Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier: QgOciiM1V3Y5PDZI6XiMJkx8wDwkvJUoMburBZfxBIA=
Subject key identifier: 80:CB:8F:40:51:A4:AB:9E:3B:D6:01:E6:A1:D8:90:74:7C:D8:4A:7C
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial: 019A4D73BA8094D31FC01198E2B8918E5485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number: 0E7A
Signing time: Tue 04 Nov 2025 06:00:21 +0000
Manifest this update: Tue 04 Nov 2025 06:00:21 +0000
Manifest next update: Wed 05 Nov 2025 06:00:21 +0000
Files and hashes: 1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: /zEOoJ1UokQ1vOpb4SQkg8/sY87L+ji18D2f2rqeN3Y=)
2: VXStklzuRlpg_R8nfz573Xq7Noo.roa (hash: IbT51sa2OOKxE/XOPtTGvEY7Cw0dCovzg7t9jfSRhHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ba:80:94:d3:1f:c0:11:98:e2:b8:91:8e:54:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Validity
Not Before: Nov 4 06:00:21 2025 GMT
Not After : Nov 5 06:00:21 2025 GMT
Subject: CN=80cb8f4051a4ab9e3bd601e6a1d890747cd84a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:46:9a:ca:15:a9:f1:f2:42:19:d6:48:6b:cf:
13:d2:bc:8e:ab:70:74:a7:b0:72:a5:14:94:56:ab:
d6:ff:38:89:99:f6:e8:d6:7d:fa:7a:3c:fa:1d:28:
54:25:a8:d6:32:90:e6:36:1b:66:98:77:65:2f:d8:
ba:75:1b:4c:54:fa:68:17:8a:02:64:17:28:60:a8:
db:54:70:8b:63:e7:1d:aa:61:0e:5a:fd:86:5c:aa:
1d:2d:54:14:bf:e5:67:8e:33:30:24:de:4d:21:36:
8f:80:3b:57:07:95:01:9f:df:e2:57:d5:71:ea:b6:
5a:81:81:84:5d:b7:af:97:ea:0d:83:7b:f4:58:f2:
28:a5:01:23:59:05:df:ac:a2:27:1e:2a:8d:4b:d2:
3e:83:00:46:4d:11:db:e9:2a:73:d0:ee:07:f1:b5:
d0:0b:2d:4a:d5:45:62:46:28:e7:10:ec:08:4d:2a:
dc:ce:30:7e:25:91:9f:8c:7b:af:25:10:59:95:30:
b7:c6:8d:b5:9d:73:c8:d5:40:4d:bd:88:be:d5:04:
57:4c:b5:b8:6c:07:ea:eb:68:4b:98:c1:14:9f:fa:
64:7d:d8:ab:3e:5c:c0:8b:5c:5e:1c:86:09:5c:8e:
e2:7c:74:06:e2:59:d8:c8:b2:66:2d:74:d7:45:50:
3f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CB:8F:40:51:A4:AB:9E:3B:D6:01:E6:A1:D8:90:74:7C:D8:4A:7C
X509v3 Authority Key Identifier:
keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:9d:12:1b:a6:db:08:38:5f:09:c4:45:45:de:f9:02:f8:e7:
8e:5c:e5:0d:90:b0:a8:0d:03:90:67:a4:50:68:54:e1:2c:2a:
02:dc:98:0b:22:d3:73:02:84:0d:77:e4:32:4f:81:07:f8:ea:
2b:93:48:1d:39:b3:14:5c:c4:9d:d1:d3:8f:bd:38:41:47:d5:
32:36:a8:25:96:85:66:56:c5:57:0c:fa:aa:f0:ab:7c:a5:fb:
79:b2:e0:6a:3f:a8:f1:56:4f:b9:3f:63:3e:39:94:ba:69:1e:
07:39:31:bb:f9:28:a3:3d:17:31:1b:93:de:fb:eb:41:03:27:
68:ca:d1:93:10:18:d8:c9:ca:8e:8b:fa:aa:af:68:d1:b9:67:
54:7f:4c:54:23:5e:73:d4:ae:3e:ba:73:86:63:ab:fb:cf:4d:
fa:c8:23:ae:a7:8f:8e:b1:c3:44:c5:f3:c0:ad:8c:f9:b2:f2:
49:38:01:1c:06:06:b5:07:2d:1d:bb:1a:24:b5:e7:06:d5:35:
48:97:41:fc:e5:bb:49:c9:e8:c1:13:41:16:24:c6:5b:7b:3d:
d4:cf:21:6d:67:11:6d:b5:be:0d:93:7d:50:6a:ca:1a:c4:d1:
5f:be:e2:57:19:c2:a0:aa:ae:0d:a4:f0:7e:9e:fb:c3:fd:94:
bd:a9:d8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:05 2025 by rpki-client