Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier: XucAj+3v2klgHUUaQ9Zq/b5p8FSSHXxyAb/oaMpSQiE=
Subject key identifier: EF:C7:04:73:9D:02:C8:60:06:2D:3A:3A:EF:61:FD:79:32:72:58:42
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 019A4EF57DF0B4F4A4839A48EA077CA256CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number: 1457
Signing time: Tue 04 Nov 2025 13:01:42 +0000
Manifest this update: Tue 04 Nov 2025 13:01:42 +0000
Manifest next update: Wed 05 Nov 2025 13:01:42 +0000
Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: XqHwayT2irPauwvR1LCJiid/Zrj9vCsF+P0g99yv25c=)
2: RFaAPpt9TXRuZiSBVJ4x95FnZpg.roa (hash: r/BjBoSYQEd6zQy913IAV7pMwCR1j9bdd+qgN4vkxf4=)
3: mw-NfFERPD2qaYVgEjUcNQ0zcPs.roa (hash: AZitnGA9oKjnHTuxpFFMdyJwJocQCVTArIP5ASVi2R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:7d:f0:b4:f4:a4:83:9a:48:ea:07:7c:a2:56:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Nov 4 13:01:42 2025 GMT
Not After : Nov 5 13:01:42 2025 GMT
Subject: CN=efc704739d02c860062d3a3aef61fd7932725842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:a4:cc:50:e6:eb:1d:e4:53:9d:07:f0:59:
7d:e4:e3:bd:db:20:7d:8f:0d:72:ca:38:68:2d:78:
51:68:03:74:83:82:d0:2c:69:24:8c:e3:18:6a:3f:
52:6f:0c:29:09:76:0a:28:83:ff:d2:b4:ac:23:87:
f1:39:89:d3:da:8b:71:81:f7:7a:c3:a5:29:70:2b:
57:2c:7a:60:61:99:e6:4e:6f:9e:19:47:1d:9e:3e:
62:71:40:0e:14:74:d5:66:20:90:e0:e4:5b:9a:fc:
cc:39:c7:a7:29:54:c4:08:de:70:23:26:ea:92:6f:
16:b8:5c:5d:e8:4e:13:75:0a:f5:db:e5:92:43:0a:
c9:ed:35:2c:8f:02:18:c7:14:fc:08:c3:37:6c:65:
f1:8a:25:a9:6b:61:ef:5c:c3:89:e1:1a:9c:fc:a8:
04:d5:01:06:bc:06:35:d8:b7:70:3a:c6:cf:9b:8e:
90:75:15:ef:a0:8b:9c:ea:e2:b6:15:a2:8d:74:3a:
61:d3:60:ee:5b:71:9a:ed:19:37:4c:a1:eb:68:43:
64:6b:1f:46:d4:bd:74:a6:9c:aa:bb:2c:cc:e1:74:
ce:17:d1:35:2e:bc:e7:32:89:19:21:ae:74:43:40:
81:9e:6c:df:4f:d9:f9:85:2d:1b:9e:51:0f:f9:19:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C7:04:73:9D:02:C8:60:06:2D:3A:3A:EF:61:FD:79:32:72:58:42
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:1b:ee:af:1c:1d:cb:23:3d:ce:04:1e:fe:eb:4e:57:bb:55:
c1:47:4e:de:c9:b3:70:ae:2c:25:67:d8:bf:ba:8b:47:6a:de:
0c:9a:02:e3:4b:6c:ab:c5:8e:ab:84:c3:94:59:57:4e:8b:3b:
98:64:ff:48:28:81:f6:f6:bc:8f:5f:8c:d3:d0:29:44:cc:f3:
1e:a1:bc:d0:07:28:94:8e:20:8c:2c:b2:b0:6a:55:d3:a2:d7:
4c:55:0c:2d:44:45:6a:ed:3a:81:34:e0:e0:af:d3:75:13:5b:
de:7e:64:20:d9:51:f5:b7:55:d5:47:cb:1a:4c:58:70:35:b8:
1b:2a:d2:ce:c6:e5:af:7f:a0:65:ed:07:e5:2c:a3:77:b9:b1:
70:d7:07:3b:fe:ee:ec:f1:4d:c4:84:6d:a0:15:77:a3:57:8d:
36:37:75:b8:74:96:d8:66:c7:8d:90:a5:01:5e:f5:ce:22:dd:
13:03:7e:5b:1f:0e:a7:2b:2e:3d:d1:39:ad:25:81:ec:54:cb:
28:3a:87:1a:8c:e8:5d:36:fd:d2:c0:4f:48:5b:2e:48:ba:7f:
12:d6:7e:b2:22:e2:15:65:d4:59:29:82:6c:16:98:1f:62:c7:
e4:66:62:ff:7e:cd:35:01:a6:7b:a8:9c:65:57:fc:9c:57:ae:
c1:48:cf:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:53 2025 by rpki-client