Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
File: 7nwowZyp0nBozrxpyBVBZ13BLN8.mft (raw, json)
Hash identifier: 2goXdRXbapQB2i/7giesWS7+HnswV4t+VrYTcI4v72s=
Subject key identifier: F3:90:88:9C:02:9E:0C:3E:25:95:22:BB:73:8E:4F:8D:C1:AF:B7:49
Authority key identifier: EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF
Certificate issuer: /CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
Certificate serial: 019A52D105D17B57B54B612FBA6D21EEBDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 07:00:21 +0000
Manifest this update: Wed 05 Nov 2025 07:00:21 +0000
Manifest next update: Thu 06 Nov 2025 07:00:21 +0000
Files and hashes: 1: 7nwowZyp0nBozrxpyBVBZ13BLN8.crl (hash: 8Iu13kjJFJ41NObIte5MwHDFRJKSEXDWKq03HdIvdjA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:05:d1:7b:57:b5:4b:61:2f:ba:6d:21:ee:bd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
Validity
Not Before: Nov 5 07:00:21 2025 GMT
Not After : Nov 6 07:00:21 2025 GMT
Subject: CN=f390889c029e0c3e259522bb738e4f8dc1afb749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:1d:7d:b7:06:59:a9:f4:85:fb:27:ce:56:
8e:e2:50:03:69:13:b4:65:81:ce:76:21:34:01:38:
b2:7f:60:e4:19:ad:71:3c:4e:98:9a:b1:b9:60:f6:
23:2a:f7:e6:45:e6:db:87:df:01:59:f2:f6:16:bb:
40:94:a5:6a:c5:c4:4e:cb:5b:e5:20:a2:03:11:f6:
4a:da:9f:3c:ed:2f:21:3c:e3:04:dd:85:63:3e:ae:
ad:8f:8f:e3:b4:55:eb:90:49:35:0f:d0:52:bc:11:
ce:17:75:6b:e3:8f:91:7c:da:44:a0:71:1d:6e:6f:
ee:6a:9c:b2:e0:3c:01:ae:2b:10:f4:00:f5:eb:2b:
5f:84:a1:ee:38:f9:ea:38:2c:59:25:e0:ba:97:5f:
58:f9:e3:dd:f6:04:74:33:a5:a3:c7:c3:6c:19:56:
30:e8:61:6d:4f:64:2f:80:81:19:c3:7e:28:53:1a:
ec:16:5f:50:e4:33:ee:5b:c5:32:49:19:14:a1:d6:
b1:72:81:f3:f2:ba:07:ea:1c:8f:84:a0:27:8a:fa:
4c:cc:6f:f0:0d:80:14:aa:d4:cf:b3:05:fa:08:d7:
61:28:ca:fc:38:00:8f:4c:0a:17:29:e7:22:7d:6b:
40:5f:36:6a:c4:78:c1:01:d4:a4:60:76:f8:20:d2:
92:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:90:88:9C:02:9E:0C:3E:25:95:22:BB:73:8E:4F:8D:C1:AF:B7:49
X509v3 Authority Key Identifier:
keyid:EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bc:5f:0d:f6:75:5b:54:3e:4d:54:93:5a:21:ef:37:8d:fc:
ec:18:b1:9e:b4:45:71:c3:4e:b7:31:6f:e6:c3:3a:3f:59:f2:
bc:f1:c7:2f:eb:22:23:53:bd:f9:ff:85:21:ff:65:59:55:1b:
c3:73:3a:ed:c1:7c:56:66:b7:f8:4f:f3:f2:a3:d3:ce:58:09:
65:57:75:57:5c:45:13:b1:2e:e3:a2:90:94:58:51:83:72:eb:
0c:3a:6b:ca:20:00:a9:9a:e1:18:e6:2b:9b:4a:87:86:8d:92:
dd:c2:5d:0f:45:05:16:5e:8d:c0:4a:b1:b4:d1:2e:ca:eb:48:
e1:94:84:8b:4c:7f:7f:48:4b:60:f7:bb:9c:a2:77:cc:98:63:
c1:dd:f9:3a:31:1b:d0:c1:92:9a:da:8c:c3:ed:b5:9d:3a:54:
06:63:a0:06:6b:5e:e7:4a:b7:16:8d:d4:b1:20:84:14:d8:57:
7e:b1:6b:04:2e:41:13:b2:21:7a:38:89:55:b1:bf:9b:41:87:
b9:fe:86:f4:d6:ce:8f:2d:3e:61:52:50:ad:e8:cd:0d:08:07:
39:4b:ba:23:ae:5c:2f:df:fd:36:dd:62:ce:e5:7b:75:b0:73:
aa:db:03:30:69:eb:40:98:28:e8:15:51:0b:9a:39:72:82:46:
96:02:1d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:36:42 2025 by rpki-client