Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
File: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft (raw, json)
Hash identifier: 6DR54gFrtURZKtjJUNAjvJhvXnoyUwt1al1ucqPwtV8=
Subject key identifier: A2:80:6B:46:EA:96:9C:D9:9D:96:EC:06:97:52:1F:15:DF:9F:A7:21
Authority key identifier: EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
Certificate issuer: /CN=ee28d94d484033f77e6f9381a02da3e242167dae
Certificate serial: 019A533F6303C548EE0CF67A22F9896C1AC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
Manifest number: 0290
Signing time: Wed 05 Nov 2025 09:00:54 +0000
Manifest this update: Wed 05 Nov 2025 09:00:54 +0000
Manifest next update: Thu 06 Nov 2025 09:00:54 +0000
Files and hashes: 1: 7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl (hash: xVLZqG9GKa6KmcN+QpHS0p1TV5F7UOthztGYJKshFDs=)
2: Br2XYkCHvC72aVRHi890y0oAZCY.roa (hash: liAUc/8jtKHDJtMd1Lz3Ey9Fi3Fzo3UvTBAa+7u1hUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:63:03:c5:48:ee:0c:f6:7a:22:f9:89:6c:1a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee28d94d484033f77e6f9381a02da3e242167dae
Validity
Not Before: Nov 5 09:00:54 2025 GMT
Not After : Nov 6 09:00:54 2025 GMT
Subject: CN=a2806b46ea969cd99d96ec0697521f15df9fa721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dd:97:57:7f:c3:9d:7b:9f:82:cb:9a:11:cc:
98:c9:d1:e5:db:c3:f8:15:55:bb:72:56:fa:94:a5:
32:e2:a7:0b:a4:74:08:19:5a:0a:ce:3c:dd:8a:3f:
e8:af:3b:d9:e8:67:f9:d9:4c:f0:66:26:1a:8b:8a:
95:a9:1e:60:c4:47:c1:6f:9b:fd:b5:8a:e3:8e:97:
65:d6:47:b5:0b:11:0f:fb:f0:ad:d4:d1:2d:02:9f:
d3:a7:29:07:6d:12:10:d4:7b:43:55:36:65:db:92:
b8:21:a2:09:97:1e:b5:d7:b7:74:4f:14:6d:8a:81:
20:4a:b1:26:c2:60:70:5e:b2:28:4f:da:45:36:84:
46:4d:23:8a:4f:d4:0b:39:3e:60:f7:32:29:4e:31:
ee:84:5a:a0:ae:24:39:0d:9e:62:d4:97:fe:76:15:
7e:35:a9:e3:73:c7:ab:b3:c5:ae:5d:8a:e6:fb:5a:
c6:bd:f4:4f:a2:94:0a:65:ab:b8:fc:28:51:94:c4:
29:27:ca:e0:6c:7f:1f:0d:23:d1:a1:f0:23:7e:b4:
1c:88:f6:d6:5a:de:5c:a5:20:de:c1:bc:1e:af:a0:
36:86:7d:50:ef:d7:2e:13:5c:b9:5c:c7:1f:42:11:
e5:16:61:a2:26:81:e3:ed:3d:71:c8:4e:77:3b:da:
ec:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:80:6B:46:EA:96:9C:D9:9D:96:EC:06:97:52:1F:15:DF:9F:A7:21
X509v3 Authority Key Identifier:
keyid:EE:28:D9:4D:48:40:33:F7:7E:6F:93:81:A0:2D:A3:E2:42:16:7D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ijZTUhAM_d-b5OBoC2j4kIWfa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eadbf8-8e44-4271-a72b-0c756fd248c8/1/7ijZTUhAM_d-b5OBoC2j4kIWfa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7b:aa:a4:f1:38:83:04:96:f9:3d:2b:9a:8e:e1:30:56:84:
e9:b2:9f:b1:6a:12:dc:cf:75:29:d8:a4:c5:78:08:65:f5:df:
1b:3b:27:51:8e:64:70:ee:ec:44:82:cf:aa:62:45:bd:65:77:
72:da:e1:2f:77:98:8c:36:ac:a9:64:72:d3:74:fe:b6:4b:c1:
c0:3c:53:04:49:83:be:8b:45:3c:de:ad:bd:17:c6:ae:2b:e2:
3f:cc:1f:f3:38:5a:c8:1d:fd:60:c4:f4:97:a8:7d:b6:10:0e:
1c:c2:bc:a1:0a:d5:29:8e:25:d1:27:b4:99:2c:eb:d6:16:2a:
7c:dd:70:bf:94:c0:fc:e1:12:08:08:3d:4f:fa:fe:63:85:66:
88:39:9b:d6:23:89:43:2f:77:0c:06:8a:ca:56:e5:3a:32:99:
73:fb:f1:b0:c3:60:d8:fa:39:ad:0b:71:bf:00:2c:d1:17:eb:
16:d0:66:21:e1:f7:c3:0c:9e:cb:f5:90:52:db:e1:ba:df:60:
e2:b3:54:d5:e5:c5:2b:59:de:6f:bd:fa:22:8b:0c:73:79:c0:
f2:04:d0:e9:c8:19:2a:26:1b:98:84:42:fc:99:49:ad:f2:5b:
ce:de:06:75:b3:e3:67:7a:d9:dc:7c:59:71:d8:24:29:60:89:
6c:47:2b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:42:37 2025 by rpki-client