Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
File: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft (raw, json)
Hash identifier: chN/3kG0a4rL3PuEJBfdCDrGM1TNtOsnP+HQhsklmp0=
Subject key identifier: CA:2C:59:1A:1D:C0:4B:88:CF:AF:BF:98:BC:8B:BA:C7:7F:FA:65:3C
Authority key identifier: EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
Certificate issuer: /CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Certificate serial: 019A4EF5FE239712FF89952C49D3009FE66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:02:15 +0000
Manifest this update: Tue 04 Nov 2025 13:02:15 +0000
Manifest next update: Wed 05 Nov 2025 13:02:15 +0000
Files and hashes: 1: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl (hash: Q1EEHwn2oYFTZhrnl2OWo9n7t9SX+vnU7CtqnqI0/mc=)
2: VOwZFJ2kzA4iWyaWmWEZLWn-AT4.roa (hash: YQUstvHHSMLfCh8uMvOZZqE+6wkkgDZ2K70GWR3RN8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:fe:23:97:12:ff:89:95:2c:49:d3:00:9f:e6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Validity
Not Before: Nov 4 13:02:15 2025 GMT
Not After : Nov 5 13:02:15 2025 GMT
Subject: CN=ca2c591a1dc04b88cfafbf98bc8bbac77ffa653c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cc:2b:65:16:35:1d:26:96:e5:93:97:87:c7:
67:0a:7f:2c:6b:9e:55:65:e0:26:79:b5:70:ba:42:
a3:97:d2:b2:7e:02:25:55:fa:10:5b:af:43:f0:a4:
c6:96:63:84:77:7e:1e:2e:ce:8f:50:68:dd:e9:b3:
3d:e7:93:2f:8b:1d:c7:69:19:3b:7a:f3:0d:da:12:
6a:1c:1d:53:8d:ef:11:88:2b:fd:86:1b:28:de:37:
66:14:3e:25:15:9e:f5:1f:56:34:7f:45:a3:4e:58:
82:8d:69:3f:94:0c:42:b4:ac:4b:56:c6:a1:29:c1:
b1:80:2c:ca:7d:ca:ee:a7:73:61:a2:3c:36:a7:07:
88:e5:ca:f1:e5:82:c9:3a:26:8b:28:4a:3a:c1:5d:
98:e4:42:80:16:1e:dc:6d:42:1a:2e:74:4b:5b:64:
f0:20:f1:8a:ac:bf:ad:64:30:07:85:ee:6d:ff:58:
a1:13:93:4e:7e:04:83:84:cd:f9:30:2c:35:d5:5f:
d9:ae:8d:4d:4b:83:5d:39:19:80:85:b3:ae:9b:aa:
95:19:13:39:32:36:a0:37:a9:3b:b5:f9:86:eb:4b:
41:b9:75:9e:86:62:e9:b6:3b:bd:8e:1a:73:c5:df:
a2:5b:7f:b4:ba:14:97:bf:9f:93:7e:d8:8d:c1:a6:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2C:59:1A:1D:C0:4B:88:CF:AF:BF:98:BC:8B:BA:C7:7F:FA:65:3C
X509v3 Authority Key Identifier:
keyid:EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:c2:d8:ea:95:7c:2e:ba:fd:7e:d2:b0:e4:1c:2a:e5:7b:62:
e6:6c:62:98:73:8b:0f:d6:30:9b:e6:93:71:28:79:e1:a8:f2:
b4:a7:22:9a:6c:df:cf:f4:3d:11:f7:8f:50:96:d1:c3:f4:06:
66:6b:47:b2:e6:15:fb:08:c1:3b:b0:68:42:b3:bc:7f:2a:51:
1a:77:72:fd:da:5f:40:08:9c:89:37:6e:a1:74:e6:07:2a:77:
58:7e:5c:95:a2:68:50:a9:a5:9e:0f:1a:e5:dd:ce:65:b5:4a:
a9:00:dc:de:26:19:8a:5b:40:42:7d:39:d5:98:16:b2:12:6e:
60:9a:37:c7:d9:e2:ea:90:94:ea:64:9d:46:d6:b7:cf:cd:c8:
2c:5d:6d:24:60:da:82:b2:50:7c:ba:33:81:61:69:68:69:af:
29:47:29:b2:94:1b:f2:b9:36:e2:b0:ab:b6:fa:01:59:49:19:
61:04:a3:48:8e:14:c6:c6:55:f6:dc:21:e6:95:aa:9d:9c:30:
9e:a0:a8:47:83:16:7c:1a:1f:38:b2:c0:c3:11:fb:56:07:5f:
c2:14:53:8f:a4:57:7a:ad:1d:91:c8:6f:87:24:77:99:8f:8c:
2a:9d:9b:12:ba:86:90:1d:48:89:4e:bd:09:f1:68:25:a4:7d:
94:d0:0b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:53 2025 by rpki-client