Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File: 7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier: nCZitZ4u1b84+ozW0IyVu3w4Ybrfz9rfyJ6XwoiuA3E=
Subject key identifier: 98:D4:03:5B:E7:02:4E:76:EA:32:6E:A5:18:7C:78:29:04:F9:23:DD
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial: 019A4D74835733091BF87660A7C14DCD2160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 06:01:12 +0000
Manifest this update: Tue 04 Nov 2025 06:01:12 +0000
Manifest next update: Wed 05 Nov 2025 06:01:12 +0000
Files and hashes: 1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: cDjD6xtx6DAlsyx4IE4x/aWbg7Q50elARUlXHMyQNcs=)
2: DJI5pA0yQdHfWf9YZsCq7SLW83k.roa (hash: aYlNDPO2QXpilHLu8WGoR0IYFB4fHF6uZQ2LQMfMdjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:83:57:33:09:1b:f8:76:60:a7:c1:4d:cd:21:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Validity
Not Before: Nov 4 06:01:12 2025 GMT
Not After : Nov 5 06:01:12 2025 GMT
Subject: CN=98d4035be7024e76ea326ea5187c782904f923dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:55:67:0c:79:11:c3:be:cb:71:39:15:19:
1b:fd:15:34:2a:ba:62:f0:5e:a3:cd:e7:ac:8e:3b:
a1:c9:25:67:a4:29:23:9f:4c:2e:53:26:3a:b4:0e:
3e:23:dd:d4:29:97:c0:cc:d5:d0:58:00:04:1d:f2:
0d:61:4c:08:da:77:64:15:42:23:9b:bf:fb:a6:da:
4a:fb:e7:15:76:dd:6e:2a:61:d7:4a:d0:18:bb:6e:
73:95:ad:1b:5a:0b:37:5c:c9:6a:4a:86:64:6a:ed:
3e:c2:3f:4f:45:35:8a:06:7b:92:6a:34:01:1c:a6:
c1:0a:4a:74:53:bc:2e:66:22:d2:54:04:5a:77:9d:
28:ee:79:98:66:c8:43:00:22:91:8a:2a:5a:a1:06:
60:d0:4c:2c:14:8a:84:b8:7f:f6:44:3e:5f:0b:13:
a7:44:f6:d5:ae:d3:77:55:dc:ac:c8:19:30:9b:b0:
a6:4b:a1:c5:39:51:8e:a8:39:56:53:39:a7:08:2c:
e0:15:8c:f7:06:11:9c:57:8b:22:f5:ba:0b:ea:2b:
42:6a:57:df:b4:53:bf:21:20:cb:49:f8:09:f1:28:
bb:81:89:95:aa:d6:a1:a9:af:67:30:72:db:00:f5:
1b:4d:92:00:64:39:cf:a4:9c:fd:4b:d2:4b:ca:35:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D4:03:5B:E7:02:4E:76:EA:32:6E:A5:18:7C:78:29:04:F9:23:DD
X509v3 Authority Key Identifier:
keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6c:d5:7e:99:04:10:96:48:3e:3a:00:ba:d0:5a:77:d3:f8:
77:b6:4f:d6:ec:ad:29:4f:c0:e1:80:8e:12:32:ee:74:4c:0f:
af:65:66:8e:ed:2e:9c:77:d5:ca:1a:52:23:94:29:4f:96:8c:
36:5e:cc:ee:37:71:a5:7c:7c:02:a9:72:7a:ba:7c:03:ea:8d:
cc:64:96:04:50:d0:c0:91:09:c5:19:66:71:d3:8a:07:f7:57:
19:47:ab:d6:76:53:7e:62:d0:cc:fa:c9:55:3f:af:aa:a1:0a:
a0:17:1d:c5:08:d9:9d:93:b1:4b:63:e9:6e:86:57:82:5c:d9:
e5:58:ae:3b:a7:09:51:99:b5:36:6a:05:07:3e:ca:5f:55:41:
f0:ef:59:81:1c:cf:87:89:38:22:6d:14:f5:d0:3c:70:02:e9:
ea:59:30:3b:fe:78:52:cc:bd:b1:6c:1d:d3:82:5a:48:c5:52:
c1:24:5e:30:77:65:cb:6c:86:6e:8e:c9:3d:08:c8:4c:26:27:
10:f4:28:d7:be:d2:18:f7:20:f2:eb:2f:65:d7:ac:26:ad:d0:
8c:97:8b:90:22:a2:9f:2a:3c:09:4f:08:ad:6a:99:4a:d6:a0:
1b:ae:2b:bf:df:2d:ab:db:2f:3a:bd:f9:59:b7:3c:7d:08:eb:
84:54:4f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:24 2025 by rpki-client