Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: LjmSuaO8FgtD+Uu9IjUIQnEjavrA0Wa+idZuKGqA2RM=
Subject key identifier: 16:3E:26:EA:EC:81:7A:2F:BA:B6:5B:3A:72:1C:22:8D:54:F7:B4:3B
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 019A4E4F4030E3CCC2B87F85D5936CEEDD4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 10:00:07 +0000
Manifest this update: Tue 04 Nov 2025 10:00:07 +0000
Manifest next update: Wed 05 Nov 2025 10:00:07 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: CkVOF2iMN6uh2o6d3bI/nX+CCN/PCD2q8ucbnfunWfU=)
2: MOwk6-gNTotPX4medNv9DwpG-nY.roa (hash: 6Jb3ucO6IvrIBpfG+RtQ1ACJyD7qIWwk6gOaPXaKjcU=)
3: YTaACXpx54gDy9xvy1Yl2SVGqRU.roa (hash: LQglYAbCThbY5IKAki5TmwIb5w2DJ6WRR1u7/db90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:40:30:e3:cc:c2:b8:7f:85:d5:93:6c:ee:dd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Nov 4 10:00:07 2025 GMT
Not After : Nov 5 10:00:07 2025 GMT
Subject: CN=163e26eaec817a2fbab65b3a721c228d54f7b43b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:43:71:de:15:b2:05:d2:79:a6:9f:0a:14:
4c:e0:4f:b9:65:ea:5e:6d:a0:fc:e0:6a:38:7d:96:
b9:82:fa:3b:b8:17:bd:36:51:b1:22:db:6f:69:8d:
dc:bd:94:02:b8:06:cc:0c:cd:6f:d9:fc:99:e1:12:
e1:b4:b9:ce:83:4e:cb:45:da:61:1f:ab:e3:65:20:
d7:56:f1:65:46:3b:74:64:ab:c2:d5:ba:73:1e:9c:
01:07:57:c7:28:7b:bc:2f:0f:40:86:2d:b8:06:9b:
23:d6:56:ab:21:46:1b:b8:90:1b:2c:d9:d2:38:c3:
c6:f2:bc:95:5f:75:a1:27:ef:3b:da:9f:ff:af:23:
e7:03:6b:ec:f7:23:ce:73:38:dc:59:24:f4:e4:f5:
f1:05:1f:aa:95:e8:72:e1:f0:b1:54:3b:28:e0:77:
f1:a0:9e:d7:a0:35:5e:cf:7a:fd:23:41:34:b7:ff:
4a:00:25:6e:d4:f8:15:cd:4b:0a:e7:e5:72:64:d7:
17:dd:29:80:c5:5a:ca:f0:70:a0:12:19:87:bb:42:
62:e2:83:dd:bb:6c:17:05:b2:81:5a:03:31:3d:8f:
02:21:5a:e0:ce:49:60:f9:77:99:80:18:38:45:aa:
82:5b:10:5e:6a:db:d7:c0:2e:62:a9:51:b1:19:aa:
50:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:3E:26:EA:EC:81:7A:2F:BA:B6:5B:3A:72:1C:22:8D:54:F7:B4:3B
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fc:41:40:eb:96:0f:68:d8:16:f2:f9:bd:e3:0b:cd:73:bf:
4e:28:ac:c0:f5:09:73:d7:7e:10:4a:2a:79:24:e9:98:83:8d:
af:58:cf:98:37:2a:d6:42:af:5a:94:5c:b9:50:5d:e4:36:af:
bf:02:e2:9c:df:02:ef:30:05:38:40:d2:c8:e3:ea:4a:bc:51:
cf:e3:cc:09:1b:a3:c3:88:41:81:12:72:53:75:1a:67:19:0b:
34:c0:63:80:04:a8:67:c4:d6:57:82:02:fd:78:57:5d:ae:55:
ef:e3:97:85:68:7b:0c:fa:0e:d5:b5:00:ac:a5:a6:52:a6:12:
5b:72:7f:c8:90:9d:b3:68:69:2f:26:78:bc:0b:4c:a6:bb:f7:
91:57:a9:03:4e:7f:3f:58:4b:ca:ec:cd:57:93:72:44:ea:c9:
6c:87:e6:26:b5:1a:4d:cc:01:70:7c:82:52:11:a0:a0:46:f7:
e1:76:e8:99:97:2e:89:b7:5f:d0:5e:f0:22:94:07:52:f5:e8:
0c:bd:8d:f7:8e:58:f8:ac:0d:8d:d8:90:6f:af:25:80:19:e5:
0f:af:11:8a:db:d3:8d:ed:e4:e3:d7:57:5e:67:9c:31:6b:a1:
4d:84:8f:fc:14:a3:2f:fd:1e:2f:8f:c9:b2:a6:b4:33:04:38:
7b:bd:98:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:45 2025 by rpki-client