Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
File: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft (raw, json)
Hash identifier: UR2a0Wbabmuxo6k4bPFUfq4ZVTNcakKE2W/5fuf/M0w=
Subject key identifier: A7:F2:C2:C9:37:61:B1:44:9F:67:0E:98:9A:22:4F:5C:6D:19:ED:C1
Authority key identifier: 0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
Certificate issuer: /CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Certificate serial: 019A72259500EB27D91004F04EAA2DC9D332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
Manifest number: 1661
Signing time: Tue 11 Nov 2025 09:00:56 +0000
Manifest this update: Tue 11 Nov 2025 09:00:56 +0000
Manifest next update: Wed 12 Nov 2025 09:00:56 +0000
Files and hashes: 1: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl (hash: 5BIWPst/mYOe6VUoHZ5PB5xWJ8p1XPfYYRvLeShOxnk=)
2: DuaqfpWRjQCcl_wmNFLt00a2Vw0.roa (hash: rQv6lxTZYs4XDzxYfgAGiCr8L0iuSbohO7siOw9JGpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:95:00:eb:27:d9:10:04:f0:4e:aa:2d:c9:d3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Validity
Not Before: Nov 11 09:00:56 2025 GMT
Not After : Nov 12 09:00:56 2025 GMT
Subject: CN=a7f2c2c93761b1449f670e989a224f5c6d19edc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:4c:51:7d:2f:e5:e8:c8:d6:dc:3c:d9:51:
fb:47:cd:53:a1:54:52:a8:b1:dd:4d:0c:83:2f:d6:
d1:6a:7f:03:a7:a4:4e:3b:23:0a:a8:80:e5:c2:95:
f1:3b:20:d5:f5:e5:e6:b5:9a:eb:35:20:22:e7:cb:
73:78:91:5b:a6:f5:11:23:ab:71:84:c4:60:a4:a9:
13:46:40:e8:1b:9a:d3:86:24:7d:2a:d4:2d:55:38:
f6:63:f9:36:2b:4d:ee:ec:3c:ec:f0:1e:56:6d:04:
91:0a:8d:1b:bb:8d:cd:a0:e0:97:a5:c7:5f:7f:af:
1d:0a:59:a1:78:11:21:3c:86:3c:e6:ad:64:2e:90:
bb:63:d0:1f:70:f9:54:a8:ce:fe:60:39:d5:e7:b3:
3a:3b:a6:3e:60:99:e6:a3:dc:29:61:c3:81:dd:03:
17:79:4d:43:f3:97:7a:25:3e:e6:7a:d7:0d:d0:a3:
10:34:76:17:f2:9c:90:49:24:cb:df:ee:c8:a7:bd:
86:8e:18:4a:4b:c0:08:f6:73:8f:cf:6a:26:4d:7e:
23:cd:d6:b7:d7:5b:35:b8:38:e9:82:8f:f1:91:fc:
df:43:4d:b4:b1:48:ae:be:eb:67:e2:69:c8:4a:27:
78:6c:3d:30:2d:14:17:f1:b6:8d:6f:8b:2f:87:b9:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F2:C2:C9:37:61:B1:44:9F:67:0E:98:9A:22:4F:5C:6D:19:ED:C1
X509v3 Authority Key Identifier:
keyid:0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a4:1d:80:5f:7e:d1:34:c4:d7:2c:39:2c:db:31:c7:5d:5d:
5d:63:3b:02:56:62:87:0c:28:f0:05:06:16:52:c2:55:4d:30:
6c:f8:ce:e6:31:a0:fe:51:9a:db:f5:d6:ae:03:84:b2:d7:fd:
db:80:64:54:79:38:42:d4:2d:6a:b2:24:c1:18:c3:b9:7d:87:
a4:f4:03:75:93:4d:43:33:40:e1:6a:2d:a7:55:5e:86:5a:bb:
3d:b3:07:0d:86:4d:4b:8a:d7:1c:2f:87:b3:7b:f7:1a:51:db:
6b:04:9c:bd:2e:22:61:b4:13:9d:d8:20:8f:34:47:c5:1f:3a:
f3:48:e6:a8:9f:8c:7f:a6:36:fc:bd:fc:06:fb:4b:4f:89:fe:
fd:6a:3b:56:36:77:91:2b:fe:39:ac:d6:5d:a4:9d:06:cb:91:
03:3b:bd:1a:29:c0:34:62:b4:d7:fc:bf:a2:75:ba:bd:7d:8f:
f5:bc:bd:07:5c:56:73:fc:93:d1:81:f0:57:6e:10:84:45:4f:
75:cc:54:c5:fe:5f:97:7b:a9:94:44:b8:85:46:3a:da:9f:fc:
a0:39:53:54:a7:70:52:91:e0:de:65:da:14:bf:c1:f0:96:9f:
c0:c0:1b:41:ef:7c:be:69:ab:f7:f3:cb:8d:5f:ba:1f:b4:c4:
96:c8:65:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:14 2025 by rpki-client