Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: y9BsLrmTXAlN0FYiyTHCUyc7cvJWJzr+GFhToVHjU0k=
Subject key identifier: 5C:5C:7E:45:B4:80:8E:83:2A:D3:17:CE:A3:D5:BB:76:EF:50:00:E9
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 019A4DE22331868B880A116BB52E2F4CE40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 0EE1
Signing time: Tue 04 Nov 2025 08:00:56 +0000
Manifest this update: Tue 04 Nov 2025 08:00:56 +0000
Manifest next update: Wed 05 Nov 2025 08:00:56 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: TjHU88qGGEKUdxZFPRZOn4RY8xNh0tNwJ4RFbNKRVOc=)
2: LW4-Oe35V5eJKzg68ztfFqGhSFg.roa (hash: D73s/rG3IJUbtI4RHRwuGNv/eWQmd3ddtUaorKL1EVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:23:31:86:8b:88:0a:11:6b:b5:2e:2f:4c:e4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Nov 4 08:00:56 2025 GMT
Not After : Nov 5 08:00:56 2025 GMT
Subject: CN=5c5c7e45b4808e832ad317cea3d5bb76ef5000e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:ee:75:af:b2:ad:82:69:aa:5f:17:f7:0d:
b4:14:16:72:66:30:15:90:af:21:d6:91:4b:87:c8:
fb:bb:08:7b:fd:dc:77:65:d2:25:a9:eb:00:1e:07:
36:9b:b2:8e:40:c7:de:5f:4d:8a:cb:c5:b3:41:e3:
95:42:3f:2f:83:2f:92:74:30:c0:f1:30:00:49:74:
42:70:c6:74:42:ac:56:c1:57:d6:f3:53:8b:99:75:
bf:84:33:63:67:26:53:b8:33:f2:a9:6a:e8:30:b8:
8b:11:11:47:d9:2b:87:04:f0:7a:30:92:d0:e9:c0:
af:31:87:00:fb:3c:98:93:5e:50:ed:ce:dd:f2:19:
a8:5d:d4:6e:49:2c:a6:81:83:81:21:a3:eb:a3:ab:
15:85:07:5a:13:d3:17:03:26:21:a9:41:00:2b:7b:
09:38:70:a0:b6:19:5c:f7:05:a8:d9:4d:3f:45:95:
e4:d8:98:39:0a:11:33:12:7e:49:c1:59:ad:fd:e0:
8d:36:9b:d8:ca:c3:94:0d:f6:0c:92:c3:34:dc:07:
8b:43:26:44:a4:7d:c4:18:3d:0f:73:8f:46:9b:3b:
1a:23:97:fc:0a:1a:f5:ae:82:fc:32:47:ce:0b:5c:
ec:d1:ff:7a:0a:68:68:13:8b:08:0c:ff:e1:74:2b:
1e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5C:7E:45:B4:80:8E:83:2A:D3:17:CE:A3:D5:BB:76:EF:50:00:E9
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a6:b9:02:c0:0d:20:18:58:4b:40:8a:f0:29:a5:2b:0a:f7:
26:73:72:16:e5:0d:56:a7:a4:ea:ae:dc:f8:89:db:b2:ae:fd:
6f:f6:98:3a:6c:52:1a:10:f0:58:6d:31:92:7c:b6:e5:b6:c0:
c0:cc:d4:f7:b5:7a:b8:b1:d1:20:6c:1b:40:cd:c6:88:df:ff:
68:d6:1f:cd:65:e1:c5:11:a9:e0:5d:f7:56:f8:45:b2:49:e6:
6d:fb:5b:ec:95:3a:5d:81:6e:33:d1:93:de:c8:48:eb:59:da:
0d:c1:61:55:6c:18:76:d1:9f:2b:b3:e3:cc:f1:a1:ec:7b:1d:
49:13:ef:74:de:a2:30:30:63:95:be:47:2b:85:2a:4a:de:9b:
b9:7e:99:9a:e3:4e:3c:bb:7b:6c:b3:2b:ea:e7:4d:cf:99:cc:
45:f9:c5:bb:11:dd:1f:10:6b:f1:b3:8b:6e:59:21:eb:78:fc:
66:81:fa:83:0b:9c:58:3f:d2:db:73:7b:5d:cc:ab:33:a8:3c:
2c:d6:1d:97:98:be:6e:8f:a2:81:98:ac:0a:95:cc:d2:f1:7e:
25:bb:a5:f0:0f:82:8a:e6:53:6d:32:1e:84:ed:2f:9e:48:22:
8b:25:df:a6:59:22:5f:4d:db:10:b6:3c:0c:35:62:4c:26:13:
f6:90:33:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:38 2025 by rpki-client