Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
File: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft (raw, json)
Hash identifier: KepkGOYdyJRKHsGLuwHGTuvEdR8/GGn5bqvTuKqeD4g=
Subject key identifier: 76:F8:8E:89:BE:77:01:0E:A4:DE:1E:1F:40:34:2B:90:5E:33:DE:0A
Authority key identifier: EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
Certificate issuer: /CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Certificate serial: 019A4E861DE2DEA2496FB1AECBEBD38ACF5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 11:00:03 +0000
Manifest this update: Tue 04 Nov 2025 11:00:03 +0000
Manifest next update: Wed 05 Nov 2025 11:00:03 +0000
Files and hashes: 1: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl (hash: deKFM5IeLaIOgAtfOtgH2wze2bvP6fG/joRqxd/tP9o=)
2: qrPDrPXSwyvVn-Qdl0rfUFtGg50.roa (hash: YwVpe+VwfLyswPBaEHJ3Hi4HwV3yhmlk88pkGuhRl44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:1d:e2:de:a2:49:6f:b1:ae:cb:eb:d3:8a:cf:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Validity
Not Before: Nov 4 11:00:03 2025 GMT
Not After : Nov 5 11:00:03 2025 GMT
Subject: CN=76f88e89be77010ea4de1e1f40342b905e33de0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e0:8c:75:85:e4:79:02:05:7f:a1:00:c2:c0:
83:a0:51:44:84:38:e8:34:a9:e3:71:c6:fc:c3:89:
12:61:86:ec:7b:9c:ed:a4:c0:a0:3b:f6:7e:64:76:
9d:be:1e:03:9c:ad:db:0e:68:c2:6f:34:41:ae:7d:
6e:f4:d1:73:13:2a:04:d5:63:93:fb:fa:8e:75:16:
59:76:22:c4:dc:b7:79:52:3a:86:a8:da:6a:3f:76:
85:df:d3:bc:2a:d8:d2:6d:48:78:d3:45:b1:8b:17:
48:4f:e1:05:f9:da:fd:39:34:83:66:39:be:07:24:
0d:5d:80:40:01:d5:d6:80:74:61:ed:89:d1:aa:08:
6f:24:71:46:75:0b:b1:d2:0e:47:93:ad:f3:53:84:
cf:a3:7f:4a:3a:09:99:1e:37:e1:48:da:13:ac:d4:
1d:6f:bc:65:0b:24:d8:96:06:d9:7a:f6:6d:de:69:
9a:e6:1f:c9:a6:91:cc:8f:7c:24:9e:fd:54:8f:0e:
a8:41:33:54:13:86:f5:e7:ce:aa:5c:3a:11:cd:97:
6e:12:4c:da:5f:9b:b3:b8:8c:26:87:05:4a:3a:ff:
46:fb:db:24:d0:aa:e3:87:58:12:44:5e:70:8e:ff:
4f:73:d3:17:cf:ae:20:70:3c:bc:f9:22:96:22:a4:
1e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F8:8E:89:BE:77:01:0E:A4:DE:1E:1F:40:34:2B:90:5E:33:DE:0A
X509v3 Authority Key Identifier:
keyid:EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:18:a0:96:d0:3d:12:bb:f8:91:07:39:35:d1:1f:ad:d4:69:
46:87:27:e0:0b:31:33:9a:23:db:50:cb:52:92:58:e9:07:92:
ef:e8:51:2e:92:0e:51:5b:d1:d5:4c:cc:11:f7:4b:cd:e5:67:
71:58:f2:4d:cc:b3:c4:4d:ab:d0:05:0b:50:9c:f5:53:7d:d6:
50:71:58:93:cb:aa:82:98:8e:12:f8:05:c3:86:d1:df:a9:20:
16:c6:dc:f9:7c:3f:a2:e3:0e:b1:d7:80:df:e0:c3:90:35:51:
a3:4d:4a:1c:39:0b:9a:85:77:a9:a6:d1:4d:5f:b5:fa:d8:14:
ce:83:ab:1c:61:42:30:d4:ca:59:8e:74:ac:12:68:67:03:b3:
ee:c5:2d:7c:b4:d6:9e:87:68:f0:f6:81:fd:22:4d:ef:ed:f8:
5d:6c:b8:6e:87:e0:12:22:54:1e:e7:f8:65:64:86:28:80:eb:
28:48:ad:eb:dc:a5:b6:78:64:eb:15:02:c3:37:8a:ee:b6:80:
7b:5f:af:e2:67:77:60:23:01:69:47:89:2c:f6:ce:d3:31:b5:
ee:0d:e9:32:54:29:4b:1b:47:26:0a:e0:45:05:b2:fe:89:fd:
90:58:41:f7:be:42:2a:1c:ce:2d:07:3e:4c:1e:ae:45:3d:8c:
05:d1:a6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:47 2025 by rpki-client