Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
File: 7jd-2foR7BmVVVl2LeBHpabrFKg.mft (raw, json)
Hash identifier: AFPr96kdRrQRhHDCk6ThbU54kTgqeRm6vdRLRYLaY4E=
Subject key identifier: C8:EC:90:B0:6B:C6:58:64:49:94:91:6C:7A:09:28:91:13:78:2A:C2
Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
Certificate issuer: /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Certificate serial: 019A4EF41E73CB44619A0E22A65A02B4C80D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
Manifest number: 0CA6
Signing time: Tue 04 Nov 2025 13:00:12 +0000
Manifest this update: Tue 04 Nov 2025 13:00:12 +0000
Manifest next update: Wed 05 Nov 2025 13:00:12 +0000
Files and hashes: 1: 7jd-2foR7BmVVVl2LeBHpabrFKg.crl (hash: SAj8dbV85uyw0Q3jP6PaQVlTORiB9UQ0wdmzOlLbeZk=)
2: Ypkv0Dz3MT0Yx1rzRPlqN8ybhig.roa (hash: 5FSjbaTtR9k8SDOj/2LjE1uuErnl+zHIrGSKMQg96EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:1e:73:cb:44:61:9a:0e:22:a6:5a:02:b4:c8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Validity
Not Before: Nov 4 13:00:12 2025 GMT
Not After : Nov 5 13:00:12 2025 GMT
Subject: CN=c8ec90b06bc658644994916c7a09289113782ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:47:93:4a:11:8b:d1:26:3b:96:3e:33:3a:
33:d1:b9:e5:c7:9f:3a:e9:11:e2:9e:af:03:f3:3d:
2a:53:5b:8a:80:70:06:91:8a:a6:00:80:a8:d4:bb:
34:0b:31:89:51:1d:3c:8c:a8:85:86:3b:cb:ea:b4:
32:18:79:2f:a5:1f:e7:0a:02:e6:7c:17:ac:22:cd:
27:66:c7:98:e2:4c:cb:cb:93:e9:84:ce:df:0e:05:
f8:3f:b0:4d:22:34:76:85:6c:67:d9:70:aa:ad:f3:
e8:89:27:a0:13:fb:22:d9:3a:eb:8e:c6:25:a7:f4:
fb:7a:b1:37:53:3b:45:63:7f:0a:6a:84:de:ef:24:
48:ae:86:ab:12:32:01:f5:fd:33:83:a9:41:01:ac:
ad:8a:cc:81:1a:69:21:f1:c0:cc:ad:1f:72:eb:0f:
bd:de:c1:2f:1c:b8:ab:d0:48:9c:be:d3:49:24:9b:
a3:ab:aa:fe:26:e4:5d:0e:5c:4b:7a:da:76:13:b6:
36:9d:67:97:92:60:a6:e9:61:4e:7c:7a:6b:d2:af:
48:69:08:60:e6:15:dd:74:f7:d0:41:82:6a:e4:2c:
20:9e:c4:4f:fb:35:fb:60:6b:ad:e9:10:02:fd:02:
41:92:eb:cd:1b:72:6a:18:82:29:7c:29:8e:10:5b:
40:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:EC:90:B0:6B:C6:58:64:49:94:91:6C:7A:09:28:91:13:78:2A:C2
X509v3 Authority Key Identifier:
keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:f1:11:9b:98:0e:53:08:bb:fc:60:e4:5d:d7:8d:a2:c5:47:
ff:4d:a9:67:1e:85:d9:90:0d:90:fb:56:4a:c7:ad:4c:0d:29:
72:88:e3:3a:d0:12:07:b0:bd:98:a3:af:2c:fa:d6:03:56:70:
93:67:d0:6c:59:d4:70:59:59:fd:e8:cd:5c:1f:a0:94:27:39:
d2:5c:44:0d:7f:3e:5f:17:13:e8:10:5e:c0:7a:5f:e8:55:8c:
2d:c2:0f:12:5d:37:6a:a4:8b:15:01:a1:3b:e7:a8:92:ab:70:
dd:a2:6c:51:83:60:c4:dc:c6:c9:2e:44:60:4b:c6:58:fa:14:
f1:d4:f8:ed:dc:46:75:74:a7:0d:57:37:f8:6f:86:e7:d3:f7:
57:03:9b:85:70:57:c9:5f:11:59:6f:bf:0a:6d:fa:5f:20:06:
52:62:04:50:fc:22:78:9e:7c:59:21:4e:68:8f:3c:1e:8d:50:
f5:49:31:dc:97:5e:e4:20:ad:7b:f5:a1:40:ca:05:16:cc:d3:
2b:25:b8:ce:e3:8a:57:7f:a6:96:4d:a0:24:1b:b5:a7:71:8e:
31:be:e6:5d:3c:94:fa:98:3c:90:9a:4f:9d:fb:3e:56:b5:14:
24:df:93:67:5f:5c:79:b8:be:49:8e:0f:4b:11:bf:89:ff:30:
25:ea:35:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:13 2025 by rpki-client