Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: wDgcpBrqV25WFOWXV8wrX4OXhttJUpNBx3L+wyt3rfE=
Subject key identifier: 7D:37:BE:08:4F:92:5E:DD:C3:13:1C:14:EE:D8:98:09:68:39:5B:43
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 019A5074FD59E82351D82546E590E2CFF151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 1514
Signing time: Tue 04 Nov 2025 20:00:35 +0000
Manifest this update: Tue 04 Nov 2025 20:00:35 +0000
Manifest next update: Wed 05 Nov 2025 20:00:35 +0000
Files and hashes: 1: 1zFu0RzpnnoDGJMwnKjinpXmRCA.roa (hash: ZQd8IBEmMebks+ONJAcNs9poavTsD9w6+Xw3hhWxaQ0=)
2: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: LnJDVk9wEyGgRkWfY5AoPQ6vS8x/0zUWccSkxbmPf5M=)
3: HKJIsIJ7TQKVpo395xcD-UrLDIc.roa (hash: 5l8r3D44ewEJc+IhuEtnOq2QaEWlAtDCOHCZ14bO5AY=)
4: pRVui7p_9zc7vkvdS1qRnmC5uhE.roa (hash: nMrVu0tOXbJwGT4qILzCfjpCh8zrDSPr52uVHfmUR0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:fd:59:e8:23:51:d8:25:46:e5:90:e2:cf:f1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Nov 4 20:00:35 2025 GMT
Not After : Nov 5 20:00:35 2025 GMT
Subject: CN=7d37be084f925eddc3131c14eed8980968395b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:30:92:c2:34:d2:38:b4:72:f3:b1:d0:2e:
0c:b1:a9:f8:cd:35:0c:83:25:55:73:1e:13:c2:12:
66:39:f6:33:b8:7b:57:4e:2d:54:d7:c3:3d:ee:4a:
a4:95:2f:a0:b7:62:03:e2:5d:d4:13:f0:dd:c3:2a:
9a:7a:1e:f7:36:ca:a0:98:3f:a3:bc:0d:f3:07:7a:
21:b2:b0:fc:9b:ea:96:6b:82:d7:64:dd:ee:ab:5e:
7e:7d:cd:7d:d0:90:4d:79:4f:75:f2:71:fb:6c:33:
f9:72:74:ae:ff:90:85:76:5b:b4:13:1a:22:51:cd:
96:8f:dc:3a:d2:22:e3:1c:0a:ba:f1:9a:f7:d2:4f:
11:ac:d8:d8:9a:39:06:66:40:29:49:e3:30:ad:59:
35:77:dc:48:48:17:58:aa:d0:c3:a5:70:3c:ca:a9:
94:a8:ce:27:18:6a:fa:75:1c:b7:8b:fd:5f:60:a9:
2b:01:56:90:9a:10:71:f2:1d:97:cc:a2:62:85:75:
02:5e:15:ad:9b:6d:01:a7:2e:a2:bf:c4:c6:ab:8e:
53:25:a4:21:85:33:79:e5:9e:7e:85:77:49:11:99:
3b:8f:40:fc:2f:4f:ff:2c:18:54:c2:02:2d:24:ee:
9e:e1:fc:ed:97:42:6c:88:99:d3:b5:3d:bb:e5:c7:
73:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:37:BE:08:4F:92:5E:DD:C3:13:1C:14:EE:D8:98:09:68:39:5B:43
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4e:96:96:e7:83:46:88:fb:f8:dd:e5:86:99:75:ac:6a:5c:
8a:a9:b0:80:d0:77:f7:f7:b2:a9:0d:b3:97:2a:fc:90:3b:f5:
c0:aa:a2:d0:9f:a5:62:c0:74:d3:3d:ba:bd:34:2b:a7:a5:be:
5d:de:8c:62:3a:14:e1:2d:f5:73:23:a8:69:8b:84:7c:cb:30:
ba:f8:cd:37:61:5a:19:d1:4d:ce:2e:27:c6:8f:cf:82:48:1c:
f2:ac:db:ba:05:f6:64:4e:0d:8b:b8:0e:26:87:ef:d3:41:1a:
13:e2:fd:e1:bf:01:ef:53:d3:af:af:cc:95:40:d1:28:8b:7c:
ba:81:43:4d:eb:65:9b:a1:7c:d8:a0:ef:77:a6:a1:3f:b0:95:
17:29:53:a9:a4:e4:90:db:4c:58:5e:04:2a:c3:b9:5f:ea:ed:
81:83:27:a9:7a:23:54:9f:d3:95:4c:69:85:95:72:e1:59:5b:
ec:7c:ab:e2:9e:b4:a1:db:0f:27:ce:05:d4:aa:f0:d1:1b:fa:
0f:a0:75:ad:0a:e8:2e:31:e7:01:c6:bb:40:ef:dc:2e:d9:19:
31:ec:45:2b:0a:10:bb:0c:4e:46:08:da:9f:bc:c3:ff:46:91:
56:39:9b:b5:db:0c:78:17:8b:92:d4:46:c2:5a:e5:88:0b:f4:
fe:6a:4e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:10:45 2025 by rpki-client