Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json)
Hash identifier: Mg1w5/FcPZyH1CIMcGyPcB7kjHosiiQ+ARfmlomF4vM=
Subject key identifier: 56:EB:03:F7:AD:6D:AA:B8:BF:92:7D:04:6E:FE:C9:17:9E:85:7F:CF
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial: 019A4F2B15489679FDC18ED525EC86366D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
Manifest number: 0BC0
Signing time: Tue 04 Nov 2025 14:00:14 +0000
Manifest this update: Tue 04 Nov 2025 14:00:14 +0000
Manifest next update: Wed 05 Nov 2025 14:00:14 +0000
Files and hashes: 1: a_ivjW0ZGGTiDvZcTfc91f_pyXs.roa (hash: W9scHoBGox42TFL0zLwjs6jy/UbNIHRPLGTm7dHLpDs=)
2: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: oSYLuxP3SeC38l7y3JjgXP6RoWT60f4h/fXF7RNqtls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:15:48:96:79:fd:c1:8e:d5:25:ec:86:36:6d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Validity
Not Before: Nov 4 14:00:14 2025 GMT
Not After : Nov 5 14:00:14 2025 GMT
Subject: CN=56eb03f7ad6daab8bf927d046efec9179e857fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:0e:10:7f:5e:0c:00:65:cc:b5:38:5f:9a:
cd:71:f5:53:31:63:67:82:04:08:2c:de:e5:17:11:
ec:43:01:95:66:7c:0e:25:96:ac:0d:dd:0a:08:57:
e8:63:89:90:79:0c:4f:fa:74:a0:98:c8:73:c3:5c:
6d:7a:6a:59:c9:08:0c:6a:8b:30:2a:d3:ef:42:b4:
8c:a5:14:df:c7:2b:17:92:46:ee:1d:0e:c1:22:5d:
23:24:a0:5b:60:84:ae:36:29:62:50:54:94:6e:d7:
d6:19:31:b5:eb:72:0a:2a:6f:41:08:a9:32:5e:9e:
29:38:11:a7:6c:ab:f7:41:8d:14:c1:cc:63:67:3d:
51:ef:51:99:90:62:ba:2b:17:31:8a:44:68:1a:f4:
e5:47:2e:4b:1e:b8:61:ec:3d:e4:a6:94:18:a3:51:
b9:49:92:ae:c9:8f:d8:aa:4c:10:30:3a:dc:c6:b8:
35:7e:0f:2a:0e:17:e5:a9:66:30:4f:12:ac:75:0f:
66:c9:31:5a:04:fd:c7:02:9d:49:91:31:8a:5f:36:
7b:71:15:b1:fd:5c:80:dd:42:e7:be:5e:59:50:4b:
f4:37:ef:9a:b8:c5:10:a5:1f:66:61:6c:80:c2:99:
70:e2:ff:fe:1c:7b:a3:8c:e4:f3:8a:31:03:18:c2:
d9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EB:03:F7:AD:6D:AA:B8:BF:92:7D:04:6E:FE:C9:17:9E:85:7F:CF
X509v3 Authority Key Identifier:
keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:01:f1:7e:ba:89:0e:b3:58:79:3a:fd:dd:d6:ae:f9:10:79:
b2:e5:cd:c6:a8:3a:f8:e9:e5:65:22:06:14:ba:54:35:e0:dd:
cd:42:80:9f:57:a0:57:3f:36:98:3e:7c:3a:34:d3:fb:a1:67:
40:c4:d8:bf:3d:7f:43:64:07:cc:40:72:c7:f7:b9:00:d1:3f:
d7:9f:78:2e:e2:2d:ac:18:38:98:d7:65:b7:a8:6b:c6:ae:4b:
6d:ab:01:e0:08:0e:39:f0:22:53:48:f8:62:06:c1:5a:e7:76:
1d:77:f5:06:d8:8e:be:08:f3:7f:24:42:d2:ac:74:54:74:6c:
3e:70:43:f6:2e:9b:d1:83:66:e3:77:d3:cb:f8:0c:80:62:11:
10:63:6a:6a:7f:99:e5:3b:6d:32:54:40:2f:00:0a:db:8d:14:
69:d0:0d:f7:e8:64:4e:23:10:07:a7:c4:45:56:56:35:b5:cb:
e5:9b:65:35:35:12:e3:90:3d:b5:92:fc:a1:54:73:19:74:21:
d7:77:1c:7c:c2:08:da:cf:64:4e:a0:9b:ea:0c:28:88:c0:97:
df:bd:77:a0:d9:07:bb:82:99:80:df:4b:67:57:4b:dc:39:2d:
46:55:a3:c1:0b:72:0c:fc:f4:8e:8b:d2:6a:5c:52:1a:5b:ee:
54:68:3f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:16:49 2025 by rpki-client