Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
File: t7Z7pXn0ikIHrECav08BGUBG6jo.mft (raw, json)
Hash identifier: /rTII7ud40gWotCgtLuNVwNWADhLn0y8xdSmCUszP60=
Subject key identifier: 59:93:71:09:EE:5A:3A:0A:AE:90:5C:CA:1C:BF:CF:44:1A:F8:82:B9
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Certificate issuer: /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial: 019A4EF5DBABA55356C4F141D719FE97F525
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 13:02:06 +0000
Manifest this update: Tue 04 Nov 2025 13:02:06 +0000
Manifest next update: Wed 05 Nov 2025 13:02:06 +0000
Files and hashes: 1: k-hTaQknXDp2DKuP6vvaZN3brec.roa (hash: IoaNc7VRuQAEFnNwpBORifvWy2POOqQygfpjoy01lPY=)
2: t7Z7pXn0ikIHrECav08BGUBG6jo.crl (hash: NfkOEGki1EMBqdxwTje6WTHH1PLwOUfd9Bf5ob6Divw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:db:ab:a5:53:56:c4:f1:41:d7:19:fe:97:f5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Validity
Not Before: Nov 4 13:02:06 2025 GMT
Not After : Nov 5 13:02:06 2025 GMT
Subject: CN=59937109ee5a3a0aae905cca1cbfcf441af882b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:ce:6c:f9:fb:b1:7b:f2:d4:f3:3f:93:1b:
19:71:2a:c1:d0:5f:fd:61:04:0e:06:01:51:1d:c2:
b5:57:e7:6b:aa:97:12:38:bf:9a:4f:0f:41:fc:83:
04:42:20:06:55:f3:0e:07:b8:00:b4:6b:c8:d7:c8:
17:f8:4b:24:4d:2a:c5:97:0a:25:d3:8f:3e:29:23:
60:24:ec:cb:29:53:00:41:51:ce:13:6d:ad:34:ec:
91:49:0f:ee:46:ba:97:3b:3a:0b:e6:19:c4:8d:e9:
2b:73:f3:92:8b:a2:33:5c:e8:a1:15:6f:fb:9d:58:
b5:3d:cf:7a:58:eb:7a:07:f1:f8:bd:01:c6:f7:64:
76:cf:fd:f4:31:74:bd:86:80:91:e4:c1:2b:9a:0d:
85:36:f7:4f:30:3f:7d:2d:92:19:14:e4:84:08:e5:
82:9b:e7:98:c5:04:28:6d:7d:6b:bc:6d:dc:a0:5b:
46:1d:aa:29:45:3c:1c:76:1b:6a:9a:2c:48:ad:ee:
72:07:4f:e1:1a:f2:81:d2:92:e4:ed:94:4f:65:90:
68:a6:7f:70:f2:e1:51:9a:3f:c1:77:6e:7f:18:d2:
87:dd:08:19:99:2f:dd:91:cd:ba:18:6e:73:18:cf:
66:19:53:f8:df:2e:95:63:9a:ba:3a:3d:4b:4b:02:
b9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:93:71:09:EE:5A:3A:0A:AE:90:5C:CA:1C:BF:CF:44:1A:F8:82:B9
X509v3 Authority Key Identifier:
keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bb:9d:b8:8b:20:2c:a6:d3:89:1a:a0:aa:88:05:98:11:68:
41:84:4d:c3:7d:64:bb:57:3c:4d:4f:3e:f3:26:5e:72:65:a6:
b0:c2:20:67:ca:a4:11:51:29:5a:9b:e0:ba:76:7d:dd:4d:fe:
d5:f6:e9:97:8a:d6:38:25:2c:17:35:98:1c:8a:87:f1:21:e8:
31:46:4c:73:51:ea:66:1f:25:fa:68:0a:ec:c8:3d:74:75:3e:
24:9e:b2:8c:68:21:9d:73:f3:27:2e:da:33:4b:16:77:27:df:
82:c0:56:f4:b0:a4:f3:7c:1a:37:19:f4:e7:38:85:02:82:97:
5d:3a:60:09:47:13:21:59:c4:40:e7:83:4c:c2:47:0a:8e:16:
bd:4e:c6:ba:66:45:ee:b0:0d:02:83:d1:ca:27:0a:f2:a5:e1:
2a:99:19:08:46:c7:ac:75:65:6a:ca:eb:22:07:ff:c6:8b:94:
7e:f4:41:33:0c:05:03:fb:96:7e:ad:d4:39:70:e8:00:36:07:
91:45:03:6f:dd:c3:91:75:30:85:73:eb:12:6b:05:03:89:ab:
99:66:5c:27:09:2d:bc:4b:b6:3c:8e:82:7f:ec:68:9e:bc:fe:
47:b4:fd:29:2a:ac:f9:b1:1a:ff:10:89:0b:ed:31:80:e7:6a:
5a:1d:3f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:24 2025 by rpki-client