Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: 6Ttc9toL9eDuUYJRBrp6BLYc4WJwVJC32HSSx5YRSEQ=
Subject key identifier: 97:66:A4:27:A2:75:34:F6:B4:17:FC:3B:F7:61:D2:50:7C:A1:D8:3C
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 019A4DAB1235A0EABBC69C7AFD151737167D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 14D6
Signing time: Tue 04 Nov 2025 07:00:48 +0000
Manifest this update: Tue 04 Nov 2025 07:00:48 +0000
Manifest next update: Wed 05 Nov 2025 07:00:48 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: zL98nuAP+juTq7kKIYW9er2a+x7ydKykCSw0NgMmUX0=)
2: Fy9dAaWIGt3DDwam3RK8I1POnD0.roa (hash: mN5AYrqpl0VfVq4+AtyPnI39fV2fuW1S27zeiDc2nYY=)
3: iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa (hash: iCHtjZhnNNI84krnhRcpRLsDA1PIVF/eAzRpZb4b+rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:12:35:a0:ea:bb:c6:9c:7a:fd:15:17:37:16:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Nov 4 07:00:48 2025 GMT
Not After : Nov 5 07:00:48 2025 GMT
Subject: CN=9766a427a27534f6b417fc3bf761d2507ca1d83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:e5:10:7d:b8:9b:86:99:0b:87:07:7a:a9:
10:f4:92:a9:88:0e:49:2f:75:79:77:cf:c1:99:d6:
ac:78:8f:7c:3a:77:50:b6:2d:e3:b4:58:fd:2f:0b:
4e:72:de:b6:a6:fa:f7:2c:5d:8b:ad:91:24:d5:6a:
11:d9:3b:06:97:8d:88:dd:27:ae:83:09:eb:84:06:
53:52:6a:e4:18:54:de:59:95:61:b7:62:11:2c:dc:
51:a2:2f:43:c7:fb:1c:6a:99:d7:bc:e6:c8:32:50:
bf:2c:06:39:0e:e7:21:7f:8d:a0:1a:70:e3:3e:1e:
35:36:c3:1e:94:37:5e:ed:3c:ac:54:97:3a:f4:6a:
d8:d3:02:fe:44:5b:19:8f:32:59:1b:02:8f:6a:4a:
0b:c1:13:bf:dd:4b:92:ce:7b:97:d4:41:00:2d:ae:
81:a0:3c:01:de:af:90:97:9e:37:ae:29:c2:23:94:
22:0c:a5:f9:19:3e:9f:01:e6:17:88:ce:f2:7a:e3:
0b:71:93:6f:b8:79:3a:f5:03:fa:e9:c6:71:2e:0c:
95:5e:84:02:dc:97:5d:34:7d:bb:e2:7c:68:63:89:
9a:e0:39:34:b3:6a:b5:f0:66:bf:d4:da:39:7a:f2:
e8:d8:c4:c0:57:61:f4:b0:35:1b:2c:a9:c1:51:31:
31:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:66:A4:27:A2:75:34:F6:B4:17:FC:3B:F7:61:D2:50:7C:A1:D8:3C
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:19:fe:56:a2:d1:40:16:2f:aa:54:92:58:96:c1:af:db:41:
7d:be:2a:51:f1:27:60:25:d9:85:59:69:33:a5:7c:10:1d:ff:
41:13:ce:53:bf:c3:5d:91:bd:42:5a:cb:ff:4d:5b:1d:68:11:
84:ca:7b:ba:da:3e:fd:db:fd:b1:62:29:af:26:d2:88:75:c3:
63:66:8c:26:3b:95:83:5a:fd:41:fa:7d:d0:eb:c2:d0:97:26:
6b:e9:3b:1e:24:d5:83:7c:8d:c0:1d:88:72:de:2f:ab:43:61:
20:34:37:50:65:8e:50:c5:71:c2:b0:f1:c0:c6:e0:58:14:cb:
c2:fb:66:b0:62:a9:1c:70:10:3b:c4:5c:c7:01:78:85:ca:27:
fe:95:5e:8c:0a:93:b6:2c:e3:15:9a:98:2a:b6:87:94:87:8e:
3a:fe:e2:cc:26:0c:ff:6f:ea:d9:2a:31:7f:6e:e8:ac:e8:d7:
28:15:0f:bb:dd:44:d8:51:4c:2f:52:f1:36:b1:2c:83:97:9e:
0d:da:2a:17:8e:d0:a1:58:29:0b:b9:12:0e:4f:34:d8:cb:07:
01:6f:e1:48:e8:8e:db:9b:ae:c5:bc:d7:81:1f:00:82:5a:48:
41:cd:12:53:fc:29:6c:82:b7:2c:73:39:ab:8a:98:0e:25:0b:
90:b2:1d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:18 2025 by rpki-client