a:c9:93:80:3f:
e2:07:6d:e1:af:ed:5e:c5:d3:ba:3c:a3:b1:2a:c8:
40:f4:b9:f2:c9:a0:6c:ca:c7:7f:6e:11:48:bc:47:
ce:b1:9f:94:f6:c7:6e:60:cf:fa:63:ce:78:6f:cd:
4b:56:94:f7:44:4c:ea:92:ab:25:b5:df:03:25:89:
b4:08:cc:1d:54:68:02:55:a1:fe:1a:66:12:6e:e4:
f1:fd:87:b5:cf:17:6e:04:c6:21:ff:90:20:75:0c:
aa:6c:66:3d:bd:9c:b3:39:95:87:6b:fa:1a:c3:56:
6d:2a:8a:db:4d:c5:6e:b0:41:b6:1b:76:a3:64:43:
20:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6D:EC:6D:F7:D9:22:D2:D4:15:59:CE:E6:42:EF:A1:FF:69:97:1F
X509v3 Authority Key Identifier:
keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e3:ea:c8:c6:bd:94:4a:0c:59:d4:f9:88:d3:b7:70:ad:59:
e4:9f:6d:a6:f9:62:9a:36:95:19:29:12:55:4a:1f:e8:ef:d6:
2b:6a:9f:9b:df:f0:b9:00:c7:43:c5:c9:fc:3b:e6:58:e9:6b:
45:57:b6:f3:0e:c3:f8:85:9f:2e:9f:8d:ff:f7:c8:64:5b:15:
03:d9:a3:6e:a9:3a:e5:6e:53:48:95:96:75:ca:50:64:e6:f4:
bd:05:b0:48:b7:a5:2e:59:4e:35:4b:c5:89:bb:0e:5c:23:5f:
d6:bb:ee:b5:5c:45:84:14:c9:ab:69:d5:f5:76:f0:9e:d4:82:
05:1c:3a:1b:ce:ee:ac:c7:35:93:42:20:1d:de:78:a8:79:7c:
cd:7e:2b:d8:e9:36:3c:73:ad:e2:75:fa:dc:f2:70:8e:ba:68:
fa:0d:2c:b2:c4:e2:7f:47:1d:ef:af:d9:a8:f9:b0:8f:af:f1:
14:24:96:fb:6f:32:07:7d:79:7e:f0:9f:d0:1c:fd:0a:60:7b:
b5:c4:e4:96:4b:1b:63:bc:85:d9:03:d4:da:00:92:5d:d6:44:
e8:a8:46:9e:0a:ef:cd:40:ac:49:aa:c8:08:45:76:87:bc:e1:
29:e2:89:8f:d0:c4:10:bd:f7:03:35:25:af:d3:0f:54:53:29:
f4:6c:ac:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:20 2025 by rpki-client