Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier: eSrPeEOLpLf6g7F10Y8au9d5p0QrLQcW0x90tPTkxHI=
Subject key identifier: C1:EE:6D:A4:83:76:EA:A8:F7:1E:D3:E0:48:07:21:5D:AC:1A:D3:6A
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 019A571C33C2571D9AE6D66D28899ACF3716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number: 1716
Signing time: Thu 06 Nov 2025 03:00:57 +0000
Manifest this update: Thu 06 Nov 2025 03:00:57 +0000
Manifest next update: Fri 07 Nov 2025 03:00:57 +0000
Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: GKrUPkjNlLCmEdlamiLLhv+oG4I4lKuJlMQzzjiMs+M=)
2: EytKkp-cHU6YafCnB0z54OPcAnc.roa (hash: qXa8VJW5qO7AGM9oVgWuxQ8fPmA9SdZQmj6ClsTDzLA=)
3: SSk5EJ2eeCxHqtRI36s4YAa6XHE.roa (hash: Qy4Hae6uxNoX2t2wWLKuUW7INir6rrE0SB0/N7PGSAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:1c:33:c2:57:1d:9a:e6:d6:6d:28:89:9a:cf:37:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Nov 6 03:00:57 2025 GMT
Not After : Nov 7 03:00:57 2025 GMT
Subject: CN=c1ee6da48376eaa8f71ed3e04807215dac1ad36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:36:c0:58:3b:53:c4:2e:5b:c8:45:01:3c:
86:84:c0:f5:35:a4:2c:c5:ea:25:52:6d:16:d2:f7:
48:2a:b4:19:08:ca:9d:f3:7d:5d:49:09:77:dd:17:
4f:79:a4:31:f7:79:1a:23:55:17:a1:f0:6d:85:91:
e6:68:f8:f5:cd:07:fb:50:44:83:2f:62:c9:26:ab:
c2:f1:e5:f8:1c:dd:f4:34:c0:59:69:0c:32:80:65:
21:36:90:6d:b1:99:58:fc:a0:cb:a4:ab:e6:43:44:
d5:bd:de:5e:7c:0e:12:9b:a6:26:da:9f:48:b5:c1:
49:01:bf:bf:9f:79:51:28:5a:a3:e2:ac:19:fa:bb:
35:ec:3e:39:fe:65:bf:33:00:da:ab:89:79:4e:05:
80:e6:87:06:71:91:ef:4c:98:c1:5e:5c:9e:35:2c:
e1:32:02:23:36:75:55:dc:2c:62:51:15:eb:3a:44:
09:2f:ca:32:c7:1c:af:79:ea:c6:4f:89:f1:a4:bb:
5f:e1:d3:ce:fa:f3:a7:1e:33:83:8f:44:1f:8c:0e:
9b:c0:8a:e6:33:3f:f8:df:09:0e:3a:c5:29:be:d5:
6d:74:a6:e3:eb:33:d5:a3:63:e0:58:66:6c:e1:48:
cd:11:99:cf:72:88:1d:43:c6:94:28:69:29:e7:59:
89:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EE:6D:A4:83:76:EA:A8:F7:1E:D3:E0:48:07:21:5D:AC:1A:D3:6A
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f1:6c:ce:f1:9f:3e:0a:b6:2c:ac:9a:cc:73:18:41:7f:d0:
5a:a2:18:88:31:72:42:ed:a1:37:3c:8b:a2:dd:8c:a2:8d:a7:
69:98:b9:96:a1:b7:9e:c1:a5:53:15:54:46:8f:90:a9:e9:c4:
8b:53:e7:80:6a:8b:21:d7:dc:f3:af:57:32:a2:79:a6:47:dc:
ff:6a:98:5c:28:eb:14:48:0c:e3:12:d6:cc:a1:92:b9:3c:07:
26:46:2d:08:0a:9c:4a:24:fd:d7:dd:36:18:f1:8e:4c:df:21:
cc:14:80:bb:ff:f3:74:ed:76:f0:df:ef:b6:a0:e6:77:cd:9f:
ce:d5:cc:6b:19:f8:4e:43:8b:de:cc:eb:20:58:e8:4b:0d:a7:
a7:29:b4:62:81:02:9f:12:0f:28:58:ad:9e:d8:3c:01:6e:76:
ea:af:10:1a:13:bc:5a:be:28:61:c7:bf:0c:11:4e:13:ae:67:
57:d8:74:81:96:e7:2a:01:d8:1a:48:e9:43:2d:05:9b:22:7e:
82:5f:9f:ef:f3:88:59:f8:33:09:e4:39:ba:17:99:ba:21:00:
88:68:87:18:f1:0a:37:9f:d2:6e:8b:07:ec:03:7f:01:69:cf:
18:cb:26:76:ee:d8:a0:f1:fe:9b:57:21:d6:d8:76:c5:43:db:
ba:0f:00:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:37:03 2025 by rpki-client