Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
File: 7WUYxCbPxAgvuS7HQNfDx4glVjs.mft (raw, json)
Hash identifier: oOa+8TDaDNPnA/NszfkwnZdSMxcWhXz7yoZcso2a0sA=
Subject key identifier: D6:5D:B5:C2:8A:22:AD:15:9E:2A:AA:17:21:A7:F6:8D:50:C3:25:23
Authority key identifier: ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B
Certificate issuer: /CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
Certificate serial: 019A4EF5958D1DE2B18B59AC4B90FE45A116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
Manifest number: 0B60
Signing time: Tue 04 Nov 2025 13:01:48 +0000
Manifest this update: Tue 04 Nov 2025 13:01:48 +0000
Manifest next update: Wed 05 Nov 2025 13:01:48 +0000
Files and hashes: 1: 7WUYxCbPxAgvuS7HQNfDx4glVjs.crl (hash: 0PqemnOQbM7IR+OD9oBPheKfFqPgbikuCmwJzTGZV34=)
2: Aiqke6vAdjSDZXc7_x-2ztL2HMM.roa (hash: 4MgcyURZP/QIugzfGvm0/MM0dlghCJFIzgyt28gsogw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:95:8d:1d:e2:b1:8b:59:ac:4b:90:fe:45:a1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6518c426cfc4082fb92ec740d7c3c78825563b
Validity
Not Before: Nov 4 13:01:48 2025 GMT
Not After : Nov 5 13:01:48 2025 GMT
Subject: CN=d65db5c28a22ad159e2aaa1721a7f68d50c32523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:01:91:60:98:65:c7:3b:f5:bc:09:cb:53:
85:5f:db:2d:44:00:0e:d1:a1:93:40:f8:62:eb:15:
9e:ae:77:c7:be:8d:96:30:3b:fb:bc:aa:30:d4:8b:
81:c5:6b:32:d8:34:0e:95:d2:62:1f:1e:e5:a8:c5:
73:b7:e9:62:83:af:3c:9d:27:78:3f:28:f3:f9:10:
dd:56:0c:32:df:7a:d4:fe:12:80:ac:8d:21:77:e0:
69:2b:52:17:0d:90:56:38:bb:a5:a8:73:8f:2e:37:
78:90:f2:d7:0d:5e:b8:69:77:4a:dd:cc:67:26:c9:
29:c3:a6:4a:91:b6:b7:0a:b1:41:d5:ce:05:d3:06:
42:7f:7a:d0:f6:71:cb:4b:78:0f:bc:3d:f6:8e:43:
50:2c:6f:5a:e7:6d:48:e8:29:64:0f:0b:95:5b:09:
5f:4c:a1:ab:ef:9f:7a:95:88:23:4e:7f:f4:13:a4:
a8:42:64:a7:4d:09:46:9c:22:bf:85:7e:e0:b4:2b:
28:95:48:34:94:95:aa:09:c9:65:82:69:07:02:c2:
92:e2:a6:c7:31:79:e6:ab:8b:77:18:e0:0f:9e:42:
34:0d:f6:5c:68:51:25:93:c7:5a:cb:d3:6e:d1:99:
12:03:e2:07:9f:f0:7d:16:53:dd:43:89:30:bd:86:
97:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5D:B5:C2:8A:22:AD:15:9E:2A:AA:17:21:A7:F6:8D:50:C3:25:23
X509v3 Authority Key Identifier:
keyid:ED:65:18:C4:26:CF:C4:08:2F:B9:2E:C7:40:D7:C3:C7:88:25:56:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WUYxCbPxAgvuS7HQNfDx4glVjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5fbd09-0a61-421c-9c36-05b3b9709f09/1/7WUYxCbPxAgvuS7HQNfDx4glVjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:24:65:c2:db:dc:a7:78:12:0a:6e:04:f9:eb:cf:79:54:eb:
85:30:2e:dd:dc:1a:ab:f4:e0:b8:21:56:91:00:b0:d8:12:86:
4d:78:d8:c1:9e:f1:a6:6b:63:a5:b9:2b:5d:e9:dd:4f:74:69:
23:7a:3a:0e:6c:6d:42:20:69:68:a0:46:51:9e:75:3a:6f:64:
24:f7:c8:69:8d:bc:15:bd:14:d2:88:d0:66:2f:c7:ba:49:bc:
1c:58:35:93:19:e1:6a:24:6d:4e:1e:9b:54:96:f0:1b:ef:d5:
f1:f5:55:01:9a:4b:60:e4:84:3c:3f:a4:91:fd:38:07:0a:f8:
d5:50:7e:f8:1b:9e:4f:7f:d7:3e:db:9f:0f:38:94:8d:ed:64:
ed:51:07:76:34:84:06:56:b2:c7:0b:c1:bb:4a:47:ed:f4:dd:
2c:bb:2e:69:87:05:68:e2:d7:d3:9d:1f:b7:d3:fb:18:8f:82:
da:f5:3d:c9:cb:05:f8:6b:6a:d1:e2:49:c8:ef:6f:9a:43:25:
58:cb:70:ed:b7:55:54:95:6a:46:71:88:e9:37:5e:96:04:82:
de:60:c9:fc:f0:4f:20:43:bc:a7:bd:43:0b:83:a5:96:a9:4d:
fa:76:9d:25:17:99:90:19:d0:8c:cf:b8:6e:f9:1c:6e:ea:37:
a7:62:55:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:03 2025 by rpki-client