Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
File: 7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json)
Hash identifier: Us3ejYHX6fe4FAQMSZFUmkrNUnbtyS1fuAIEsba27jk=
Subject key identifier: A5:CE:5E:75:7A:BE:0D:BA:56:FE:95:A1:92:B0:E1:19:B2:86:52:77
Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
Certificate issuer: /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Certificate serial: 019A4EF5194BA39DC716E276C874F73EA216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 13:01:16 +0000
Manifest this update: Tue 04 Nov 2025 13:01:16 +0000
Manifest next update: Wed 05 Nov 2025 13:01:16 +0000
Files and hashes: 1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: ngN5CQmmFDvMrq9BIcqgHs9KeMqtM6wmDUdHoVhtgew=)
2: xE_JDYJwb1MCr7C57Rm2iLhdKIw.roa (hash: sRhgH4Cj24QxldRTdKVZiNUSEzN+8JXEsh8ETe2KACg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:19:4b:a3:9d:c7:16:e2:76:c8:74:f7:3e:a2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Validity
Not Before: Nov 4 13:01:16 2025 GMT
Not After : Nov 5 13:01:16 2025 GMT
Subject: CN=a5ce5e757abe0dba56fe95a192b0e119b2865277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:21:c0:d2:6b:7e:dc:ca:77:9e:b3:9b:8a:96:
86:e2:c1:b7:4b:9f:05:4f:ec:a1:53:a3:5b:8f:15:
b0:56:18:ea:cb:8b:ac:b0:e7:da:9b:94:b4:6a:f3:
03:2a:f5:7b:b4:ba:59:94:6c:1a:d4:14:ae:35:e7:
e0:c1:62:0f:32:e4:e4:10:44:80:ac:57:a5:25:8d:
89:5d:8f:0c:4f:90:1e:55:51:d3:0c:4a:16:88:56:
7f:ed:84:73:f3:c0:76:44:73:d0:fd:70:1b:ec:eb:
8c:aa:a7:69:05:ae:0a:01:12:20:1d:1a:b3:f1:31:
09:06:e7:2d:50:27:6e:43:93:ab:46:cd:b7:c7:73:
15:b3:16:75:38:06:6f:7e:28:99:c1:ee:94:3b:4b:
2d:81:68:a2:88:d7:4c:9a:f0:a6:33:7f:52:cc:14:
bc:f0:64:6f:cd:82:fd:91:1e:62:66:bc:da:8f:1e:
ad:38:6c:ed:a9:04:dd:7f:19:6c:46:f9:c2:6e:f2:
b6:b6:df:e0:c7:4c:fe:b2:eb:40:02:16:56:e6:e1:
82:84:75:16:d6:d4:33:43:32:d6:2b:d1:42:12:be:
e4:65:f0:63:e2:61:43:27:08:70:a5:fa:ca:78:bc:
2f:b5:f7:86:00:a8:08:d0:ad:cb:b0:a5:0b:ea:54:
28:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CE:5E:75:7A:BE:0D:BA:56:FE:95:A1:92:B0:E1:19:B2:86:52:77
X509v3 Authority Key Identifier:
keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7d:96:4e:95:3a:94:47:c2:68:45:19:38:63:0d:f2:3f:c4:
46:9a:73:f7:32:47:6d:ea:c9:38:2a:c4:c3:8d:c9:fa:2a:0c:
04:f5:26:f0:4c:1a:40:80:f0:57:f1:1b:e7:77:6c:90:17:95:
67:d6:1a:12:af:d6:d1:47:b1:01:71:0f:19:8b:10:ee:dd:bc:
8e:51:da:de:ec:e0:8b:a7:c2:da:1f:ba:3b:91:ae:45:85:15:
ee:49:5a:75:88:4e:87:0d:82:0a:df:ac:a9:7a:92:74:ad:26:
36:ef:23:b2:f6:b4:79:51:31:9c:49:fe:d2:1e:ea:25:8e:dd:
08:18:ef:fb:e8:e7:09:f2:a8:19:fd:30:45:80:c4:90:6e:46:
0c:96:42:48:3e:ff:91:73:41:82:d7:d3:19:7d:f5:b6:cb:d2:
7d:48:47:18:f5:f7:a5:c4:e7:f3:ef:f5:05:e8:9e:40:05:8f:
e4:c3:53:44:cd:47:77:a3:b8:20:dc:3d:b3:83:c2:7c:e5:ec:
aa:56:1d:df:4c:ab:b6:56:32:fb:19:a7:ad:b4:fd:2d:35:4f:
2d:dd:c9:f3:31:3d:51:b0:c0:58:ab:12:09:18:b1:06:00:78:
a1:52:77:59:a1:c9:49:1c:a2:89:54:9c:08:da:fd:9e:86:40:
13:03:cb:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:26 2025 by rpki-client