Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
File: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft (raw, json)
Hash identifier: knryWHZ2KeSYNvuJO4jyTBB4Ucm1/k0C7twEFJOiHrE=
Subject key identifier: FA:E3:06:CD:C5:15:B5:51:D5:F3:AF:EE:8D:D9:47:E3:0D:76:22:08
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 019A4F2B9D58AD730C75F141089CCDDA04CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
Manifest number: 065E
Signing time: Tue 04 Nov 2025 14:00:49 +0000
Manifest this update: Tue 04 Nov 2025 14:00:49 +0000
Manifest next update: Wed 05 Nov 2025 14:00:49 +0000
Files and hashes: 1: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl (hash: 93WZZ4yAn2nCSiVUW+tbwNpO50kYn2sPrtJxtdvqyq4=)
2: V8rwHt-KBtkyfMDcY6GbBS5O3lg.roa (hash: VKRjbMp2cA/7F+gIKAoYPT0t4kmN1vcNg+P5YqdMBPI=)
3: vLkg6vsM00eiYmKWC5SDs25Gs0o.roa (hash: laQ0wIfMQs3t8Q/rYbMaQJvlRI3pM205xGMs2yoH4OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:9d:58:ad:73:0c:75:f1:41:08:9c:cd:da:04:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Nov 4 14:00:49 2025 GMT
Not After : Nov 5 14:00:49 2025 GMT
Subject: CN=fae306cdc515b551d5f3afee8dd947e30d762208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:db:a5:60:dd:75:f3:e2:d4:1b:78:db:58:
f0:99:2a:2f:14:19:4c:79:e2:4c:ac:a8:48:91:64:
81:f5:a1:c3:b9:05:cc:2a:62:da:ce:ca:29:79:33:
5f:5d:fc:e9:89:7d:62:e3:f7:a1:80:c7:47:e6:48:
95:87:74:3b:d0:38:95:96:38:85:6a:43:4d:04:da:
ae:2e:19:92:32:d6:75:57:75:4f:20:08:ac:95:83:
ce:3e:02:00:fd:84:b6:b8:f4:4e:b3:4f:ce:a8:96:
52:2d:52:ad:d0:f3:66:32:f6:6d:5d:86:62:64:87:
29:89:ed:61:fb:2e:7f:96:a6:64:31:51:24:3a:83:
d9:e2:c1:87:39:20:3c:8a:ee:f4:50:a3:0a:5e:eb:
97:aa:95:b8:6b:71:28:3e:5e:c1:4c:6f:81:18:f5:
10:cc:b2:e9:da:70:be:e1:bf:ae:f1:02:1e:81:69:
4d:c1:ac:8b:01:9c:d2:8f:37:89:7f:7a:ec:b0:48:
b4:47:6d:bc:71:87:f2:7f:38:9b:38:d0:e8:52:9d:
cb:6d:c4:d0:61:15:d2:82:02:07:2b:14:79:ee:1f:
49:46:63:37:27:6b:70:23:f5:55:56:3b:2a:97:8c:
18:59:98:5a:07:c2:6b:ed:f3:25:b6:4f:c2:bb:f5:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E3:06:CD:C5:15:B5:51:D5:F3:AF:EE:8D:D9:47:E3:0D:76:22:08
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:26:c0:42:f8:ab:15:5d:f9:1f:4f:2f:42:6c:17:4c:18:30:
94:af:7c:87:15:db:b1:65:ea:de:16:c7:42:f0:1d:f0:0f:7d:
7a:91:03:89:77:ff:e0:80:cb:56:2c:19:d7:e9:2f:f1:22:74:
8b:bf:73:c0:06:d7:04:11:4b:11:03:5f:77:aa:41:92:3a:b0:
b3:bc:60:48:f6:c1:bb:4e:e1:54:1a:73:c2:97:c3:a0:f1:6a:
fd:54:88:57:86:73:5d:dc:b4:6b:16:ee:92:f1:da:74:23:cd:
c4:d1:27:db:c8:8d:df:a1:2e:52:15:27:eb:d0:c7:3f:a5:39:
36:b4:3e:de:68:56:4d:cf:bd:c4:d8:11:bc:cd:f9:45:f4:1d:
31:28:85:62:19:e1:0e:c5:25:44:fa:4b:4f:40:75:b8:85:03:
8b:73:62:ae:5a:cb:a2:c9:c7:2c:df:cb:ed:78:fe:37:92:fe:
94:14:01:10:d8:94:a2:6b:0d:86:ac:6f:db:02:33:47:4a:f2:
7c:a4:1a:63:94:5d:d5:fb:57:49:34:b7:74:06:ee:80:8d:86:
bf:8e:df:4b:68:49:11:d8:7c:78:b5:e5:3b:25:1d:26:43:71:
aa:ea:41:11:28:37:0f:ca:15:aa:3c:97:e4:ba:86:29:a2:69:
19:19:43:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:09 2025 by rpki-client