Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
File: h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json)
Hash identifier: cah+nVuaQ/2xjOFjOfvXFzn+nL3JWc7TaFFBtCjCaCA=
Subject key identifier: B5:E1:E5:BD:87:B6:59:32:22:E3:25:A9:01:29:73:62:51:BF:50:82
Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Certificate serial: 019A4F2B5545ED20586CB4E2474C1AC9E5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
Manifest number: 0635
Signing time: Tue 04 Nov 2025 14:00:31 +0000
Manifest this update: Tue 04 Nov 2025 14:00:31 +0000
Manifest next update: Wed 05 Nov 2025 14:00:31 +0000
Files and hashes: 1: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: aw5nSyqm5odffsWGC7vhjA0HOrmq8VU5Rd9dMsL1Waw=)
2: qK0r22fc4dStcfs-iJMEOqc-e8I.roa (hash: szAPsZBmBxrbRZJWId/rghs7S63YVBb1wXhPcGatKBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:55:45:ed:20:58:6c:b4:e2:47:4c:1a:c9:e5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Validity
Not Before: Nov 4 14:00:31 2025 GMT
Not After : Nov 5 14:00:31 2025 GMT
Subject: CN=b5e1e5bd87b6593222e325a90129736251bf5082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:98:85:50:5e:fe:8f:56:f3:43:73:aa:4a:
ce:30:1d:51:22:57:35:b7:b5:26:3b:a8:0a:1c:da:
37:6c:27:66:f1:f1:f4:30:85:1d:76:d5:5c:72:5b:
08:3f:bd:f9:d8:77:a4:ed:1a:fa:f3:9d:81:72:b1:
c3:2b:9c:99:5e:8e:04:e0:5d:f0:5e:c3:11:63:fb:
6a:4c:a0:d2:22:55:71:df:5a:8c:e8:80:95:81:82:
ac:37:8b:7c:56:c6:72:78:a9:03:3e:89:bf:ad:06:
1f:c5:ff:63:1d:10:e7:68:1e:8c:0d:29:fc:de:07:
15:69:b0:66:f6:d5:c0:91:4e:fa:46:42:95:22:40:
1a:09:b7:b3:52:39:8c:14:43:7f:8f:e1:87:47:8b:
b3:2c:2d:d6:b5:f8:07:88:18:cd:e1:46:0e:47:35:
32:f1:84:aa:df:52:3f:d3:e4:54:d6:c2:56:03:b8:
e6:cd:db:9e:de:32:c8:f6:90:eb:4d:ad:9c:80:08:
0c:61:e5:22:1d:49:ea:07:71:aa:c2:db:5c:8b:95:
7d:d7:cb:93:98:54:22:13:4d:50:46:62:52:cd:a4:
08:6a:df:b7:ae:1a:fc:af:cb:43:bd:46:be:5c:a6:
b1:7a:c9:40:11:e2:3b:50:94:a0:5e:18:04:bf:6c:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E1:E5:BD:87:B6:59:32:22:E3:25:A9:01:29:73:62:51:BF:50:82
X509v3 Authority Key Identifier:
keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ce:f3:50:85:ec:4c:d4:53:e8:80:17:6b:6b:5e:5e:81:4e:
bf:c0:09:5d:ca:05:8e:57:ab:74:79:a3:90:37:ac:2e:5b:1a:
4c:f9:ce:c0:bf:a8:fc:fc:f2:fa:25:91:a5:98:63:37:05:ef:
98:da:ea:5b:b2:8d:6f:53:f1:98:7f:89:0f:43:8b:e3:72:2a:
7e:2c:25:57:7d:27:d7:ed:ba:50:23:80:39:a2:d9:9d:57:cb:
13:5c:ec:cf:d6:d0:e1:36:71:12:e8:ad:b6:16:05:3e:fc:dc:
57:5a:2c:42:01:7c:81:42:0c:e0:9d:a1:fd:2d:2e:0a:8c:7a:
5c:94:db:fe:6e:fb:23:5f:a1:5f:83:a3:aa:05:99:f1:eb:b3:
95:07:ec:51:8a:6d:c0:3a:0d:5d:66:74:29:10:61:59:d6:56:
53:eb:48:fa:c8:46:07:ed:ea:a7:6b:fe:21:13:54:8b:3c:6c:
e8:a4:96:a0:d9:d5:a9:0c:62:d3:2c:e0:a0:6f:06:99:3b:ef:
f2:3a:70:27:c7:31:d5:d1:76:b4:9b:d2:d8:c6:1a:32:9b:02:
17:b7:f5:50:c0:68:3f:c7:f8:26:c7:43:7d:87:9f:d4:80:e3:
84:08:f0:a6:01:51:8d:31:fb:ea:d0:7e:74:0c:e1:7a:e5:ad:
f3:55:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:15 2025 by rpki-client