Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
File: 7v_0DYu0okhy4Bun9C465j7ghfU.mft (raw, json)
Hash identifier: vGwVS1z1NNiTttxbIufsgL4dEz4eXk5BdBADGzAZHbM=
Subject key identifier: 06:65:3D:4C:77:2E:6A:95:89:FB:C5:B2:D7:FE:95:EB:79:F0:C9:9A
Authority key identifier: EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5
Certificate issuer: /CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5
Certificate serial: 019A9556A80FB9670F531D1F74CF41BC1F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
Manifest number: 11
Signing time: Tue 18 Nov 2025 05:01:15 +0000
Manifest this update: Tue 18 Nov 2025 05:01:15 +0000
Manifest next update: Wed 19 Nov 2025 05:01:15 +0000
Files and hashes: 1: 7v_0DYu0okhy4Bun9C465j7ghfU.crl (hash: 5xbr3cLbaRnXwrCktd1FTgoPn6zNiuzHgcufRIprKjw=)
2: yRJbET6-7FLTa2hPSx3CLgf7Gn0.roa (hash: 0urLdAxAXMiQAjxSg9VTaO6Zv/VpbeFMPkfaHibD4No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Nov 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:95:56:a8:0f:b9:67:0f:53:1d:1f:74:cf:41:bc:1f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5
Validity
Not Before: Nov 18 05:01:15 2025 GMT
Not After : Nov 19 05:01:15 2025 GMT
Subject: CN=06653d4c772e6a9589fbc5b2d7fe95eb79f0c99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1b:12:5f:4a:ef:79:fb:b0:e7:8b:0b:53:a1:
46:4a:e7:42:d1:d8:82:b7:0e:be:96:2d:8f:9c:7b:
13:90:6f:43:3b:71:8f:62:c6:ef:66:e9:d9:fb:e3:
cc:08:91:0a:58:16:b5:0c:9b:81:dc:12:c7:d4:1f:
a1:f7:84:3a:e1:3d:b3:b9:38:72:f5:e3:41:fd:80:
8b:fc:dc:bd:c8:ac:74:8c:cc:39:8d:32:2c:60:ed:
01:db:08:32:fb:69:36:db:40:4c:b0:51:89:78:d1:
a8:f3:85:c5:4a:e7:d0:fc:75:ea:ef:1c:23:d3:20:
6d:40:87:bd:ef:c5:2e:0c:09:b5:7f:b4:cf:60:42:
eb:d0:2f:fc:d0:d2:d4:69:e4:c2:25:d2:a6:0b:75:
68:d8:70:4b:bb:30:b1:3a:bd:a7:cd:1b:35:2b:ad:
7c:9a:df:6c:13:a0:8b:26:95:0b:0f:8b:5a:77:74:
b5:dd:18:98:45:f6:4e:33:2a:d9:9c:62:13:36:c2:
e2:ff:5b:0c:a1:f9:21:53:96:e0:d5:6d:10:30:a3:
0e:dd:fa:ee:39:01:f5:fc:5c:11:fd:26:6b:48:cb:
33:17:a2:5f:5f:98:b5:74:ca:aa:d7:0a:a2:9e:bb:
25:c2:ff:9b:d8:12:68:71:03:a8:8e:62:de:ae:bb:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:65:3D:4C:77:2E:6A:95:89:FB:C5:B2:D7:FE:95:EB:79:F0:C9:9A
X509v3 Authority Key Identifier:
keyid:EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:2b:2c:b7:2a:ec:1a:a7:00:04:ac:93:1f:47:68:b2:c1:82:
10:15:b6:58:0c:c5:1b:f3:ef:fa:8f:9b:77:6d:d4:c7:63:74:
b3:f4:d9:a4:78:bb:a8:bc:19:45:f7:cc:35:0f:70:58:26:b9:
0a:cd:b3:79:56:d1:6d:f6:d3:70:fd:12:06:89:32:f4:9e:1f:
11:0f:d5:b9:2b:bc:82:aa:c5:70:dc:e7:65:9a:e1:99:5d:d8:
c4:3b:77:3a:22:2e:58:b7:b1:de:3b:fe:fd:ca:a9:dc:85:12:
53:39:b8:e9:93:ac:7b:78:70:5d:73:64:c5:44:63:35:3a:72:
bc:27:e9:26:9c:a0:f1:71:4a:1c:e2:4e:f4:96:41:cf:d8:59:
79:ff:23:ee:4f:dd:74:ef:64:28:3b:9b:bc:58:d8:7b:2a:19:
75:16:e4:90:4d:00:f3:50:99:3a:18:bd:18:36:c3:a5:f5:8b:
4e:55:c1:69:5b:97:9b:47:ec:ef:a1:ab:dc:5b:d9:57:50:5d:
9b:94:fd:d8:ed:9e:25:40:b2:7c:21:d6:b0:b2:92:e4:24:8a:
38:6b:ef:b8:b4:21:02:77:81:7e:96:74:2c:dd:e9:cf:5d:5a:
d9:3d:88:05:50:de:f2:14:69:95:77:9b:52:f6:1c:01:dc:4c:
fe:a7:dc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 08:22:16 2025 by rpki-client