Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
File: 7jcJhfg_QTMBEcNQzWseHurVJqo.mft (raw, json)
Hash identifier: +8SuWGokgMmDUMfUqhoW0fYLuTMxigtpjEDGKaNuq88=
Subject key identifier: 9A:B4:D7:53:9C:0B:8D:C6:30:40:F7:7D:E9:22:EC:0C:77:F0:DA:3F
Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
Certificate issuer: /CN=ee370985f83f41330111c350cd6b1e1eead526aa
Certificate serial: 019A4F61E78D308F17202BE4F209191E8D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 15:00:07 +0000
Manifest this update: Tue 04 Nov 2025 15:00:07 +0000
Manifest next update: Wed 05 Nov 2025 15:00:07 +0000
Files and hashes: 1: 7jcJhfg_QTMBEcNQzWseHurVJqo.crl (hash: wQY4yrYEfgr7+BvpJpj0/0IEk1G2KnphIHfg3hvNC3o=)
2: Vhh-HEWHbYSTjQgTrRsDTKlOjO0.roa (hash: nZHSxicdSyoslUfdZCmnypTUsy3rNzow8v41t9pPW+0=)
3: cXrx1ROqbRYTJpBaY9JfsPVk3Ow.roa (hash: e0I94SNdLBs+vaXUAirpLtLE8FeKHQEH/NhmFQRxO+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:e7:8d:30:8f:17:20:2b:e4:f2:09:19:1e:8d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa
Validity
Not Before: Nov 4 15:00:07 2025 GMT
Not After : Nov 5 15:00:07 2025 GMT
Subject: CN=9ab4d7539c0b8dc63040f77de922ec0c77f0da3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:5c:1a:1e:59:29:06:dc:7e:4b:19:10:42:
d9:1f:47:f1:79:0e:f6:47:6e:68:c3:2d:f1:8b:90:
31:85:02:09:db:98:ab:9a:cd:34:6a:76:32:56:c2:
a2:e7:d8:d9:e0:01:c8:5b:e5:98:d5:35:8b:4c:98:
2a:9c:71:e2:11:f9:aa:c1:c3:fd:db:3c:a8:78:2d:
85:f0:d9:64:77:85:5c:3b:88:b4:3e:b4:12:16:78:
5d:92:94:dc:23:f2:a1:4d:6b:7d:ea:51:dd:22:f2:
35:54:09:a7:7f:7b:4b:b5:4a:16:7d:94:bf:05:43:
19:f1:80:4b:8f:4f:4a:31:08:f7:0b:40:5e:04:ca:
6f:01:49:5d:0e:42:eb:43:1a:88:fd:35:ac:e3:3e:
49:06:13:a0:0d:e6:01:21:4c:eb:87:15:82:95:83:
a5:ca:9c:e9:34:af:b4:01:12:6c:46:f5:d7:ea:42:
d0:40:1c:da:68:3a:22:f3:84:29:f6:cd:c4:4d:ce:
06:96:e4:87:f5:75:f3:2f:e6:16:56:40:f2:aa:ef:
42:9e:62:84:ea:a1:a9:eb:9a:f1:84:39:ed:fd:51:
43:2d:4b:c1:b2:6d:5e:37:f6:ba:f1:31:2d:df:13:
aa:5c:a4:13:bb:56:3d:87:0d:12:da:7b:de:af:fc:
cc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B4:D7:53:9C:0B:8D:C6:30:40:F7:7D:E9:22:EC:0C:77:F0:DA:3F
X509v3 Authority Key Identifier:
keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:85:e3:23:99:33:ca:de:e6:4c:61:3d:b2:7a:dc:c7:22:95:
e4:19:bb:f5:99:1b:5c:cf:83:ea:13:7a:9b:10:94:e9:7b:63:
ba:df:41:52:65:2e:f9:93:33:f2:46:fa:30:12:a0:f5:29:eb:
59:e2:af:48:32:be:ef:c5:ee:fd:72:d6:74:8f:31:57:c3:51:
79:d7:50:b5:51:7c:58:f8:86:ca:7f:1e:9d:f9:6c:4d:55:48:
7f:3e:71:f8:32:db:e1:cb:8d:2c:b9:1e:7d:35:53:cd:75:b5:
4b:52:ff:c3:e9:66:98:f0:11:9d:fe:a8:b8:c4:1e:9e:1a:29:
3a:30:c8:8c:63:81:55:ab:3b:6b:81:91:0f:2a:14:d9:10:2e:
d0:8d:64:9a:50:11:8e:05:96:f3:99:dd:c1:2a:6e:bc:8c:a3:
66:78:fc:78:09:c0:66:53:95:2e:e2:2d:40:cb:e9:7b:89:a2:
15:eb:77:a0:db:c1:12:44:b6:db:fd:e3:8a:e7:07:9e:1c:e8:
c2:a3:26:ea:84:8c:0e:f1:31:80:40:44:68:b0:7a:aa:7e:7a:
67:f9:79:85:27:29:78:52:ae:8c:1a:61:25:d4:86:01:a5:37:
8c:26:72:6b:73:37:d7:94:99:38:13:65:b5:67:1f:2e:ac:88:
cd:47:e1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:46:13 2025 by rpki-client