Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File: 7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier: dkhE9QPI1+egT2P4DKv97NZoGqpvC7gcAmxDCNs8lZ0=
Subject key identifier: 6B:B0:9F:64:2A:F5:5B:D1:65:14:55:40:17:D2:E3:B4:56:F4:C4:C4
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer: /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial: 019A4E8653A1F800A3E7188124346255946A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 11:00:17 +0000
Manifest this update: Tue 04 Nov 2025 11:00:17 +0000
Manifest next update: Wed 05 Nov 2025 11:00:17 +0000
Files and hashes: 1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: lEsT1GEnqSoPCAQ06OPBfv06v7o3+9fi6PSKiCUw5+0=)
2: 9zc3UK9Q2NW5kQioYk692gU-YJI.roa (hash: BBodVy2RZip9O+WWUTv52ptxLTbUw/7auCFYyPArRAA=)
3: UQ_3RuYAdJoYpjdqceJNmc5aoug.roa (hash: q3FXkXKtZ8hFVmAvp+UOJxjM7FKEfq7BOOg+5WvlLx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:53:a1:f8:00:a3:e7:18:81:24:34:62:55:94:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Validity
Not Before: Nov 4 11:00:17 2025 GMT
Not After : Nov 5 11:00:17 2025 GMT
Subject: CN=6bb09f642af55bd16514554017d2e3b456f4c4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:23:8c:c6:ac:f1:99:d1:7b:b2:93:d9:f1:
d0:ca:f5:90:da:74:ac:4b:e6:54:cd:f2:fe:98:5a:
d2:c1:0a:1e:b6:23:65:3c:9f:49:3f:f1:23:7f:1f:
fd:27:a0:b0:13:13:98:2f:5a:6b:49:5a:38:1c:99:
27:bc:f8:31:f1:4a:3e:6b:b3:23:5b:42:e3:d5:db:
1b:b1:25:86:75:f2:3a:b7:a1:da:82:46:75:5d:ee:
8f:98:6f:75:92:fe:06:fb:c9:88:2b:64:ae:71:7b:
d5:d4:7e:dc:c7:f1:ae:2c:17:7a:3e:f0:3c:27:7e:
2c:c5:f3:f5:ba:8c:8b:36:d5:f5:e1:a9:7c:ff:f8:
52:7c:03:ee:09:84:31:c8:e3:2b:5d:ee:90:07:e6:
39:f6:b0:8e:3a:e0:8b:aa:27:27:30:1d:7c:20:51:
5f:0c:b6:a9:f5:89:e9:28:9e:3b:9a:05:18:a8:c0:
03:f9:57:6a:f0:21:d8:8e:12:98:80:f3:c0:92:03:
76:10:76:5e:d9:90:96:66:fe:da:10:8e:7b:3d:c8:
b2:21:47:f8:c8:aa:c1:ff:47:f8:13:62:c3:e2:92:
50:44:76:56:99:fa:97:2b:f6:b1:87:a8:7e:4f:63:
f4:35:02:06:5b:76:e5:2c:1f:93:d2:19:23:34:d0:
a4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B0:9F:64:2A:F5:5B:D1:65:14:55:40:17:D2:E3:B4:56:F4:C4:C4
X509v3 Authority Key Identifier:
keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:02:e3:1f:6f:0d:c7:82:b3:0d:bd:2d:04:10:4b:c0:9a:fd:
64:90:ba:e5:ac:7c:b0:86:a4:cf:b6:49:4f:05:f0:1d:fe:ee:
bb:76:64:a1:19:cf:c1:c0:ac:1d:15:ab:ec:a7:f9:68:1c:38:
a7:c9:f3:47:75:77:44:01:bb:69:f6:b6:8e:3f:ab:86:c8:43:
99:fc:d6:b3:07:4a:28:5f:89:2a:80:9b:c5:ef:09:89:d6:ba:
e6:27:e9:9a:4f:73:5f:c3:31:da:3d:ae:17:82:53:1a:85:24:
22:38:af:65:77:e1:67:58:40:89:ba:64:a6:9d:f4:6a:b1:cb:
3c:a2:f9:b7:95:a0:a5:73:c9:99:34:33:c1:1e:df:d1:02:98:
c3:04:b4:aa:8b:86:94:e7:66:8e:13:ba:1c:ad:a5:7e:99:c3:
cc:c6:28:2c:17:72:f8:d9:4b:3d:6e:62:5f:01:40:ea:a5:0f:
62:20:ad:88:2e:1a:11:4b:e9:9d:9d:9f:6f:fa:32:b0:6c:e8:
40:1f:5d:c1:1f:54:4e:d5:f8:c7:1f:b5:c4:31:fc:e1:99:06:
62:b7:02:3e:94:43:b7:f1:29:6a:fc:bf:c7:d5:af:de:55:6e:
9d:dc:32:e1:f0:ae:15:ca:1e:0d:b7:af:6b:e6:2d:04:9e:6d:
1f:57:f1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:11 2025 by rpki-client