Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File: 7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier: +4Wu0NHbQs92HvLs+sfAht/sVKpxXaAw/iu7kNc9pMo=
Subject key identifier: 25:BA:A4:C5:92:38:87:20:0A:88:A5:E5:96:A0:C3:5B:63:41:B2:90
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 019A4DE16D3E0B9C2EE2BC5EFF4086BCABF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number: 1721
Signing time: Tue 04 Nov 2025 08:00:10 +0000
Manifest this update: Tue 04 Nov 2025 08:00:10 +0000
Manifest next update: Wed 05 Nov 2025 08:00:10 +0000
Files and hashes: 1: 1-feNHEHoxAVzT15DqDBKqpRnimc.roa (hash: 9Yua0Iw095Y35K0y20x+VN7YpOWR+p0yztD1WINH47c=)
2: 3GIlAH2jmkjrzkMr8xA50guC164.roa (hash: xXO6utTVq05KsIWjlU+m3x4dft23WacAm19MsctwPAs=)
3: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: BgpScLxHs3yY5vAZSdBZ91wvHp/mR4o1H5sU1C6ELBc=)
4: IL1-VfzXKjMdnRwOeHWRvCba6do.roa (hash: R10MoKh5uMX0ghVEju60HL0CXkolK6vBA+Z5a/naeA8=)
5: L4Q7WjfcKdQ8CmWw4IQl1hCLiNY.roa (hash: A23/d2PZxyO/+hmzuzhwUae+7e+2M3snpbUPx16lhIs=)
6: Nn-caKWqxDsYGYS4deITO9z5CII.roa (hash: SvP+0fiOTnKdkSN+scro3CcRKv0nhE96wmndJk4XP2E=)
7: gBTX6rtk3VmnZ3B2jpAIDYetIds.roa (hash: 9P8zTI1kLcc7GPpGKJR5mrODeo55W0eiIG9cnwU/wvE=)
8: kDyvOnLZQzeKWmaZeleSC7tsL8w.roa (hash: GbNFAnU0pItUjpzB6Y7UDRf6GIn6EyzF7Cux5iLe9bY=)
9: uH8W7wZaxW_HHCHl_MLip0UA6Og.roa (hash: VC5miMPD+f8MyskvN+/iLqKFYtg3R/WiLzahDu8sebs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:6d:3e:0b:9c:2e:e2:bc:5e:ff:40:86:bc:ab:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Nov 4 08:00:10 2025 GMT
Not After : Nov 5 08:00:10 2025 GMT
Subject: CN=25baa4c5923887200a88a5e596a0c35b6341b290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:22:05:d5:2e:6b:d3:ef:fc:ff:1f:8f:c1:1f:
22:09:3d:60:3d:8a:54:d8:43:f3:9a:d5:08:fa:27:
74:35:65:00:14:a4:99:ad:51:a3:ca:8b:cd:d0:32:
24:0a:7e:58:72:0b:b7:03:a8:fc:d7:d5:99:07:a7:
8e:83:df:b3:a9:56:e2:7c:6a:1a:61:a0:c3:40:24:
c3:9d:6c:4c:36:50:7e:bd:78:7a:64:7b:42:94:d3:
ff:dc:5d:1f:88:e0:06:31:82:83:e8:06:ac:34:39:
11:8b:ff:2e:28:c6:31:ee:a8:8b:12:db:af:6a:64:
44:a0:d0:f1:51:84:19:b6:81:1a:a9:83:83:d8:a7:
77:85:55:f0:17:f6:57:f9:b4:7d:11:9d:a6:99:bd:
be:51:06:70:41:3d:61:6e:a4:40:6f:3e:0f:37:1e:
cf:52:f2:90:56:fc:ed:00:bc:76:8e:f5:d6:1c:1c:
9f:7c:e2:48:a9:aa:79:32:a0:fa:bc:33:2d:74:1d:
17:19:de:b6:1f:58:33:e2:d5:0c:ca:67:4b:00:91:
12:5e:4c:ca:77:19:44:d3:33:3d:56:90:43:c1:74:
99:9c:2b:5d:17:73:1b:0b:b7:7c:d7:ba:7e:ef:05:
a1:ba:13:e5:79:27:bd:4c:cc:32:e5:4d:0b:96:01:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BA:A4:C5:92:38:87:20:0A:88:A5:E5:96:A0:C3:5B:63:41:B2:90
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:eb:5c:36:e2:2d:6f:20:f6:00:40:ed:01:6a:27:e6:a8:0c:
69:dd:30:58:04:64:d9:30:2e:33:d5:8f:54:45:07:56:46:d5:
44:f9:9f:ac:04:e9:2d:fe:48:64:ff:a0:05:9d:41:fa:b9:01:
74:23:b6:7a:f5:35:27:12:86:89:d7:fe:29:b7:d0:85:25:5b:
96:39:67:d5:46:4d:39:a2:c1:ee:41:50:5f:9c:c3:c8:ab:c0:
25:6b:91:bf:85:74:a7:f9:4c:64:d4:ec:24:22:8f:7f:c0:f0:
bf:cc:a6:51:89:bb:25:44:66:d7:92:b8:f4:fb:99:a5:42:92:
b2:dd:d5:13:2f:f8:4d:69:5d:8b:5f:44:c3:fe:c8:ac:2d:84:
aa:8d:c5:58:9b:ae:1e:3a:7d:3c:56:75:84:d4:02:fd:6c:62:
f3:b7:65:97:74:7e:59:47:79:75:3c:37:a9:ee:4d:f7:d6:06:
40:25:10:86:12:f3:57:91:c2:93:e2:57:69:02:6d:93:04:ef:
52:15:b6:29:74:36:aa:a5:e3:59:9e:6b:57:46:4d:e4:f8:77:
ff:dd:32:07:0a:3b:a9:00:6f:69:e0:ea:b8:26:0e:f9:2a:43:
97:96:f7:a5:7d:bd:8a:74:a5:8b:c4:5d:5d:69:cc:5c:9e:3c:
22:00:7c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:07 2025 by rpki-client