Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
File: 7-oXe8wrDvZMq2BObmQnsa3gv2k.mft (raw, json)
Hash identifier: ACIKKMbw5rai0q1nJA9Fh305A4GlW7mEkXxw9Hi54rU=
Subject key identifier: 73:35:B5:6E:D3:39:36:7D:2C:15:A2:1D:A4:80:18:FE:0E:D9:66:44
Authority key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
Certificate issuer: /CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Certificate serial: 019A4FD0300010A05FA1C5EEBC4E78E724F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
Manifest number: 0F73
Signing time: Tue 04 Nov 2025 17:00:35 +0000
Manifest this update: Tue 04 Nov 2025 17:00:35 +0000
Manifest next update: Wed 05 Nov 2025 17:00:35 +0000
Files and hashes: 1: 7-oXe8wrDvZMq2BObmQnsa3gv2k.crl (hash: zulR59cp2Jyu5CjOMJPRKDh9YbjguP0ZByqE4IK2s54=)
2: BfBzjofHcSu4a3jygqfPxr7xm38.roa (hash: WZsJkNeqT7b0+zK6F4CNPynL3I93rxtNrXgK5qWCEEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:30:00:10:a0:5f:a1:c5:ee:bc:4e:78:e7:24:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Validity
Not Before: Nov 4 17:00:35 2025 GMT
Not After : Nov 5 17:00:35 2025 GMT
Subject: CN=7335b56ed339367d2c15a21da48018fe0ed96644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:58:86:ea:43:7a:78:ac:4f:04:f9:e0:b6:
60:66:de:a9:56:15:c5:50:e8:7c:e3:f3:ab:bc:f6:
97:f4:db:d5:15:a3:1f:dd:82:6c:56:ca:24:96:0d:
92:47:46:3e:5f:67:ec:08:33:0c:04:32:75:1c:b0:
7b:a0:40:4f:62:e9:39:26:4d:32:ea:79:82:9a:39:
61:d8:07:4f:7e:91:d2:a0:70:8a:79:d3:e9:37:60:
fc:e9:43:2d:ec:51:b7:5e:70:c5:98:d9:bf:11:9a:
53:82:4e:aa:23:d6:79:a8:c4:fe:d5:eb:99:db:af:
65:71:ea:0d:96:d7:8a:8b:a2:24:e9:45:d9:0c:4f:
c3:fd:ba:e4:80:2d:60:c4:ef:75:f2:c0:7b:5b:d4:
c2:e2:a0:e5:a2:7c:20:70:44:9a:b2:6f:b2:21:39:
8c:22:26:84:1d:03:53:a4:81:35:2d:39:57:bc:2a:
73:9c:6d:50:c3:49:4d:fb:2c:ff:37:ee:d0:16:93:
a6:41:88:b7:80:25:bf:08:bb:2d:53:6e:b6:c1:ab:
0e:51:98:13:95:90:f1:74:be:67:ff:d7:5a:60:49:
8d:1c:4f:09:e9:a7:16:0a:d1:03:4f:28:89:b4:63:
e1:5f:76:a4:69:aa:ee:15:5c:7b:10:13:6e:45:c8:
00:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:35:B5:6E:D3:39:36:7D:2C:15:A2:1D:A4:80:18:FE:0E:D9:66:44
X509v3 Authority Key Identifier:
keyid:EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5a:e0:49:a1:2c:82:d1:af:92:ed:b6:ff:ee:0d:b9:0c:e3:
e6:09:52:ff:18:3a:e0:bd:42:38:56:f8:70:1b:5b:39:a6:17:
80:28:3b:d1:b4:8f:6a:89:61:bd:67:2e:8a:0c:c1:db:65:b8:
7f:e0:f9:a8:ed:b4:7e:6f:5c:9b:6b:b1:10:1d:07:f8:76:c7:
d5:47:86:bd:1e:95:6a:64:18:d5:63:a3:c7:ac:25:b0:d2:a9:
44:bc:43:17:4e:ae:44:19:15:32:c3:6e:6d:61:71:c6:da:14:
ab:4e:da:c7:f5:e4:5a:9c:84:92:64:f4:4d:68:b1:8d:be:d1:
11:7b:f4:ef:33:aa:5e:58:64:b9:68:21:c0:2f:5b:bb:28:94:
84:95:40:b3:ed:27:af:7e:94:c7:9a:22:7d:e4:52:78:84:49:
c9:68:6e:ed:3b:76:aa:5d:55:47:b9:78:f3:45:fb:b0:28:14:
25:1a:70:38:28:b0:90:ab:48:d0:4b:8b:69:d9:6d:72:aa:5c:
ca:e3:98:57:72:df:c0:16:cc:91:96:54:b7:de:b9:6b:d8:c9:
94:c7:e9:e5:17:6b:38:c3:79:0e:8c:09:21:70:1c:61:c3:17:
10:bd:9f:58:5c:3d:a7:d9:56:2f:c9:9f:d0:8b:b2:4f:9f:29:
46:92:f8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:24 2025 by rpki-client