Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier: V7QmrQsrX1oLQjOUL0vVfGGEHvmMNut4pdEESrT7KEY=
Subject key identifier: 8F:A0:7B:B2:37:06:5E:E8:32:9C:76:A7:7E:3A:C8:DA:9D:EE:B2:BD
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer: /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial: 019A4F624DD6773A2CC8B3B8C08E5A49980D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number: 1252
Signing time: Tue 04 Nov 2025 15:00:33 +0000
Manifest this update: Tue 04 Nov 2025 15:00:33 +0000
Manifest next update: Wed 05 Nov 2025 15:00:33 +0000
Files and hashes: 1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: O3qzChgkuimtadCpZQEFo9fJR2gHyoNtYbwOd+9lvcM=)
2: Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa (hash: mDlSiJmg0BY9JeNZWlLLq7LDLb9jKGHM+mo1bQwoBt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:4d:d6:77:3a:2c:c8:b3:b8:c0:8e:5a:49:98:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Validity
Not Before: Nov 4 15:00:33 2025 GMT
Not After : Nov 5 15:00:33 2025 GMT
Subject: CN=8fa07bb237065ee8329c76a77e3ac8da9deeb2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:71:16:0e:a9:43:41:ef:36:6a:a6:4b:69:
20:7d:6a:9d:cc:2c:08:c0:ec:f0:79:6c:58:ec:c6:
e0:99:25:90:77:4c:7e:e4:4b:58:27:0b:85:af:9f:
5a:89:98:05:51:67:25:fc:f2:30:c8:51:a9:f1:a9:
e4:32:a4:27:bd:64:01:0a:9a:a7:52:d9:6e:d9:f0:
94:74:eb:61:d9:99:c7:08:46:8c:74:41:0f:72:b8:
de:36:12:d4:1c:41:a7:a9:8c:1e:8e:c7:d9:cf:dd:
cf:be:17:40:52:34:cb:de:70:b1:e4:9f:94:40:26:
85:f3:f5:4d:1b:28:4f:b2:e4:c7:e9:aa:d0:71:d7:
c0:7d:d9:47:14:d5:14:9a:44:27:15:4e:c9:4d:79:
59:20:4f:5e:cc:28:fe:ed:ce:85:9e:32:28:fd:8a:
15:b8:86:34:85:e1:7e:9b:79:51:2f:4a:55:aa:9b:
b5:7d:7b:2b:e0:55:fe:e0:2e:6e:bf:e2:4c:ba:d0:
55:19:d6:60:39:48:71:79:7c:84:ca:58:30:6a:a8:
46:48:b4:44:05:ca:83:4e:94:c8:fb:84:ef:d0:3e:
92:90:2f:ae:c7:04:4d:b1:1b:b0:05:34:89:f4:c9:
ec:1c:da:22:a0:6d:bd:f4:61:fa:fe:47:c5:04:c5:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A0:7B:B2:37:06:5E:E8:32:9C:76:A7:7E:3A:C8:DA:9D:EE:B2:BD
X509v3 Authority Key Identifier:
keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:88:dd:53:b0:ef:88:fc:69:56:8d:7a:de:ed:78:7d:c8:8f:
96:46:31:c5:02:98:9b:b2:37:a1:9d:88:58:72:a7:e0:ee:c1:
59:2e:f7:1d:df:7f:86:f3:f9:cb:87:8c:ca:8a:44:45:52:6b:
a6:8e:70:f7:06:4d:de:dd:2f:9d:3a:fd:43:10:ae:15:ba:17:
1d:d2:21:f2:ca:29:cb:ad:2a:22:48:9b:ba:e4:3c:77:aa:6b:
78:a0:17:ba:9a:84:3c:44:18:e8:fa:d4:16:f2:a4:4d:a3:33:
7e:18:3e:f0:d4:bf:ef:8e:14:6a:5c:c3:25:ea:12:1e:ed:40:
49:54:a9:c2:9f:79:98:dc:fe:62:0e:b9:d3:58:20:85:00:7f:
af:41:e5:59:fc:45:5a:29:da:2f:b8:4e:61:15:82:50:fd:cc:
62:ba:44:74:0b:12:ee:22:09:6a:4f:08:9d:0c:62:2a:43:92:
cb:34:ee:de:8b:18:6b:71:f4:5a:29:fc:13:66:63:ec:f8:4f:
1d:24:95:74:6e:35:fb:5e:b6:44:db:75:14:04:93:fe:c3:5f:
de:b1:1e:62:d4:40:c9:c1:f1:0d:fe:f7:1a:09:43:db:f0:74:
52:d6:14:2c:78:fd:76:8e:a6:c9:30:aa:ee:06:18:1d:91:90:
98:0c:90:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:32 2025 by rpki-client