Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
File: 7OZJjRdK31yJo2XC0eR33PJPmC4.mft (raw, json)
Hash identifier: j5fL8G7gufm49XemKjpfQE6maSguvGKLVUCHVfyte6I=
Subject key identifier: 25:06:7A:B6:6D:50:CB:7C:72:00:7C:52:B0:8C:CE:6E:76:0D:FD:28
Authority key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
Certificate issuer: /CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Certificate serial: 019A4F996F0A4886E4F8DE6311320F239BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
Manifest number: 03C5
Signing time: Tue 04 Nov 2025 16:00:46 +0000
Manifest this update: Tue 04 Nov 2025 16:00:46 +0000
Manifest next update: Wed 05 Nov 2025 16:00:46 +0000
Files and hashes: 1: 7OZJjRdK31yJo2XC0eR33PJPmC4.crl (hash: JqKEDXPqet3cZln7HNK10S846v8Lz93DTZkbHgcV9lo=)
2: C6x_6w-E774Ctv2tM-pwvlDis4g.roa (hash: INLpD3Xn2Y08yhQMCV4sfvThKHmVJ+/cWpnVIk0AjIY=)
3: Gsw4M_lTA_8kRZfXKXl2Ow61fLs.roa (hash: wx/H0ps5Y+S8LfFB+UMWHcMD/ey9o03wwXXZ26Kx9zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:6f:0a:48:86:e4:f8:de:63:11:32:0f:23:9b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Validity
Not Before: Nov 4 16:00:46 2025 GMT
Not After : Nov 5 16:00:46 2025 GMT
Subject: CN=25067ab66d50cb7c72007c52b08cce6e760dfd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:a7:29:bd:62:44:6a:44:ef:30:cc:0f:ab:ce:
5b:1b:55:bf:e3:3f:de:1d:42:c6:18:c4:11:94:36:
ce:70:ad:a6:3c:ee:e3:17:fd:cb:a8:ea:e1:b4:46:
80:72:83:ae:91:b2:98:4c:eb:b4:98:bc:a9:08:4d:
fd:0a:09:ad:91:33:38:5f:b7:27:df:fb:60:e8:7d:
b9:a8:f4:7d:05:b0:b3:75:4f:ab:76:e4:3f:9b:c4:
b2:ee:fd:68:36:8d:e9:8a:e0:89:7d:e3:fd:92:1d:
3f:76:ca:92:c5:1e:c0:cc:52:85:0e:1f:25:66:11:
54:38:91:a9:64:f9:0c:0f:7b:29:e1:aa:f2:18:df:
6a:23:3f:26:66:3d:00:02:f7:53:5b:60:bd:ab:6a:
df:d0:de:71:33:0a:78:41:76:1c:f9:ab:cc:6a:ee:
f6:a4:bc:38:d2:fc:e8:c4:48:38:fc:0c:08:7a:bb:
0f:c5:2e:38:5d:1b:97:fd:7d:f6:3b:6f:ea:d1:4d:
ca:10:1f:9c:1e:d2:31:7d:52:28:37:66:da:8f:49:
ca:4f:53:64:43:5a:d2:8d:4c:9f:64:3d:ab:c9:c1:
4b:03:c6:fd:04:f3:7f:ac:68:03:ec:35:ef:ef:0b:
e2:0d:4e:65:b4:6b:f2:98:8f:0e:f8:d4:92:e5:27:
b7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:06:7A:B6:6D:50:CB:7C:72:00:7C:52:B0:8C:CE:6E:76:0D:FD:28
X509v3 Authority Key Identifier:
keyid:EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d8:3e:f8:1c:8a:2c:f7:43:c8:f9:df:2d:95:40:ab:22:30:
cb:bf:fb:a3:fd:d7:d6:08:49:4f:6a:e2:7a:da:13:88:dc:f9:
23:35:0f:ea:34:df:4e:f8:6c:5e:9b:0a:86:6e:2f:d6:81:79:
d9:20:ef:8a:10:61:74:1e:a6:d1:86:fd:a8:09:91:b0:3a:a6:
0c:ba:d8:c1:68:d5:34:de:15:3c:0c:d5:4b:3b:f0:db:e0:89:
3d:07:9a:7d:1a:a5:2b:b7:e2:9e:c0:6c:af:34:54:b8:b9:27:
66:4f:d9:de:ad:4e:d4:a4:5c:e1:94:48:aa:4f:92:35:8f:a8:
66:e0:11:c7:e6:42:4a:5e:b3:ae:f0:2f:24:a1:16:ba:07:05:
2d:30:82:ef:05:e5:6c:f2:a3:38:3d:39:85:74:79:20:d3:6c:
ae:64:f7:dc:63:82:fc:6f:28:6e:6b:87:e6:32:f7:4a:c1:20:
40:69:34:ef:c5:b8:37:ab:06:c1:29:6c:85:fa:d0:1d:15:20:
2a:a4:5b:f8:ad:f5:de:41:e7:21:df:6c:1c:e8:2a:01:81:2c:
89:fb:65:99:29:7c:64:4d:3a:94:58:86:70:b5:4a:56:bf:b3:
34:02:b6:55:39:89:46:ff:03:3d:04:73:83:b1:c4:37:ef:47:
dd:d0:cf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:16:56 2025 by rpki-client