Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
File: c7gWQOG2T1HSun149nd8BW0RVL8.mft (raw, json)
Hash identifier: 7MD7PhzxCJWSH0BlSCQbJWNGhsc+ZhokEJxM41gdAuc=
Subject key identifier: 66:B5:4A:4D:F6:16:2B:B6:26:59:69:39:7D:CC:07:86:36:D3:01:E5
Authority key identifier: 73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF
Certificate issuer: /CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf
Certificate serial: 019A4F624F90665D0E5E9A49FB0F67015184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:34 +0000
Manifest this update: Tue 04 Nov 2025 15:00:34 +0000
Manifest next update: Wed 05 Nov 2025 15:00:34 +0000
Files and hashes: 1: 3rVvEb5TD5sUIiR8g28gQB62SZ4.roa (hash: I97/quPKUPqVv98vrZrzthe6vPPP5kOtjCTGVwTGxJg=)
2: c7gWQOG2T1HSun149nd8BW0RVL8.crl (hash: nSVyZB0ntD1Ye1mf/m8Z00VLmBXKStn0HP31pUQ/Ego=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:4f:90:66:5d:0e:5e:9a:49:fb:0f:67:01:51:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf
Validity
Not Before: Nov 4 15:00:34 2025 GMT
Not After : Nov 5 15:00:34 2025 GMT
Subject: CN=66b54a4df6162bb6265969397dcc078636d301e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:33:19:76:99:13:29:e0:4c:cc:24:53:11:
80:20:9a:39:65:28:57:82:ee:66:f1:37:18:6e:d9:
2e:25:c8:83:d4:77:f3:f7:31:8d:7c:18:0c:eb:a6:
2b:54:a7:0e:f5:f3:22:11:8e:bf:1a:5a:f2:36:e0:
7e:26:cf:37:52:47:f6:cd:02:17:c8:f7:11:16:10:
e0:a3:76:64:33:0e:da:a1:a7:e2:63:d0:9d:61:15:
c2:7b:77:03:23:5c:a6:e1:93:f9:ba:15:50:29:b7:
2d:e1:7d:fc:73:b3:f0:2a:1a:d4:74:c3:47:f4:5a:
a1:be:4b:a4:4f:60:96:89:08:96:ad:b0:9c:7e:42:
92:67:fc:df:bb:6c:91:ae:13:7b:e2:43:d3:5c:d0:
bb:49:9b:47:8d:bd:fa:36:12:41:88:d5:a3:da:16:
8a:f4:09:9d:06:1e:54:ad:0b:95:a2:c3:11:58:f1:
15:9b:52:88:e3:7b:68:de:4a:4d:55:83:ee:ec:04:
db:b6:35:66:8c:25:fd:4c:d0:0c:d9:96:37:e0:fd:
f5:ae:a2:a3:25:b3:2c:09:c3:6f:37:7c:35:f1:94:
8d:fa:38:6e:80:1e:9c:2a:8c:8d:2d:02:46:92:b5:
41:c4:58:3d:ae:73:8f:13:a9:60:2d:58:77:44:0f:
05:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B5:4A:4D:F6:16:2B:B6:26:59:69:39:7D:CC:07:86:36:D3:01:E5
X509v3 Authority Key Identifier:
keyid:73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:13:b0:c4:26:7e:62:b4:93:fd:52:a0:26:23:2e:b3:6e:c7:
e2:1d:d7:8e:e6:15:65:15:88:a8:f6:a6:dc:ad:e0:1d:ff:0e:
1d:9c:19:56:49:62:b9:73:50:cc:8e:6a:5e:c3:19:d3:50:a3:
05:68:69:14:2d:c0:2b:49:bb:a6:34:31:ba:1d:d2:21:ec:c9:
9b:76:8c:98:f7:c1:a4:32:bd:70:0d:e2:79:44:fc:43:ca:69:
e0:0c:ec:a5:79:c1:cb:02:b3:0a:28:a8:7e:cf:01:95:46:6f:
2c:f1:37:89:a4:5b:86:a7:9b:10:29:d3:fc:30:70:94:11:89:
1f:3e:2f:d1:a4:d2:2d:a9:54:a2:b1:80:b4:da:c9:da:40:1e:
ce:b3:6f:d3:55:28:a9:ab:b0:d0:56:d6:64:7d:38:57:ac:40:
fc:b4:cc:c1:76:7c:10:49:e7:98:85:ea:fd:a3:d5:09:ed:1d:
35:39:6d:25:23:13:46:cb:85:4d:00:90:9c:2a:16:d4:42:3a:
c7:3f:f3:4d:4f:42:1e:b8:9f:11:5a:4b:32:5d:93:6f:1a:1b:
4d:d0:06:6a:e1:d3:ab:65:70:c3:00:d3:86:7e:5a:c1:d1:13:
dc:0a:26:5e:ed:7b:43:17:9f:11:a5:42:18:95:db:7b:65:66:
0b:10:3f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:45 2025 by rpki-client