Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: UQmtH7k4MCIWnSLwBe5n9TFNPSIT+czBb2tMNJX/DlU=
Subject key identifier: 9F:FD:0B:64:54:96:B6:A3:F1:78:4E:1E:1A:AB:43:14:C6:F7:8B:10
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 019A53AD1325FC3C8F36EC87E8AAC3B5E462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 119B
Signing time: Wed 05 Nov 2025 11:00:42 +0000
Manifest this update: Wed 05 Nov 2025 11:00:42 +0000
Manifest next update: Thu 06 Nov 2025 11:00:42 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: GpgSoA9k5Swf+YmMkKyXiwEk2BG50V90NC44ujIPXlc=)
2: 8IeUbOwS853SmApxlhlEYT9gqJU.roa (hash: rGq2PKCmYf+7DCOarfnzmeAZXnBOsSkimboD75gDmOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:13:25:fc:3c:8f:36:ec:87:e8:aa:c3:b5:e4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Nov 5 11:00:42 2025 GMT
Not After : Nov 6 11:00:42 2025 GMT
Subject: CN=9ffd0b645496b6a3f1784e1e1aab4314c6f78b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e0:33:88:60:5c:7c:da:bb:08:de:d6:b1:fb:
23:ab:84:69:cd:12:fe:3b:a7:6d:7d:5e:b2:90:ee:
46:ec:a9:6e:cb:03:70:ce:fb:43:37:be:fc:ea:52:
83:c7:46:73:62:85:e5:4c:5a:07:bf:2e:52:81:6f:
fc:8d:05:a6:93:08:17:6d:1c:3d:cb:76:7d:33:44:
7e:d9:ad:89:27:df:92:6f:7a:ad:41:f6:36:bf:f2:
0a:a6:9c:a2:74:7a:14:17:3c:93:bc:ba:db:ff:98:
a5:22:ca:5b:e7:d8:5d:d4:9a:d2:d4:3e:9c:48:93:
3f:72:79:13:f2:3c:46:b6:44:ab:d5:c3:93:93:5a:
51:20:e6:e0:9f:1b:79:1e:47:93:76:88:5e:e8:35:
a6:f4:7a:df:6d:d8:0d:13:3f:1b:94:b9:5c:3d:74:
6e:f6:65:d6:11:91:fe:99:1c:bb:a1:34:0c:b2:b4:
96:b0:91:de:1a:93:06:4b:d7:00:6a:ca:f2:7f:30:
69:d8:c9:6f:1b:4f:a5:d4:b7:6f:46:93:bd:d5:93:
42:27:b4:ca:07:2a:57:5c:77:c1:f2:97:00:fb:3e:
cd:60:64:7c:8e:41:73:e0:ad:01:99:e8:74:f2:d7:
d2:bb:5f:b9:85:d4:1f:95:63:3b:39:80:91:78:af:
47:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FD:0B:64:54:96:B6:A3:F1:78:4E:1E:1A:AB:43:14:C6:F7:8B:10
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:95:80:91:e7:91:87:79:94:25:8e:61:b0:3b:b7:86:51:9b:
e4:cf:22:99:d1:80:32:c9:93:71:b0:8d:6a:12:4a:27:33:35:
2a:43:27:6d:46:78:f1:c9:16:dc:4f:f3:0a:8e:eb:78:8f:15:
00:23:2d:6c:73:0f:6e:65:ff:1e:22:31:87:14:51:cd:2a:43:
cc:31:d3:e2:e0:75:ea:39:13:e6:53:aa:8b:23:04:63:72:22:
4c:7f:22:fc:5c:50:bc:d5:38:fc:16:f4:9f:14:c6:4e:5e:07:
49:28:69:b9:cd:eb:c9:35:7f:4f:74:f0:89:9d:9f:60:5a:fa:
5b:ca:63:c3:1b:01:62:6a:57:cb:28:79:fa:10:ac:da:e5:84:
c2:ed:0c:48:79:cb:84:1e:2f:eb:9a:d8:17:0f:66:3b:19:94:
18:38:d5:61:c4:0a:a1:9c:b0:11:53:04:87:ea:a6:ba:82:93:
ef:d2:5f:bb:ef:af:9b:4b:cc:aa:f1:f2:38:00:88:59:6e:37:
d4:7a:b1:09:e9:2f:f0:65:78:be:7b:28:62:d8:92:bb:ce:7d:
c1:dd:ab:25:bb:10:11:e8:c2:e7:ee:53:75:b5:45:a7:0a:df:
3b:69:a6:9e:1f:e1:84:a0:6d:88:ca:87:18:ac:2f:53:15:b2:
ae:05:9a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:59:07 2025 by rpki-client