Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
File: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json)
Hash identifier: AZyM+DKmnUiT6fIcOkbeMIyZrUjT4ueZeJlzZ16J514=
Subject key identifier: 45:F6:69:42:4A:22:E8:19:88:B0:C0:FA:5D:33:08:17:AE:26:CF:3D
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Certificate issuer: /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial: 019A51197F0EF899BBE80840B6054173A8E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
Manifest number: 1578
Signing time: Tue 04 Nov 2025 23:00:16 +0000
Manifest this update: Tue 04 Nov 2025 23:00:16 +0000
Manifest next update: Wed 05 Nov 2025 23:00:16 +0000
Files and hashes: 1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: X0lqz6yeeXeadZnv/GEx4DJr8MZDqrZz8QrgXcBdTiU=)
2: UXcHNRDTyy3PiUqS2xFpW1tKLYo.roa (hash: BltR1oVh4LzI1B9mL1LTvil5PzPzPEDEKGPAhFkqH3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:7f:0e:f8:99:bb:e8:08:40:b6:05:41:73:a8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Validity
Not Before: Nov 4 23:00:16 2025 GMT
Not After : Nov 5 23:00:16 2025 GMT
Subject: CN=45f669424a22e81988b0c0fa5d330817ae26cf3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:90:e1:62:17:0b:32:95:7d:ea:a0:28:1b:
4f:e1:fd:44:07:e1:92:9f:11:ae:2e:2b:a7:e0:37:
34:af:b3:0e:fe:92:7e:64:08:5e:14:8e:dc:6b:dd:
b0:dc:79:5f:e6:5a:30:56:26:3d:1f:14:f8:55:99:
12:66:67:81:b8:b6:88:f2:10:6c:dc:bf:50:14:d4:
5d:97:53:57:27:1b:30:ca:de:d1:b1:e4:68:9c:1d:
7a:bd:41:33:5d:d8:e7:60:95:d9:ef:89:d7:72:71:
9a:d2:f2:72:fc:cb:fb:77:b0:55:db:46:25:59:a4:
7c:35:f4:3c:a5:f7:a5:37:7d:5f:88:df:d7:02:f0:
69:33:14:25:5d:6c:29:63:13:c8:00:e4:21:ed:7f:
11:16:9a:06:48:bb:ed:23:bc:7c:02:3f:91:fd:2a:
09:19:b8:78:9e:ae:93:7b:45:5e:e1:d2:f6:93:9b:
f4:a7:20:bb:97:76:ca:fb:ec:d9:ce:37:8a:6e:b9:
af:fb:99:e3:b6:c7:e0:a7:b9:72:8c:1a:f6:98:a1:
cf:fc:cd:e5:17:25:82:81:ed:8d:ce:80:c3:ba:d5:
21:b9:ff:85:62:7b:42:73:fc:c1:75:1e:77:01:06:
d1:57:ad:5f:27:c0:5d:ef:25:61:a9:34:38:18:d9:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F6:69:42:4A:22:E8:19:88:B0:C0:FA:5D:33:08:17:AE:26:CF:3D
X509v3 Authority Key Identifier:
keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e9:aa:ae:2a:52:da:9a:a9:a5:4d:3a:b1:2c:4a:53:d7:6f:
a8:3d:52:a9:81:10:86:56:9b:21:ab:b7:b3:f1:cc:e8:d8:32:
e8:37:bb:f3:bd:4c:06:fe:73:4b:2d:29:57:9a:7b:85:d0:58:
2b:c4:b9:16:05:95:54:69:2e:62:a7:2c:c7:00:2a:1e:78:df:
f4:22:77:a4:ae:08:9b:8d:47:05:37:b2:25:a6:4f:c2:20:25:
f0:50:fa:ca:88:ed:91:29:bd:32:44:9e:e3:57:80:1b:2d:85:
e8:04:e4:5c:69:d2:24:45:25:e1:d6:58:e1:e5:6b:f9:59:3a:
ca:e5:e0:45:cf:e9:3e:9d:5d:f3:ef:94:34:d8:f6:36:3c:b1:
14:dc:cb:37:9f:10:39:f7:0e:bd:ec:56:14:8c:8b:07:d3:6e:
cd:b6:bd:2f:b2:6c:01:4e:29:1a:18:b4:9c:d6:23:ce:08:48:
15:9f:be:4a:29:7b:38:85:26:bf:aa:3e:8a:23:b3:06:cb:5c:
b6:a3:f7:a7:83:bc:06:e4:ea:49:2e:fb:96:95:cd:9b:c2:78:
dc:df:1f:1e:9e:65:4e:54:e1:b6:a2:00:5d:0e:7f:ff:41:40:
64:45:08:3b:32:a4:58:bf:d6:2e:f9:60:d8:cd:50:fd:92:88:
f4:df:4e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:58:43 2025 by rpki-client