Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier: cm4FnGvP/5f+PCC5a/8sFWasIE+OdAIqfmMwV1IppXM=
Subject key identifier: 6B:51:2A:D1:4E:F2:10:BB:60:80:DF:D3:E0:B0:68:88:96:D0:C1:3A
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer: /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial: 019A5006E83F87F984FFA75C43BC5F6F08AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 18:00:21 +0000
Manifest this update: Tue 04 Nov 2025 18:00:21 +0000
Manifest next update: Wed 05 Nov 2025 18:00:21 +0000
Files and hashes: 1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: 0Cxb4OrQ8e7WeOZR9OpTm587auVksCNI9951lPCm6Ew=)
2: J9Y5qrjsI2Qtuq7klk41lQwg1og.roa (hash: NNuL/WZWhtDsn2nhsgr73rvUsNOJxUI43avvh9gIeRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:e8:3f:87:f9:84:ff:a7:5c:43:bc:5f:6f:08:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
Validity
Not Before: Nov 4 18:00:21 2025 GMT
Not After : Nov 5 18:00:21 2025 GMT
Subject: CN=6b512ad14ef210bb6080dfd3e0b0688896d0c13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c0:5b:4c:9d:c2:31:6b:c9:15:77:a0:db:cb:
d7:16:3f:65:3e:9b:57:80:fb:61:3b:c9:40:b1:87:
79:8b:8a:d3:78:1c:97:5d:65:9c:fc:91:e2:3f:f1:
de:c0:ab:03:51:b3:d1:c9:1e:94:4c:3d:ee:52:10:
8d:62:89:53:02:cc:2f:fb:05:30:de:c1:dd:e6:c5:
8a:50:5c:df:67:83:f7:05:d4:29:ed:9b:9e:4a:b3:
eb:91:a3:f5:12:4a:4a:b6:7c:56:0a:bc:26:d2:7a:
55:cc:83:18:b4:67:0d:8a:82:b4:ad:81:ac:5a:95:
1d:8c:44:02:ff:5b:7c:ba:5b:64:eb:65:2f:d0:b0:
56:70:c0:37:03:7b:ab:2a:44:f8:3f:f1:ea:ef:a4:
74:6c:37:b0:ee:57:74:99:2a:89:06:72:88:f7:6d:
d9:66:cb:23:9f:3b:85:6a:fb:4b:9f:5a:86:f9:51:
7c:c3:24:22:b2:df:f3:47:ef:73:54:87:ac:ad:52:
9a:12:03:ff:e8:2f:2b:45:56:6f:9e:22:42:8d:7c:
1a:4c:01:6e:26:b7:22:de:64:6a:bc:99:19:86:d7:
63:4b:e9:29:4b:e7:ac:34:45:5a:90:d1:e3:8b:4b:
51:4f:54:f9:b5:00:ec:a9:21:3b:63:b8:c7:4e:b2:
ae:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:51:2A:D1:4E:F2:10:BB:60:80:DF:D3:E0:B0:68:88:96:D0:C1:3A
X509v3 Authority Key Identifier:
keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1d:4c:7c:66:1f:f7:74:57:64:f6:e6:14:90:7a:97:e0:b6:
58:f5:3f:8b:4e:19:a9:b8:46:5a:59:3a:5c:05:44:41:8f:4a:
3f:56:09:51:f7:ff:81:5f:e9:c3:00:a2:4d:e6:d2:32:96:d6:
9b:13:44:eb:e5:79:c4:6b:2b:43:00:58:ff:f4:22:00:31:be:
f8:e0:8f:86:3a:5d:0f:79:d0:4d:22:90:92:9d:02:24:c2:77:
33:15:56:f4:a6:1f:23:bd:13:0b:89:e9:29:97:56:8d:9d:1f:
f5:9a:a8:07:8c:78:2a:e0:d9:d5:1c:91:5f:df:ed:8d:e8:87:
78:a0:9c:35:83:d7:e5:02:6f:36:fa:cf:6a:20:ea:ba:e6:53:
a6:82:af:12:5d:77:65:7f:96:f4:fa:cc:36:a3:27:f6:c1:54:
e3:f0:81:5f:d1:3c:20:9e:61:d2:63:4b:18:74:58:ac:ff:fe:
8e:f3:9d:24:38:cd:72:2e:59:f9:fa:c8:d0:9c:2e:42:9a:45:
4c:03:4b:a7:70:6e:2c:d7:e8:71:f9:13:fd:5e:d6:ec:ce:7a:
b9:49:0d:3b:c4:8c:bd:74:30:b9:9b:9c:f4:e5:20:ac:18:9d:
52:f1:bb:cb:e0:ae:7d:85:e6:03:b4:c7:d9:be:ce:6e:61:c6:
e7:96:78:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:09:11 2025 by rpki-client