Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
File: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft (raw, json)
Hash identifier: zGYZzrHuZOKBOOZ3zt5XOV1YGtB/95IaDp5QdDo38Fk=
Subject key identifier: 76:ED:9D:60:B3:BF:33:B6:50:05:20:38:FB:C5:75:DA:0C:D5:E6:13
Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
Certificate issuer: /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Certificate serial: 019A4E18C5D5B7B78E9257EF1C09F70E7829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
Manifest number: 065B
Signing time: Tue 04 Nov 2025 09:00:37 +0000
Manifest this update: Tue 04 Nov 2025 09:00:37 +0000
Manifest next update: Wed 05 Nov 2025 09:00:37 +0000
Files and hashes: 1: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl (hash: +5uGRQBXs/OGGor28CUjIW0DdtJXZhUxv+svRk/LhGs=)
2: QaiA1bZYqqrrTFcETKEeVAb9d0I.roa (hash: 3/CpVEgMrkvVAywW4VLDUD5sCi7Crs9f+8Us3UCgxOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c5:d5:b7:b7:8e:92:57:ef:1c:09:f7:0e:78:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Validity
Not Before: Nov 4 09:00:37 2025 GMT
Not After : Nov 5 09:00:37 2025 GMT
Subject: CN=76ed9d60b3bf33b650052038fbc575da0cd5e613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:c0:ed:eb:aa:71:b7:d8:98:c3:fa:45:57:
46:15:43:72:b5:f5:bc:ed:96:5a:d9:22:71:c3:3e:
a3:07:f4:d6:d5:da:97:44:40:8c:65:7e:67:ac:99:
d6:a3:5c:5b:84:cd:ef:bc:84:5d:54:d7:2a:03:76:
69:cc:eb:45:ad:d0:d6:50:09:7c:09:78:b5:9e:09:
c1:84:e1:01:18:9b:b6:dd:4c:4d:a2:e1:f3:1b:e5:
ab:6f:5a:27:c5:79:76:0e:ce:99:7b:5c:73:08:c1:
fb:a5:cd:59:9d:9c:7e:81:98:9e:6c:9f:9c:ec:8a:
d1:b1:4c:26:d2:7c:40:f5:1e:7b:b1:59:43:3c:a5:
f4:17:3f:25:5c:50:f9:95:5e:81:53:ac:19:f9:df:
2a:9c:bc:86:7d:49:aa:54:ae:64:72:06:6b:c2:ae:
95:61:f8:51:89:cf:62:a3:c5:63:b0:2c:60:8d:9a:
36:1f:ac:f2:38:75:75:a8:19:b8:65:b0:78:60:bc:
67:cd:c4:cc:b3:8b:0f:47:bc:80:e5:52:05:2d:f8:
62:b1:4c:39:41:d3:36:9e:fc:85:7e:65:3c:90:89:
06:94:93:08:65:cf:c6:58:33:a7:38:1b:64:2c:ed:
77:e3:c3:3f:21:c7:49:c4:52:57:23:c2:02:93:7e:
ab:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:ED:9D:60:B3:BF:33:B6:50:05:20:38:FB:C5:75:DA:0C:D5:E6:13
X509v3 Authority Key Identifier:
keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f3:56:12:83:7b:75:5c:3b:ce:86:d0:62:17:be:89:7c:d9:
8f:d2:87:e1:fa:0b:ac:2b:82:48:4f:43:a3:78:13:60:ec:b1:
08:ba:b3:21:f1:2e:10:7c:82:4c:7a:ce:1b:36:67:6f:00:8a:
7a:a7:5a:02:9f:de:fe:dd:c9:9b:5f:71:f7:2d:80:95:eb:9d:
cd:b3:58:3a:bc:9c:81:e2:d4:94:be:37:c0:e8:25:29:1f:0d:
05:76:66:06:90:60:38:27:21:d6:e5:35:0c:53:7d:9e:bc:80:
38:50:03:9f:60:9d:c2:e0:f6:14:a7:c5:5d:b8:42:e9:c2:e6:
34:51:49:7f:f1:3f:0d:93:1b:37:0e:94:db:1f:a5:67:51:91:
87:24:41:b5:62:84:bf:4d:2b:22:f5:7a:d1:79:0a:c7:58:90:
7a:4d:2e:3c:a0:60:7b:82:7a:7e:73:51:69:0f:12:36:b8:0e:
c0:75:00:fd:25:91:36:e4:7f:9c:3d:ed:9f:e8:47:5c:64:e9:
b8:01:fa:da:18:15:e9:fc:1d:39:0a:e3:12:a1:9b:84:ee:cb:
bf:24:9c:2c:7a:1c:44:23:f1:83:37:94:1c:fb:42:90:29:6f:
1d:81:74:24:2f:3f:2e:29:c6:d7:c0:19:87:97:eb:3b:47:14:
b1:b7:93:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:24:29 2025 by rpki-client