Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File: 7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier: 0zZyrLpvhxDJg/1Rr4m0QT8XnIvCSDgFk4zj0V6/ZPE=
Subject key identifier: A2:45:E6:70:B1:01:C4:E9:77:A3:BF:B0:FE:0B:4A:48:1C:8F:FE:48
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial: 019A5187EC063118C7D15EFED001F29DF17C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 01:00:53 +0000
Manifest this update: Wed 05 Nov 2025 01:00:53 +0000
Manifest next update: Thu 06 Nov 2025 01:00:53 +0000
Files and hashes: 1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: 62OcomUxgJsb6/6E9EZPhKaIsK+5FbMFOHBYbpJU3LU=)
2: avqINpYlzxCyV6gq20JtXLQyC4A.roa (hash: 0cl0vSjwJETExQIV/vHZXVhnvVc8V1ucpKa58O8zwHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:ec:06:31:18:c7:d1:5e:fe:d0:01:f2:9d:f1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Validity
Not Before: Nov 5 01:00:53 2025 GMT
Not After : Nov 6 01:00:53 2025 GMT
Subject: CN=a245e670b101c4e977a3bfb0fe0b4a481c8ffe48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:4a:23:78:19:63:9e:12:54:f0:8d:94:62:
9b:d0:69:4f:51:1a:03:c4:31:fd:f3:bb:b6:56:5f:
53:8b:9a:e5:c4:b8:4c:77:0e:65:66:f6:39:7c:0c:
3d:d3:15:56:70:35:be:67:44:90:80:a4:7a:1f:a7:
19:0b:75:a3:8c:8f:36:f5:41:63:63:74:b4:7c:a9:
cd:d7:bb:10:d7:5b:49:87:bf:e7:dc:b9:0b:98:2f:
f8:97:30:6f:cc:51:4c:13:14:20:0f:99:4c:67:31:
cd:12:59:59:24:c8:c8:fd:24:16:e6:4c:2e:76:50:
77:b6:9e:a4:5b:16:6d:78:20:f3:a7:03:e1:13:a5:
67:dd:9f:e4:f1:27:32:34:9b:a9:31:b2:50:98:6f:
26:49:44:13:37:b6:fe:96:d9:47:ec:ee:8d:1f:c5:
8b:cb:0a:fe:0a:cc:e6:2e:40:92:f2:25:4b:8e:01:
be:01:66:85:ef:80:0b:3f:55:e4:94:ed:b0:96:a4:
cf:1d:cc:e4:0f:6d:12:24:e1:41:af:1b:81:b1:0e:
d7:d6:d6:9d:4c:e1:a7:cc:ce:10:82:50:77:38:7a:
29:bb:e0:98:8b:3c:c8:dd:b7:66:27:5d:e1:6a:4a:
97:96:88:a2:3c:e4:bc:a6:31:ce:96:42:2b:10:26:
23:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:45:E6:70:B1:01:C4:E9:77:A3:BF:B0:FE:0B:4A:48:1C:8F:FE:48
X509v3 Authority Key Identifier:
keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a8:23:c2:06:39:2c:6d:2e:ba:66:9a:5b:9f:21:34:3a:3d:
4c:b5:f4:44:d6:47:af:67:ee:cc:d7:56:e6:12:96:87:c4:98:
bd:bb:68:6d:b8:85:bf:88:70:cf:f9:f2:22:13:03:1a:4c:91:
88:14:f9:7c:50:22:b9:9a:c7:ba:b9:3b:e6:b5:76:26:b1:0f:
af:b1:31:63:38:c6:c3:00:4f:f4:a3:80:74:6a:5e:9e:da:b2:
5e:fb:2f:ec:54:b5:a6:9d:86:c0:8e:21:03:91:e0:5a:e3:9e:
a1:a5:7f:03:c4:1a:97:c0:e2:97:8f:d5:2f:bb:27:e7:d0:99:
08:c0:50:5a:a9:2a:0f:72:7c:4e:fa:33:67:44:ff:3b:f8:6b:
6e:48:ad:ae:54:f3:29:cf:56:e6:d4:6f:ec:0f:c2:37:28:dc:
da:16:df:a9:a8:a5:f5:a4:b7:fe:2f:d6:d9:a8:73:d1:4d:e4:
73:42:e8:2c:3d:f6:e4:19:96:73:a3:2f:66:7a:fc:c3:95:ef:
ea:7c:be:05:da:34:2a:f5:c7:26:ef:be:a7:41:21:ba:7a:7e:
da:d8:5c:12:cc:f6:a4:b2:39:fd:82:1f:80:85:c3:d7:78:51:
14:51:c2:68:09:4d:6d:eb:eb:8d:ab:85:be:a1:6d:8f:66:c1:
03:ae:89:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:45:15 2025 by rpki-client