Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
File: 7w7IG5xlO440BQj_hI2wZuNncrA.mft (raw, json)
Hash identifier: dwm/7KOQIXogiRHJYu/9SA3t2kcH3CMcLv8crjDfnUo=
Subject key identifier: 5B:35:73:63:9D:34:2A:05:05:80:E1:E5:9A:F3:34:AA:0F:21:17:C7
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 019A5308168E891C58ED0987776B6E452D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
Manifest number: 0740
Signing time: Wed 05 Nov 2025 08:00:30 +0000
Manifest this update: Wed 05 Nov 2025 08:00:30 +0000
Manifest next update: Thu 06 Nov 2025 08:00:30 +0000
Files and hashes: 1: 7w7IG5xlO440BQj_hI2wZuNncrA.crl (hash: Kyvf98zhgZEe/aC5LeDeu+V06KVK42b0yavBmapKIjE=)
2: _JZCaLt9Be62ENSNemRuRzThRaM.roa (hash: URuN9NpiQl5cKKOQiReY1w86ew5C0wnGONnwQYzQctk=)
3: fT9EDZcB-n7jKd_0sXTlTpOCVoU.roa (hash: ErzOKvcft9LuwLT6n685AHi6g3MUyqRhRkHGEZcgw3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:16:8e:89:1c:58:ed:09:87:77:6b:6e:45:2d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Nov 5 08:00:30 2025 GMT
Not After : Nov 6 08:00:30 2025 GMT
Subject: CN=5b3573639d342a050580e1e59af334aa0f2117c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:84:8a:6e:fa:e9:37:cd:08:95:6a:cd:e5:64:
42:fa:70:9e:21:77:b9:8c:68:88:01:11:f0:fa:d4:
3d:55:3a:52:09:90:06:11:69:f2:97:09:89:ed:e1:
c2:80:c9:c5:99:82:05:d5:30:83:9b:7b:13:bd:93:
36:72:27:23:e5:4d:4d:b6:72:c2:72:16:65:93:ee:
23:40:09:79:48:17:c4:72:ae:df:f2:98:62:93:1a:
91:24:98:99:f9:3f:6c:99:a3:ea:57:dd:c9:52:29:
ff:84:94:52:37:13:81:f4:57:98:cc:eb:6c:ce:1e:
6b:df:e4:f1:1f:65:b3:2a:39:3f:d0:1d:e2:19:dd:
40:c1:c5:e0:4d:1a:a8:59:85:7f:eb:2f:f8:bd:f6:
91:2d:f2:f6:4b:08:9b:25:0c:55:30:20:8e:b5:9e:
c9:5d:db:b9:ad:cf:99:69:46:32:72:9e:05:19:b8:
b6:af:e3:a8:66:8b:0f:d0:aa:99:9f:e3:5a:f3:ac:
f6:a8:8c:91:a7:0f:4c:6d:d9:21:3c:83:4c:82:ab:
41:dd:49:a4:a1:98:60:59:b2:80:d1:fb:6e:57:ac:
3b:08:d9:57:f1:d0:22:85:bf:92:6c:ca:aa:b8:d6:
8d:1b:bd:dd:8b:28:dd:3e:03:b9:72:32:aa:d9:73:
c4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:35:73:63:9D:34:2A:05:05:80:E1:E5:9A:F3:34:AA:0F:21:17:C7
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:be:2d:4e:a2:8c:2d:02:a3:14:47:89:fe:be:fc:48:d0:df:
1f:e0:87:1b:df:82:8e:19:9d:38:28:e2:48:2a:49:01:fa:d3:
dd:b1:1a:9a:6e:7a:67:8a:e5:64:e2:00:b1:d6:d0:d1:df:28:
07:17:47:01:75:40:2a:a3:59:49:96:38:56:25:b3:6d:78:44:
84:db:c0:16:19:a4:ed:f1:0a:af:f2:6d:b8:b4:0b:87:a3:53:
19:2d:17:3b:f0:0d:67:c9:20:4e:72:6c:56:5d:0e:4d:c8:df:
24:39:c7:be:65:67:61:44:b4:8f:bf:94:be:d5:47:e8:95:e8:
d4:fc:32:73:7e:6f:c2:1f:fa:44:3e:70:65:49:02:ba:67:ea:
64:77:b3:9c:90:aa:87:41:44:fc:d7:0a:ea:cd:05:92:2c:6b:
6b:69:91:d3:d3:0b:08:f2:d5:b1:6d:0b:c0:d2:fd:76:94:9c:
a1:10:04:9c:40:fa:d5:56:86:06:fa:23:b9:28:59:b2:cd:18:
3f:35:d5:cb:d7:99:e3:af:b8:24:68:76:f1:8d:20:fe:88:68:
51:fa:8f:c4:7b:9a:fa:c3:0a:e0:85:08:40:99:4c:30:38:f8:
d5:88:41:eb:c6:58:c6:06:75:b2:a7:16:dc:ac:b2:23:ce:81:
9c:32:0f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:29:39 2025 by rpki-client