Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier: A6MiPnrj2WvxsUGvqJmAsyTl1B7QDB3ENvIwqHo0wxM=
Subject key identifier: CF:28:BD:1F:16:29:C8:BB:67:F0:C8:C9:3C:A6:D9:DF:57:73:2D:33
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial: 019A4DE182CA36B1A02D6C50E286F2D5CF6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 08:00:15 +0000
Manifest this update: Tue 04 Nov 2025 08:00:15 +0000
Manifest next update: Wed 05 Nov 2025 08:00:15 +0000
Files and hashes: 1: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: /pBsbjj8W6309n4PikOcP5a8ODL/q+4vkY6YUTPUPcs=)
2: Uol637i_aGyEjqsV-G-zBBGF_fM.roa (hash: GHwCfKteNhzkVgd1pFW2ZoKvEFt5K3t+m0uHz8s/0GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:82:ca:36:b1:a0:2d:6c:50:e2:86:f2:d5:cf:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Validity
Not Before: Nov 4 08:00:15 2025 GMT
Not After : Nov 5 08:00:15 2025 GMT
Subject: CN=cf28bd1f1629c8bb67f0c8c93ca6d9df57732d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:64:6c:d0:9f:00:38:07:16:76:11:b5:78:
b7:c5:8a:8f:4f:c6:ae:1b:a8:78:b2:98:8a:80:62:
cb:f0:18:fe:f8:a3:d5:79:de:8a:f0:40:8f:18:eb:
c1:d4:7d:82:fb:7c:47:a4:3a:cd:41:e9:0a:4c:23:
80:c9:90:2a:1b:dd:ab:60:d8:ac:ee:d7:12:54:ea:
d5:bf:44:28:d8:b2:92:69:75:a4:21:19:e1:8c:9b:
5c:f5:fd:15:3d:4c:03:14:9a:94:e3:90:18:79:1d:
ed:c6:4f:18:77:ad:a9:82:ef:01:2b:2c:cc:37:8a:
71:fe:ce:b7:ce:07:6a:8d:4f:09:0f:23:f4:80:36:
ed:34:7a:67:1d:e0:91:9a:90:98:c6:27:f1:83:8c:
4d:81:81:75:bc:a1:60:8a:b6:25:65:62:b4:98:ab:
75:f5:e5:d1:b7:38:c5:9b:73:0d:43:35:17:8f:b6:
50:93:0a:51:58:5f:f1:30:a0:d2:0c:e8:03:ca:d4:
57:0b:ee:51:11:ec:25:ea:67:ae:a5:aa:1b:1a:fb:
e6:65:7f:7b:02:93:25:60:2d:dd:8f:be:64:31:8a:
13:0e:e2:30:ca:e3:b7:bd:31:75:7e:eb:51:f7:5e:
77:f3:ce:9e:09:b8:da:57:1c:e1:4b:b7:8c:89:20:
f1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:28:BD:1F:16:29:C8:BB:67:F0:C8:C9:3C:A6:D9:DF:57:73:2D:33
X509v3 Authority Key Identifier:
keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:11:e6:19:e5:bf:2d:34:eb:65:3e:b0:05:09:c1:92:72:39:
38:f7:4b:61:ad:7c:4b:a6:87:f6:9f:9e:47:e7:52:84:61:04:
12:e9:13:be:0a:6c:9a:5b:f5:4a:75:3d:28:ca:ea:e4:bd:dc:
91:0a:1e:71:00:3f:30:97:38:66:41:1f:9d:bd:62:67:6a:a1:
b3:a9:50:fa:03:e4:23:bc:15:31:42:46:d8:06:f2:ce:7e:96:
cd:3d:df:6d:c9:e8:98:88:7b:6b:f1:d0:07:2c:cc:75:74:2a:
6d:a2:c3:3d:c1:74:82:fb:8d:3d:63:a8:f2:c3:46:60:23:40:
cf:d9:c7:8c:1b:7c:78:da:fa:44:19:ce:2c:3c:67:6e:86:fb:
3b:c2:4d:d2:0d:31:ce:bf:96:e0:1d:25:71:da:0d:5e:ba:91:
89:bd:c3:28:f8:b9:27:d9:71:29:ca:83:ed:a5:ac:ff:e3:4b:
30:43:91:2e:71:67:2c:86:bd:67:f7:f9:f9:81:45:a5:0a:f8:
75:f2:e7:48:33:54:c9:89:8b:1e:46:74:9d:10:cb:88:2f:cb:
28:11:65:5e:11:a5:2e:17:f4:6d:44:88:0f:55:da:c7:58:b4:
31:e8:94:7f:12:bd:d1:97:49:9f:84:3a:f4:1c:5e:d3:9d:73:
b9:a1:e2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:07:35 2025 by rpki-client