Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
File: 7PT52zCxnHXjWugDeT9OG0qqFIc.mft (raw, json)
Hash identifier: LBpZOcBvZIhZl6cBVYY0LRVzkXDqqO5dN3yA7lNo5jM=
Subject key identifier: CC:19:83:FF:86:E7:95:FD:1B:8E:C8:E7:44:AE:5F:A3:6D:14:67:A7
Authority key identifier: EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
Certificate issuer: /CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Certificate serial: 019A4DAAA71C0477F1D5EAC80BEC24935597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
Manifest number: 148D
Signing time: Tue 04 Nov 2025 07:00:20 +0000
Manifest this update: Tue 04 Nov 2025 07:00:20 +0000
Manifest next update: Wed 05 Nov 2025 07:00:20 +0000
Files and hashes: 1: 7PT52zCxnHXjWugDeT9OG0qqFIc.crl (hash: 8tclZg5dMthOnoOfvse/2LeUtYWWwv8Xd8kPPe50NnU=)
2: o1owePWPwjNd3b3qg8Jnc7YGiQI.roa (hash: GgOViLOKaFjeEtIxQ5QnUpa+EnCLoFvMT0viAqTgppE=)
3: tgXHz8gzde8nL8u9-odgzdtG_tY.roa (hash: XKoajYu1GkfOpe/YbTcjXkoO85ZZDvBPigMPOST+e6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:a7:1c:04:77:f1:d5:ea:c8:0b:ec:24:93:55:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf4f9db30b19c75e35ae803793f4e1b4aaa1487
Validity
Not Before: Nov 4 07:00:20 2025 GMT
Not After : Nov 5 07:00:20 2025 GMT
Subject: CN=cc1983ff86e795fd1b8ec8e744ae5fa36d1467a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:83:d9:29:c2:82:67:04:66:ec:0f:79:ff:
2b:6a:49:3e:fd:97:d2:a8:c1:ee:35:4b:a2:3a:d8:
7c:8f:65:dd:6e:d7:0a:26:c4:26:c2:c8:4b:91:87:
ac:ac:d3:64:05:01:9d:54:7e:45:63:90:b8:f6:47:
bb:96:75:31:da:9c:f3:13:cf:8f:29:61:11:52:c1:
f5:d7:31:ac:b3:0b:dc:cf:bc:c6:a1:a8:12:49:7a:
ba:68:85:b2:bd:b7:b2:24:41:42:87:52:85:8f:95:
cd:7c:2d:6a:46:6c:7c:70:43:dc:98:28:77:b4:08:
56:79:29:23:99:ef:94:c0:cf:cd:10:6b:4e:b0:76:
09:11:c1:e0:e2:88:8d:4f:36:23:98:8e:92:11:f2:
37:74:1d:14:43:a0:dc:90:36:86:dc:73:ef:bf:5c:
14:b8:a1:d8:90:7a:5a:43:6b:ec:ec:0d:64:a6:e7:
0f:5b:ae:5e:8b:49:73:61:42:f9:28:c1:1c:f7:fa:
93:3d:4f:e7:79:23:eb:c9:fe:ae:44:4e:f0:b3:1c:
b6:4f:ba:82:1f:5b:54:32:28:0b:49:54:d4:bd:85:
fc:cc:24:67:69:56:7c:fa:0f:07:ce:38:94:12:c2:
f4:fd:1e:2a:aa:bf:51:d2:1d:e4:bb:1d:37:58:e3:
1e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:19:83:FF:86:E7:95:FD:1B:8E:C8:E7:44:AE:5F:A3:6D:14:67:A7
X509v3 Authority Key Identifier:
keyid:EC:F4:F9:DB:30:B1:9C:75:E3:5A:E8:03:79:3F:4E:1B:4A:AA:14:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PT52zCxnHXjWugDeT9OG0qqFIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5fea8b-5228-42f7-8256-c815e50ec5e7/1/7PT52zCxnHXjWugDeT9OG0qqFIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6b:d9:15:a8:41:92:25:f1:67:d4:4f:ce:2f:44:2f:d9:90:
55:2b:a8:84:cf:da:21:1f:b3:2c:88:cb:59:b0:d1:5e:a2:bb:
99:fc:57:6e:c2:db:a8:d7:59:be:5e:ee:47:89:ea:54:6d:6f:
a8:b5:96:d9:a2:2b:cc:66:b6:8c:d7:38:0f:4d:74:f1:13:1a:
4e:30:68:26:8f:64:84:18:46:50:64:f7:32:28:d2:27:da:74:
b5:2f:d7:2d:16:d1:c5:a7:59:06:af:9d:cc:51:ce:10:9c:22:
4a:f7:8f:f1:a7:e7:91:d9:a7:c4:6b:44:2e:f5:83:17:bb:7b:
74:a0:24:59:b3:01:27:ed:88:a7:0e:e6:94:b2:66:b0:a2:d1:
dd:02:c7:56:02:5a:06:e2:e6:e8:19:f4:1c:a5:3d:51:48:61:
50:82:1a:db:06:94:63:6f:16:0e:f3:7b:27:63:e5:a7:98:a6:
4b:e6:23:47:97:64:05:f0:86:91:a1:f6:7b:3f:29:27:de:5e:
6a:0d:3b:5e:67:b1:2f:3a:14:aa:13:03:c4:0f:03:71:c1:eb:
d0:71:65:69:d5:71:0d:57:0b:f5:58:af:c3:8f:54:ac:5c:ce:
93:2d:b8:e3:96:65:58:9c:83:0e:ed:dc:37:90:0b:4e:a2:f4:
51:82:f7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:31 2025 by rpki-client