Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
File: 7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft (raw, json)
Hash identifier: 0xlwwvEeHA4WMLH4YWTeUCB0gM33HBxp07blt6/XRfU=
Subject key identifier: FB:1C:90:60:DD:B2:93:A8:23:65:DC:9A:40:01:95:57:4A:3B:36:F8
Authority key identifier: ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05
Certificate issuer: /CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
Certificate serial: 019A51506F7C00F47D776B7DA5CFA3A88F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
Manifest number: 2A
Signing time: Wed 05 Nov 2025 00:00:16 +0000
Manifest this update: Wed 05 Nov 2025 00:00:16 +0000
Manifest next update: Thu 06 Nov 2025 00:00:16 +0000
Files and hashes: 1: 7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl (hash: hVjmfnDXLHEVvaBHGQSDNQWuRnOWPeUtFMvIG1GPajs=)
2: UljK_JUQC-ApOoQ4pETQI3VRof4.roa (hash: 9Sh2w5nvzyVvg3ugFiToGC0XPk8b1XugbQ07Osz40+A=)
3: hKXa70S3ljEorLxU2kzO1pY1eio.roa (hash: 3x8mJaBH6qD86fie9M/gP0ahSf8iI2csAz50I3eyjQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:6f:7c:00:f4:7d:77:6b:7d:a5:cf:a3:a8:8f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
Validity
Not Before: Nov 5 00:00:16 2025 GMT
Not After : Nov 6 00:00:16 2025 GMT
Subject: CN=fb1c9060ddb293a82365dc9a400195574a3b36f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:a4:55:0c:10:d0:c0:22:d8:57:b3:41:f6:
04:f6:f9:78:f5:0c:6d:46:04:be:3d:55:8b:3c:85:
7b:3a:f1:b5:b4:97:cb:8d:4d:c4:ba:08:c9:5a:b6:
3d:3d:9a:76:0a:08:c0:6d:e0:9b:5d:74:9f:f5:fe:
76:9f:7e:f9:6c:e3:53:a7:63:5a:88:60:99:97:e5:
c8:c6:8b:a8:2a:6f:16:44:fb:bb:ad:38:ab:3a:85:
54:d2:c4:77:a7:7e:2a:68:2d:60:a4:5a:0a:6a:f2:
ca:d0:72:b9:eb:96:40:44:48:fb:ee:d8:8d:a1:f5:
bb:08:54:46:9b:4c:9e:ee:c3:68:e9:d5:9a:1f:0d:
64:47:28:51:e5:ae:94:eb:55:78:2c:f4:1e:a9:f3:
fa:42:39:45:8d:ca:81:d6:cc:cc:8c:5e:7f:6d:dd:
9e:df:de:fe:39:62:6f:b4:80:22:b2:f1:de:7d:a6:
46:8c:81:64:f3:a1:d8:ed:d9:08:c4:09:3e:03:59:
be:2b:96:d0:64:80:db:15:fd:96:e2:a6:ec:99:fd:
65:a1:44:47:c0:93:af:02:d1:21:7b:74:b7:ae:8f:
ac:16:e5:bc:91:56:66:95:99:7c:c1:02:4a:81:ce:
1d:48:0e:b3:af:71:6c:69:69:18:e9:9c:30:9a:c6:
76:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1C:90:60:DD:B2:93:A8:23:65:DC:9A:40:01:95:57:4A:3B:36:F8
X509v3 Authority Key Identifier:
keyid:ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:eb:f2:66:ba:2e:9b:c9:a8:9b:ba:a8:38:d1:36:70:a6:b0:
41:4d:65:6a:e0:d9:bc:00:98:89:df:32:74:0e:83:68:de:7c:
00:18:e8:a0:1f:02:57:21:e8:e6:0a:f3:6f:42:94:48:9e:e3:
13:f6:04:4a:ca:8d:c6:a7:c8:70:04:aa:1a:5e:a0:9c:eb:f3:
f6:7c:64:78:46:8c:b0:3d:77:59:5e:56:1c:b9:33:37:41:89:
7e:94:2f:9c:24:00:6e:4a:11:05:9b:59:9b:88:f3:bd:2d:f1:
0e:b0:39:0d:a8:6a:68:c6:93:f9:3a:e7:12:7f:74:f2:a3:d6:
1b:c6:04:02:ba:b1:f2:73:a7:08:2e:e3:85:e9:b7:c7:a9:45:
ce:27:7d:a5:ec:59:20:dd:58:b5:cd:f9:82:3c:49:af:ed:4d:
e9:7a:4e:4e:29:33:18:d1:93:7c:73:dd:b1:d7:92:e6:8c:d7:
9c:b2:30:80:ad:b1:a1:8b:a6:f5:bc:a7:be:cd:23:5d:b8:31:
79:a8:d7:d2:8e:c1:5e:17:4a:ec:aa:b3:5d:d6:2d:22:02:66:
ba:a4:7b:3d:a6:15:43:30:83:1b:cc:ce:46:bf:4c:8c:3b:32:
d2:c2:4a:0b:e1:f8:06:4e:f5:76:a4:0a:4a:1c:00:98:7d:ee:
e5:af:21:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:37:17 2025 by rpki-client