Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
File: 7sMTGXauon0XHGwmepjT84KmGio.mft (raw, json)
Hash identifier: KpAAoixSSoZ00sebqcho9O8bkstQsYIdrlE3SOY5X2M=
Subject key identifier: 8F:EF:1F:CB:DA:31:A2:A0:AA:0A:41:26:9E:CC:86:C2:31:58:3D:98
Authority key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
Certificate issuer: /CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Certificate serial: 019A5150E55B1838919F6500555FE8AC8B0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
Manifest number: 1105
Signing time: Wed 05 Nov 2025 00:00:47 +0000
Manifest this update: Wed 05 Nov 2025 00:00:47 +0000
Manifest next update: Thu 06 Nov 2025 00:00:47 +0000
Files and hashes: 1: 7sMTGXauon0XHGwmepjT84KmGio.crl (hash: Y58qBnK/pkFabaTVqlMV4tGrfwlxzN7fLVmN5MwAAcU=)
2: qvDSjgW1rEvWcrU4jpSi6rsDCpM.roa (hash: T8Hf/3k6CSkU6S1AK65rkEFSmvPdWLsEssJ2od+QI9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:e5:5b:18:38:91:9f:65:00:55:5f:e8:ac:8b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Validity
Not Before: Nov 5 00:00:47 2025 GMT
Not After : Nov 6 00:00:47 2025 GMT
Subject: CN=8fef1fcbda31a2a0aa0a41269ecc86c231583d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:99:cb:ed:29:f0:83:aa:bd:af:99:5e:93:
4a:8c:d2:4d:30:1e:33:ba:b2:35:77:41:17:f8:91:
bf:98:5e:4b:ff:53:d9:dc:11:d0:16:10:9b:2b:88:
78:21:80:a0:3f:35:e6:71:bb:2e:88:f7:ac:25:2d:
c0:08:c4:53:8f:a1:e7:ee:0e:fd:43:bf:bf:27:14:
07:e8:e0:5b:12:91:d6:f7:f8:e1:f3:10:85:5c:9c:
f2:b8:d1:1a:26:79:2d:bc:5c:02:6d:24:64:1f:ce:
f2:75:d3:e9:0a:5a:55:26:1d:80:31:b7:59:bb:b7:
5a:50:e6:9d:61:99:6b:16:c1:6b:01:f7:99:70:ef:
41:98:8c:65:c0:9b:c7:27:78:a7:a7:cd:de:58:c7:
8e:ef:32:ab:ce:7c:12:42:40:97:43:51:73:d0:da:
49:a6:f3:05:60:5e:c6:b7:6f:37:25:39:01:9d:4d:
03:1d:41:62:84:21:0d:bd:51:53:dc:16:1a:76:11:
9e:5b:b1:04:e9:7f:cf:80:bc:4a:8c:9e:3c:2f:da:
7d:7d:47:2e:ea:4b:51:39:80:35:69:c9:10:fc:be:
94:33:17:d9:b0:16:00:99:71:4b:de:7e:9f:d5:84:
3d:74:e5:25:19:f7:21:07:3f:cd:10:5a:3b:a1:fe:
8a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EF:1F:CB:DA:31:A2:A0:AA:0A:41:26:9E:CC:86:C2:31:58:3D:98
X509v3 Authority Key Identifier:
keyid:EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:65:24:d7:93:76:e5:89:85:f3:19:60:ba:06:03:33:53:8c:
2e:f9:ba:2f:05:bf:88:b4:cf:e6:e6:88:21:13:d2:30:f2:ee:
2c:0c:6a:c4:6c:14:cf:f4:4c:ee:ce:6b:8c:bd:55:43:01:53:
07:18:26:5b:5c:b6:a2:b1:19:49:c1:00:1f:a4:8a:9b:d5:f0:
90:b6:a7:d9:89:76:35:88:b3:dc:f6:db:6f:80:48:74:01:31:
c5:66:ae:e5:23:36:5f:fe:25:22:72:5a:60:2b:fa:3e:ed:7a:
4d:66:1c:f0:44:10:f2:b9:e1:d4:b5:6c:1c:3c:00:c8:9a:30:
b1:2f:62:67:11:3b:e2:3b:29:96:f3:19:48:d2:a5:16:0d:9c:
db:c5:a0:59:34:9b:f3:6c:dc:bc:15:d1:14:e0:bd:e4:e4:7b:
24:5f:34:62:64:0b:c1:50:35:a1:d6:84:0e:92:ce:9c:d4:7a:
58:87:36:70:2f:9d:32:95:85:bb:44:b9:99:d8:d5:f6:d9:ee:
29:4c:7f:10:35:60:19:55:9a:a7:ab:bc:0a:74:ce:54:05:fb:
27:7d:ec:8a:5b:fe:86:af:5d:3b:92:cf:04:be:8d:bd:cf:fe:
61:63:e7:0c:b0:48:1b:2b:e4:ec:27:04:d6:e8:fe:7b:91:30:
06:38:7e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:21:17 2025 by rpki-client