Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
File: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft (raw, json)
Hash identifier: AqGMv/mrNekOP0t0ESv4HR6r2sTluTPXPi/d+jytWbE=
Subject key identifier: B1:42:24:2A:86:D2:57:CC:76:7B:C0:7D:C8:9E:FF:BE:F0:07:F9:25
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Certificate issuer: /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial: 019A4F2B00597A34F2376466D40B09F8D4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 14:00:09 +0000
Manifest this update: Tue 04 Nov 2025 14:00:09 +0000
Manifest next update: Wed 05 Nov 2025 14:00:09 +0000
Files and hashes: 1: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl (hash: 4QEERB19y5pKyjXW3SKr4ODRPmjiZ20L2VOY3Te57yA=)
2: EiUuk_NOU4Yk3nk2nn56zZabZvk.roa (hash: 6qv2yhWzsdq9RqBF8lz3ldQ0Ka6+KKmmMeovRbBrbQI=)
3: MBu8VTmpr04x0tshZWj7vlWVLfA.roa (hash: ulHARLad6WzWUuYeIJe/P7G2yuuz8lPKXAfu9iAhsvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:00:59:7a:34:f2:37:64:66:d4:0b:09:f8:d4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Validity
Not Before: Nov 4 14:00:09 2025 GMT
Not After : Nov 5 14:00:09 2025 GMT
Subject: CN=b142242a86d257cc767bc07dc89effbef007f925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:82:31:c6:b8:f4:30:f7:fb:a3:af:fb:57:
b1:fc:82:10:9b:35:6c:96:ab:8b:eb:54:e1:8a:cc:
dd:7c:61:1d:43:44:2a:b3:0d:7a:c2:01:69:a8:f7:
59:ff:b7:ea:1d:96:ac:a8:9c:93:e4:d5:2b:85:11:
2a:db:51:d8:66:8b:85:e8:dd:e1:af:95:02:1f:64:
d4:51:1e:a5:ed:84:ec:41:e1:43:fc:d7:dc:a1:b8:
be:92:b1:56:63:ce:fb:f8:e9:49:20:18:41:f5:e0:
86:2d:c7:b6:73:84:27:43:0f:bf:49:70:34:c9:90:
4b:05:77:ca:58:bd:44:ed:2e:48:4b:94:52:bd:b6:
86:66:bd:a1:e3:cc:68:8b:4d:8a:95:dc:6c:3d:35:
69:43:da:5e:7f:1d:06:9a:97:41:3a:f0:07:6a:55:
e6:5b:db:3e:d1:76:61:08:60:52:99:e0:92:9e:ae:
5a:74:e2:f2:14:e7:7e:03:1f:fc:87:bd:da:10:51:
f4:66:c7:87:5d:cb:6b:c4:7f:f8:3c:9f:f4:a8:db:
ba:03:71:92:9d:ba:4c:72:96:ef:c8:42:b4:1f:1b:
c2:0b:11:43:b1:e1:4c:cb:fd:58:55:39:ca:73:2e:
56:f2:af:26:66:d3:8f:4b:86:6f:29:3d:d4:14:2c:
fe:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:42:24:2A:86:D2:57:CC:76:7B:C0:7D:C8:9E:FF:BE:F0:07:F9:25
X509v3 Authority Key Identifier:
keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fc:84:b3:ef:94:f6:e3:3c:42:ac:94:a2:d5:ce:ad:23:c3:
5b:e0:db:9a:77:9e:29:07:a0:b2:e0:77:65:79:c0:db:10:51:
59:bd:b2:14:45:fd:5c:17:5e:df:4e:9f:8b:e2:20:6c:18:e7:
bc:d7:94:74:d4:03:5a:ef:3a:a1:ee:79:e0:d2:e4:c6:05:f9:
ad:e1:35:87:a0:d5:6b:bc:c8:0b:40:49:d6:40:2c:ce:9e:72:
b9:9c:f7:fa:a6:3a:36:4b:29:05:8b:ea:54:58:62:a0:c5:29:
d2:67:83:f2:42:f6:ec:34:0f:d2:ce:f6:be:b3:d0:c0:c6:fd:
ec:94:f1:89:af:f2:a1:b6:de:c5:5d:2e:fb:a1:7c:a6:b8:e2:
9c:22:1a:c7:6c:97:57:2f:2d:e8:53:8c:76:70:a9:97:d4:ec:
e5:6f:80:2c:f4:7c:7b:9a:c7:ca:c0:3c:bd:0f:69:3f:58:c9:
ff:45:d6:01:e4:f6:9c:31:41:d5:8d:fd:3f:7f:23:9c:74:7c:
40:93:53:be:79:8e:f2:1d:49:dc:90:de:55:37:e0:3a:95:aa:
0d:e2:3d:16:d0:0d:95:ad:ca:32:9f:17:4f:8e:bf:a6:ec:50:
f6:38:88:41:93:ad:0a:d9:d3:dd:fa:8b:41:b1:f1:2b:8a:ea:
f0:2c:a3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:29 2025 by rpki-client