Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
File: 7iNCg3Pc6KX5f0XvxsKLn7581U0.mft (raw, json)
Hash identifier: 6vSJ54S4gbDjgatM+h5kFsqqa5qoSJVEifdgFFBUXd0=
Subject key identifier: B0:89:9E:39:9F:7F:6E:89:16:1C:16:CA:92:2C:A4:E0:1E:D5:3D:4C
Authority key identifier: EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D
Certificate issuer: /CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d
Certificate serial: 019A51BE953EC1CB3F5BA3F366F25BC4DC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
Manifest number: 76
Signing time: Wed 05 Nov 2025 02:00:35 +0000
Manifest this update: Wed 05 Nov 2025 02:00:35 +0000
Manifest next update: Thu 06 Nov 2025 02:00:35 +0000
Files and hashes: 1: 7iNCg3Pc6KX5f0XvxsKLn7581U0.crl (hash: 1ejOF5aqbHbHEzPRo/TCzLpjlkMX3Iarr19HgSJW2Pk=)
2: QXgU6iZ9eTA61-_lrp-WFw2wrio.roa (hash: pI7i4CdNQU0hsPQOTDHwQvTJeIPilN2xVeBBH/PkqDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:95:3e:c1:cb:3f:5b:a3:f3:66:f2:5b:c4:dc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d
Validity
Not Before: Nov 5 02:00:35 2025 GMT
Not After : Nov 6 02:00:35 2025 GMT
Subject: CN=b0899e399f7f6e89161c16ca922ca4e01ed53d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:2d:2e:5b:56:6d:e3:fb:a2:5c:33:3c:8c:
0e:28:cd:cd:f1:61:02:67:6a:01:78:82:57:f6:0f:
35:81:bb:3e:fc:48:04:3a:5b:da:51:07:c0:59:a9:
fe:dc:fb:79:1a:dc:67:5e:58:94:bd:83:d2:2f:69:
a0:d6:8d:2f:31:04:12:75:5e:88:27:20:46:77:bf:
45:d7:08:af:ff:a9:4c:69:8f:a0:52:1e:ab:2a:43:
9d:08:96:87:ef:c0:86:01:cb:17:bf:a2:9a:37:20:
5f:5f:4b:3a:a4:50:d6:39:df:ad:a9:aa:72:31:f7:
83:88:78:1c:61:b6:94:33:e7:80:5f:bd:6e:46:68:
7b:80:fe:36:31:65:f4:45:a5:b5:f5:d2:85:e2:c4:
4f:7a:a5:8c:48:49:9e:bc:6a:17:7e:b6:c3:b1:2f:
2a:18:96:80:e7:65:cb:db:68:93:ed:5d:54:33:31:
e1:6b:62:14:34:24:e8:55:03:e3:ab:1c:7d:30:ac:
54:53:89:8d:15:53:75:ec:d3:9d:e7:63:7b:d2:06:
61:5a:f3:6c:45:e7:d0:89:11:5e:30:25:3b:f7:ab:
b8:22:84:92:1f:61:b1:b1:5d:8f:21:28:18:88:3a:
f3:17:a2:a5:0d:c3:35:f8:0f:09:06:e1:c3:58:67:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:89:9E:39:9F:7F:6E:89:16:1C:16:CA:92:2C:A4:E0:1E:D5:3D:4C
X509v3 Authority Key Identifier:
keyid:EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e3:d1:e8:08:e4:d3:b9:fc:ef:82:9d:42:1c:d6:7b:83:f4:
ce:68:42:90:d1:85:21:0f:37:0d:5c:06:62:e5:1f:86:c3:09:
49:68:f7:00:da:c8:52:ec:8a:2d:e7:2b:16:ed:d6:fa:76:a7:
59:61:25:c2:a2:b7:64:ac:25:dd:ac:49:b4:ec:b4:20:ce:b4:
7d:1d:92:8e:1d:66:37:61:b4:00:20:b9:df:7b:7e:eb:88:b5:
10:5e:2d:68:f0:26:00:f7:0e:61:c6:ef:1d:fe:53:15:0e:ec:
cf:f2:55:31:e9:e4:fd:e9:b2:d6:48:3b:20:db:6a:55:85:15:
79:49:29:f6:8b:ff:7d:96:52:90:e3:15:eb:ff:8c:d0:e3:79:
de:17:5d:e2:2e:92:a6:2c:f4:24:36:28:19:34:ac:6d:fc:b1:
82:b3:9f:95:e0:32:ba:70:dc:78:b7:8b:92:5e:30:e7:4a:be:
08:ce:0e:ed:75:db:d9:07:e6:2a:7d:bf:85:08:e1:1c:55:f5:
c2:2c:ba:f0:4c:7f:6a:05:30:8b:cd:83:db:1a:0b:9f:14:86:
bb:7c:b1:6c:31:37:32:af:9c:da:cf:0e:12:68:63:3c:d0:c8:
0f:bc:0b:2e:f0:e7:88:f1:6c:e7:ad:88:3f:d5:73:c3:10:ce:
7a:94:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:25:22 2025 by rpki-client