Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
File: 7gZE9wYh3Uokp4tntGApSFc3WMA.mft (raw, json)
Hash identifier: x8dwOPZy5Jd75xJ3w0j3Upg/YpqzkzuLazvG+99Vr50=
Subject key identifier: D8:96:23:14:5D:1B:CF:D7:14:6A:3E:FA:04:03:81:E9:1E:00:89:FC
Authority key identifier: EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
Certificate issuer: /CN=ee0644f70621dd4a24a78b67b4602948573758c0
Certificate serial: 019A4D747EC970788B07DB57253FFBF5CC32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 06:01:11 +0000
Manifest this update: Tue 04 Nov 2025 06:01:11 +0000
Manifest next update: Wed 05 Nov 2025 06:01:11 +0000
Files and hashes: 1: 7gZE9wYh3Uokp4tntGApSFc3WMA.crl (hash: p6qqB+vE/OMaFN9zO7cobqQQKA7Eu4w09PCs7agfWVg=)
2: SevLX3l4TAijWhvCzFiJEtxi9zc.roa (hash: sBEIXGef/JFr7rPt1AMHS1m2tgKfrXwqEjoioS0QrFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:7e:c9:70:78:8b:07:db:57:25:3f:fb:f5:cc:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0644f70621dd4a24a78b67b4602948573758c0
Validity
Not Before: Nov 4 06:01:11 2025 GMT
Not After : Nov 5 06:01:11 2025 GMT
Subject: CN=d89623145d1bcfd7146a3efa040381e91e0089fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:ab:a8:67:15:02:84:50:bd:05:e6:6b:71:
34:32:13:63:01:68:8e:68:b4:61:35:df:41:07:42:
c2:79:62:e3:79:3d:25:b3:f6:aa:06:68:9c:58:71:
0b:e2:6f:10:a7:ac:5e:e8:10:0f:e9:64:e6:ed:d4:
60:0f:dc:79:32:7e:9e:24:f6:94:84:8c:98:59:2f:
ac:3c:d4:13:c1:5d:2d:f9:4e:7f:f1:d1:26:c4:3b:
78:d5:0d:37:b5:2c:61:75:1b:44:9c:b3:02:80:42:
42:ef:d9:e2:fb:b6:b3:70:e4:3f:87:b2:bd:f8:08:
70:c5:66:4d:13:7a:c5:c3:05:70:4e:02:74:a8:f6:
65:be:8d:bc:34:a2:a8:58:63:00:6e:17:10:de:71:
74:eb:cc:58:58:6c:35:c1:37:65:94:ee:27:7c:6b:
f6:ad:9d:62:f1:f7:11:85:e7:a9:bd:18:4b:07:ea:
a3:ad:75:b3:0e:af:68:45:9f:6b:48:3f:59:5c:38:
cf:f1:ed:af:49:c2:35:e1:90:d7:da:f5:12:99:cb:
b1:c7:5d:42:64:49:9a:b6:3c:39:1c:45:7b:71:d6:
64:14:8a:8f:3d:77:23:ed:3a:c5:c7:de:ca:85:91:
d4:be:17:78:02:92:b7:d7:c2:8f:03:6f:4c:a9:8e:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:96:23:14:5D:1B:CF:D7:14:6A:3E:FA:04:03:81:E9:1E:00:89:FC
X509v3 Authority Key Identifier:
keyid:EE:06:44:F7:06:21:DD:4A:24:A7:8B:67:B4:60:29:48:57:37:58:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gZE9wYh3Uokp4tntGApSFc3WMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/02dac3-39eb-469c-acc9-00cd5ec00d11/1/7gZE9wYh3Uokp4tntGApSFc3WMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a2:c7:4d:37:3d:5e:8e:5a:13:07:8f:c9:07:fb:0f:75:ad:
39:e9:20:20:04:14:f9:9e:d6:a4:13:65:0b:a4:2f:07:9d:73:
70:90:d2:b1:91:71:4f:11:91:26:33:70:dd:f4:7a:5a:e0:0b:
cf:9e:2f:ad:35:cd:cf:23:b8:f9:a9:27:ce:aa:43:57:d8:27:
89:39:c5:35:15:2a:06:54:99:67:bd:57:e4:20:18:39:53:af:
2e:3b:08:af:a2:40:0b:f1:a2:16:9c:b7:7a:93:86:56:ab:92:
c9:a8:c6:01:81:b3:70:39:16:e1:57:88:98:ce:56:45:f8:3a:
2f:02:18:95:76:8d:bd:e4:07:87:28:08:10:5d:99:a3:f3:4f:
1a:32:43:7a:43:86:54:03:c6:01:5e:92:bb:96:f0:ad:66:26:
90:3b:2e:80:64:53:89:50:b6:4d:70:e1:2a:49:dc:a0:b8:4b:
dc:46:c6:eb:1d:9f:3b:a3:01:21:cf:0f:88:4c:63:97:72:30:
62:84:62:31:c9:0d:0a:0b:6a:d8:4d:6a:b5:67:5e:a0:1b:f1:
6b:95:2c:3c:78:5e:bc:ce:84:b8:fd:53:e2:11:16:7c:4b:22:
e6:7a:0c:d1:07:b4:3d:bd:df:f0:dd:ee:20:97:03:35:82:08:
78:b6:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:03 2025 by rpki-client