Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier: rdn9DMiu7NX8DjVOLYyMFzOAiii1Sz2vzXHOc+gF3nk=
Subject key identifier: E9:EC:22:B0:0C:69:A9:17:C5:35:E2:22:41:D7:F9:C8:8D:CD:6A:F8
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial: 019A4DE1FA1E08EF37B4261443D05121761E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 08:00:46 +0000
Manifest this update: Tue 04 Nov 2025 08:00:46 +0000
Manifest next update: Wed 05 Nov 2025 08:00:46 +0000
Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: xTz0oUK9ISwZjN1l6wbF1rGrwzRgBfZdWJtoyBjb8UA=)
2: pWjzKwcY2D4VzPoP5dA0NiOjP1E.roa (hash: COXcfdNp3EzT11F9o1Nm0eGFt9uQRA5Y8hfNNYTi82c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:fa:1e:08:ef:37:b4:26:14:43:d0:51:21:76:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Validity
Not Before: Nov 4 08:00:46 2025 GMT
Not After : Nov 5 08:00:46 2025 GMT
Subject: CN=e9ec22b00c69a917c535e22241d7f9c88dcd6af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:e7:91:5e:fe:3d:89:2c:41:7b:c4:73:cf:
52:20:d1:c2:25:7a:f9:94:e1:17:66:8d:8e:39:ab:
7c:a2:ab:04:04:63:dd:76:8d:6c:20:50:4c:8e:d3:
5a:95:22:bb:a5:72:5a:b0:76:4d:3b:34:43:fa:72:
dd:4f:2d:91:96:ff:d9:87:e9:9f:8f:f1:6c:bd:0d:
49:ba:84:5f:2d:5b:e1:7e:9a:48:39:25:7a:4d:46:
37:f7:dc:38:5d:1c:76:ad:6d:85:7a:72:dc:ca:bb:
93:ea:f7:34:03:c2:64:78:f0:44:0e:19:66:31:4f:
b0:fc:9a:aa:c1:ef:f7:8c:8e:e5:b1:2e:bd:ca:62:
6a:e9:d3:df:cc:92:1d:bc:13:9d:65:9a:2c:1e:88:
b3:a1:13:44:f2:5f:9c:33:47:2e:dd:0b:c0:a5:06:
af:8d:ab:68:f8:aa:e3:fc:b8:79:5b:1a:d9:f2:0b:
f1:71:b5:f7:43:42:82:9c:34:ef:a2:e6:aa:e6:c3:
9c:ca:00:fd:fa:1c:78:0d:9b:77:a1:5b:a9:39:e7:
80:b0:a4:83:44:35:fd:8b:61:e2:53:29:93:a2:7a:
2b:31:7b:c4:f6:d9:ce:75:b8:1c:7c:9d:1c:fc:cd:
d2:72:5e:2c:e3:2d:4b:b0:56:8d:57:af:e0:16:9b:
a1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EC:22:B0:0C:69:A9:17:C5:35:E2:22:41:D7:F9:C8:8D:CD:6A:F8
X509v3 Authority Key Identifier:
keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:34:f8:5e:9e:ee:1c:6a:3d:30:ab:44:94:f1:4d:59:75:23:
bc:cb:23:90:bf:41:b5:1d:f7:4e:43:e9:5a:91:00:a3:a6:20:
13:d5:cb:56:56:88:f6:79:ef:26:09:3b:30:1e:a5:58:0f:df:
08:46:7d:fc:4a:85:61:82:fc:91:c8:9d:ae:ff:6d:c3:8a:33:
ec:ff:42:05:f6:dc:ce:c3:c6:78:a6:c6:fb:7e:bd:74:d0:0e:
c0:73:7c:ae:2a:53:c2:cd:50:77:96:18:1e:57:73:9d:7d:a7:
54:7a:e3:72:50:14:1d:a9:eb:bc:f4:99:e5:7c:c1:6a:2b:23:
05:86:db:03:05:70:83:27:fb:01:e5:fa:b9:69:f7:31:f6:89:
4a:22:d6:e3:7b:5c:45:9e:d2:f9:53:33:7c:aa:2f:67:7f:46:
37:c7:4c:b0:2e:74:38:ec:8b:c9:71:34:c8:bd:b9:c6:76:24:
d0:da:a1:6d:e9:e3:da:fb:99:7c:74:a6:74:4a:47:5b:49:d7:
21:55:06:5b:bb:08:f3:ed:4c:01:31:a6:50:9d:17:11:d4:55:
5c:c3:7b:90:5b:0b:b1:66:6e:37:f6:8e:d7:6a:39:1e:52:39:
a6:b4:1b:19:10:d1:3b:89:a9:61:9e:4d:1e:10:e8:fd:63:d4:
b5:8a:d4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:33 2025 by rpki-client