Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
File: 7WtTyjBwQ0J-9OrInHfBuhP28C4.mft (raw, json)
Hash identifier: /O1IvXsTTDDt0e34XAy8TaZnDem3M6QXLgUhA5aaj2c=
Subject key identifier: 21:18:3C:BC:E8:58:2E:DE:D0:E7:DF:B0:08:AC:73:E1:9D:CA:9E:41
Authority key identifier: ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E
Certificate issuer: /CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
Certificate serial: 019A50E393DF4AC73D5058BDC1C5043187ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
Manifest number: 0D02
Signing time: Tue 04 Nov 2025 22:01:22 +0000
Manifest this update: Tue 04 Nov 2025 22:01:22 +0000
Manifest next update: Wed 05 Nov 2025 22:01:22 +0000
Files and hashes: 1: 7WtTyjBwQ0J-9OrInHfBuhP28C4.crl (hash: 2LoQPJN+4/XLCejbcHfFu6/o3ZKepApdEVdgoamMuh0=)
2: YUYJWAPlDAqYr8-D4VfN8LQLeMA.roa (hash: at6X5FWtDhfqKory2gk30h0rP9dNBcyxgRSPjmnHkpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:93:df:4a:c7:3d:50:58:bd:c1:c5:04:31:87:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
Validity
Not Before: Nov 4 22:01:22 2025 GMT
Not After : Nov 5 22:01:22 2025 GMT
Subject: CN=21183cbce8582eded0e7dfb008ac73e19dca9e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9e:88:e9:4e:dc:04:89:bc:b7:4f:1c:c5:ce:
f1:9c:b7:5a:fa:01:a7:fd:4b:98:06:9c:62:79:ac:
c0:a2:72:7e:9d:be:c8:02:d3:5c:95:67:41:31:3a:
a7:a4:09:a2:2b:c6:a6:f4:b8:b5:11:32:7a:15:6b:
1e:df:23:91:1b:9c:9f:3f:9b:62:3d:c4:54:c7:4b:
9e:b5:e5:66:e4:17:d4:74:6d:2d:33:f4:49:27:c0:
8c:60:44:ab:02:f6:3a:68:56:03:8c:d8:e5:6e:3c:
43:e8:10:60:3c:1a:24:fb:d1:c8:29:9d:23:58:55:
ba:f4:5e:ba:5c:d0:2c:3d:ca:f5:30:04:1e:26:70:
b2:d9:bf:5d:b5:53:e8:cf:97:ed:a2:5a:c9:02:77:
54:12:43:3e:fa:ae:d9:3f:24:45:ff:10:f7:0f:af:
62:8f:cc:c4:87:ed:9c:a4:55:cf:fd:5d:c5:64:e6:
a4:a4:a6:3d:80:c2:96:80:ca:6e:71:91:2e:40:17:
59:a9:8a:4d:1c:4a:e9:b3:1c:a7:f4:d4:e4:35:bc:
bd:2c:3f:68:70:50:b4:60:19:80:4c:ce:4c:0c:65:
9e:62:5c:0a:7a:bf:5d:67:f1:b3:6a:51:f0:c1:07:
f0:fc:4c:df:49:39:87:8e:27:85:45:33:51:7b:79:
45:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:18:3C:BC:E8:58:2E:DE:D0:E7:DF:B0:08:AC:73:E1:9D:CA:9E:41
X509v3 Authority Key Identifier:
keyid:ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ac:76:f1:97:a7:5e:09:3a:6c:ed:cf:51:98:60:3b:a4:50:
4e:03:63:5d:72:0c:12:ed:85:79:2b:d0:8a:78:91:04:89:51:
c1:8b:10:94:8a:0d:76:10:15:46:39:e9:68:00:a8:b4:3d:52:
9c:d2:fb:42:8e:46:c2:38:95:58:43:ed:4c:a9:fa:db:17:6c:
b1:17:e0:e0:d8:2f:15:a1:35:2c:e9:4a:f7:d0:70:6f:49:20:
d9:7a:c3:a2:ef:97:b1:74:c5:e4:3e:b0:77:7b:9e:b0:e0:72:
19:c4:b9:99:60:d2:1b:50:74:4e:31:a7:e5:5f:67:97:3e:79:
00:f1:4e:47:ca:91:fe:2e:08:0f:1e:af:ab:68:5e:7b:cd:57:
8d:1c:f0:75:30:81:ab:2c:20:56:a1:2f:40:4c:13:af:16:80:
e4:70:59:60:41:c4:93:17:07:ae:69:81:b6:53:d4:e8:7c:bb:
37:d2:18:d7:ae:b6:5f:05:76:96:dd:dd:d8:4e:5c:2f:93:6c:
11:b4:47:06:15:c0:ff:c8:7c:79:29:d5:c4:e6:88:47:79:8e:
82:1e:e4:ce:55:a3:50:38:ca:b0:06:8c:4d:47:5f:10:f9:1c:
4e:9b:02:2c:a8:8f:e4:9f:6e:52:e8:32:c5:e7:4a:da:23:7d:
a7:2f:83:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:37 2025 by rpki-client