Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
File: c7mBy27nnS34yJ1qNMVUveP8x18.mft (raw, json)
Hash identifier: 7gJImPm1GENjICR/cZKdCMTeTWfUoK2XP6MxJI1MWvY=
Subject key identifier: 55:4C:90:D0:73:34:0E:BE:BC:CF:80:8B:09:F0:67:EC:07:BC:05:CF
Authority key identifier: 73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
Certificate issuer: /CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Certificate serial: 019A50750D53ABCD0F3A68BE12A20D6B6980
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
Manifest number: 0AF5
Signing time: Tue 04 Nov 2025 20:00:39 +0000
Manifest this update: Tue 04 Nov 2025 20:00:39 +0000
Manifest next update: Wed 05 Nov 2025 20:00:39 +0000
Files and hashes: 1: c7mBy27nnS34yJ1qNMVUveP8x18.crl (hash: SN2fyv5inmissb09a0n22vgmozcIMVtmPHQwj5okhAs=)
2: pP7tyuuRn66UIb06Z8juPizzBlI.roa (hash: vMVBYtNtS/yDZwAn3TTK359AmlCLqfTH6tG5fmDA5mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:0d:53:ab:cd:0f:3a:68:be:12:a2:0d:6b:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Validity
Not Before: Nov 4 20:00:39 2025 GMT
Not After : Nov 5 20:00:39 2025 GMT
Subject: CN=554c90d073340ebebccf808b09f067ec07bc05cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e9:cb:df:3f:85:e8:2d:c7:16:bf:d6:14:36:
54:31:88:29:15:53:c8:c9:e7:3b:f8:22:c6:63:48:
09:f3:15:1f:7e:74:26:a8:91:02:aa:a0:4d:ab:b4:
c8:ed:d4:36:21:81:6b:90:97:43:bd:c1:b4:ca:a6:
e9:80:47:c3:0f:39:b5:e2:99:de:d2:41:0c:49:fa:
99:df:a3:b1:ab:37:89:69:6e:6e:f8:c7:61:fe:84:
1e:56:db:f7:03:bf:5c:6c:de:96:d2:24:be:71:26:
34:60:88:43:65:e9:2e:ba:a6:63:46:c7:96:c5:1d:
28:75:97:d7:39:65:20:4b:26:97:6d:91:5c:b4:ac:
94:63:d8:34:ca:c8:42:47:52:88:41:99:05:0b:00:
a9:46:7d:a5:d3:f7:69:fd:23:80:f0:65:ad:81:e7:
02:8c:fb:c7:96:c2:c7:0a:64:c9:9e:2b:a1:70:e8:
30:85:8e:02:e9:a2:6d:4c:45:2b:e7:5b:0b:17:34:
11:72:a4:25:c0:cc:4c:de:e9:cc:f0:1c:d3:eb:64:
b5:6f:ab:c9:70:f9:08:27:b4:3e:a5:ab:cf:1b:03:
01:2b:63:f1:2c:fb:44:eb:02:ab:10:f2:b3:02:2a:
12:80:2a:d7:b9:4f:5e:3e:c0:ac:cf:42:97:11:77:
21:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4C:90:D0:73:34:0E:BE:BC:CF:80:8B:09:F0:67:EC:07:BC:05:CF
X509v3 Authority Key Identifier:
keyid:73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:61:4b:82:8e:3a:b0:2a:2c:ef:9a:62:78:50:ce:db:41:5b:
ca:aa:72:9f:6e:75:7b:24:cd:cb:e5:f2:a0:28:a6:b4:86:80:
8d:66:b5:35:6e:db:f7:cd:0f:04:34:8c:f1:02:b0:32:eb:57:
f5:9d:05:88:cb:99:bf:32:8d:10:99:0b:df:a8:6f:39:2c:23:
fd:ea:9f:d2:00:bf:22:77:68:6e:47:7e:eb:8f:85:7f:56:7c:
6b:49:5c:a8:0d:5a:2e:c6:26:62:1f:e2:68:e6:a9:ae:62:6c:
e7:be:7d:a2:d3:6b:20:c7:81:67:e7:d4:02:97:12:8a:97:b0:
67:b5:97:4a:55:49:42:bd:26:da:d6:e2:c5:e5:d8:a9:0a:ae:
4a:d6:c0:bc:c5:fb:fd:ef:d1:60:7a:da:fa:a5:29:be:11:80:
ae:c7:2b:d5:4a:7b:43:4e:c0:7a:d6:fe:62:a4:30:cb:30:6d:
db:3a:ac:12:61:66:75:ed:fb:3b:3a:da:6a:c8:fc:05:fe:ec:
b5:24:8b:06:20:33:b4:99:13:55:75:b0:16:bd:66:52:69:57:
1b:29:9f:12:19:8c:a8:f6:b3:b9:f0:9b:c9:12:7e:42:fa:1c:
ff:db:46:19:6e:c7:6b:35:6f:ca:1a:75:ce:d1:8c:14:54:b2:
06:3a:6f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:44 2025 by rpki-client