Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File: 7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier: njFg1nZdQfD7Ro/fcjnLCgtSO9tddINBnel1dnyjlA0=
Subject key identifier: A7:3A:A5:50:86:B0:02:79:07:21:80:E3:FA:CC:16:C5:99:EE:17:EE
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer: /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial: 019A4FD05F158061DE74CC249E9015C45362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number: 0B73
Signing time: Tue 04 Nov 2025 17:00:47 +0000
Manifest this update: Tue 04 Nov 2025 17:00:47 +0000
Manifest next update: Wed 05 Nov 2025 17:00:47 +0000
Files and hashes: 1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: dxhu6lHpqSEJF3Dzkdy88JdkBktwOazaCiPJ5e4kNOU=)
2: mx5KYeLzr9lyOwTUvCRgpGpeZ4E.roa (hash: lpv0D5SfwmuFWskD1jXdGqPckfHmRNfDU4m+hRisO84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:5f:15:80:61:de:74:cc:24:9e:90:15:c4:53:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Validity
Not Before: Nov 4 17:00:47 2025 GMT
Not After : Nov 5 17:00:47 2025 GMT
Subject: CN=a73aa55086b00279072180e3facc16c599ee17ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:bc:58:65:af:fe:80:fe:9f:c0:37:2c:68:
da:fc:6f:48:40:1b:12:2b:c1:f6:0d:26:24:59:4c:
05:99:e8:09:7e:3d:1e:5a:34:15:82:64:32:a8:fe:
f3:20:a2:2c:1e:d3:db:24:ad:7c:b4:f8:14:dd:ac:
1e:31:57:c6:f4:4c:68:13:39:e2:63:bc:1f:02:cc:
bf:44:92:ca:19:6d:07:5b:30:fd:41:45:e4:82:8f:
cb:a2:cc:ea:22:ef:19:1b:c2:a9:b3:93:12:80:2c:
25:7b:ba:f8:89:88:0a:90:c6:3c:71:43:48:07:d3:
60:87:9e:32:33:a0:00:9c:02:e1:84:0f:fa:e0:1c:
b4:35:28:c2:60:0c:78:f0:37:ac:aa:b2:7d:e6:63:
b7:c4:82:c2:94:8a:af:c9:8b:26:28:66:61:dd:58:
a6:14:ea:c4:f1:a2:6b:da:23:32:3c:db:71:2d:db:
8f:25:82:bc:8b:6e:1a:6c:52:9c:d5:9e:05:f7:64:
b2:1b:8b:32:42:54:c5:71:67:c7:da:38:0d:ca:16:
bd:27:e0:a2:06:d6:ac:65:76:a6:6f:8f:09:92:81:
7f:b7:a7:08:d4:3c:65:67:b7:eb:09:6a:1e:4b:63:
4e:f6:6c:45:51:3f:46:37:ea:a8:fe:ef:cf:62:bb:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3A:A5:50:86:B0:02:79:07:21:80:E3:FA:CC:16:C5:99:EE:17:EE
X509v3 Authority Key Identifier:
keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:9e:56:63:6b:16:62:1f:16:a5:81:af:d4:56:9d:75:5a:10:
e3:4f:23:fc:a6:9c:27:f3:48:26:5e:76:33:6b:14:6c:89:63:
ca:7d:58:24:a6:3b:30:45:70:68:f5:6a:80:e4:27:19:78:36:
37:98:bb:d3:9e:d8:83:85:e6:4e:63:4a:15:6c:84:87:69:ba:
f2:55:b2:22:c2:a5:a1:be:e7:63:24:21:c9:cd:1a:af:68:ab:
d0:a8:9e:1a:3b:c1:f1:fa:18:2b:b4:c8:22:b8:46:7c:98:11:
6b:80:ff:2c:b7:a7:94:1d:3f:4e:58:97:68:c4:b1:3e:23:1c:
17:83:2a:4c:f1:ae:7e:8b:43:53:d9:96:83:76:02:8e:23:41:
c1:79:eb:0d:02:b0:0c:60:43:c5:a4:4f:f1:6c:fd:ac:98:77:
4d:d8:b8:64:98:6b:18:e3:14:59:ce:a4:2a:94:f8:8c:26:5c:
28:a5:69:d4:a8:96:3d:b5:2f:c5:db:c6:e4:9c:7c:58:37:31:
67:94:9f:58:2f:5f:45:26:70:df:b5:9d:50:95:59:27:0d:04:
75:2d:f7:56:39:f3:ac:a2:c8:d2:ab:24:ca:68:09:1d:91:9b:
2e:92:84:93:09:d2:e1:57:bb:58:b3:fd:a5:cf:0a:39:14:9c:
58:04:96:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:11 2025 by rpki-client