Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
File: 7e4lp4qBa942LEDIbjm5R9DuL_M.mft (raw, json)
Hash identifier: vJQKALtl3lINl8Id3U8GHMFxLmGnLUw/kKNMRbOZtg4=
Subject key identifier: 17:D2:34:AA:6B:EA:A8:6C:5D:07:53:96:57:42:EA:B8:D7:72:8B:70
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Certificate issuer: /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial: 019A72264FF369DCA532EB10C9456E5A79E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
Manifest number: 1464
Signing time: Tue 11 Nov 2025 09:01:44 +0000
Manifest this update: Tue 11 Nov 2025 09:01:44 +0000
Manifest next update: Wed 12 Nov 2025 09:01:44 +0000
Files and hashes: 1: 7e4lp4qBa942LEDIbjm5R9DuL_M.crl (hash: lDqB5+LQMPvWI7xZRKta8JbU/djBPSjRBBVkxQBlUf4=)
2: aCQkmSTzEflyT6Hwko3Tmkp5YgM.roa (hash: cY38nbBebmnJBkoepfEX2AZ8X9a8BlXKUlC0CLvNiCU=)
3: ot-4ava-H_JGfkFEE8IMfoH7D2U.roa (hash: 066ShywS1FpC299llP3evwqIgvXEIG2I1bIowA8MHvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:4f:f3:69:dc:a5:32:eb:10:c9:45:6e:5a:79:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Validity
Not Before: Nov 11 09:01:44 2025 GMT
Not After : Nov 12 09:01:44 2025 GMT
Subject: CN=17d234aa6beaa86c5d0753965742eab8d7728b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:b4:44:fa:70:22:58:6c:58:51:aa:28:a1:
aa:69:66:0a:4f:e4:c0:eb:bb:2e:24:f2:47:ad:58:
da:62:65:87:75:bf:b0:0b:6b:0a:e8:97:47:26:42:
49:56:d7:97:78:b2:6f:1e:90:64:4e:b8:95:c5:23:
4c:9b:f7:aa:8d:b6:18:48:70:8d:cf:50:ae:c8:8f:
ee:4f:7a:69:37:79:cc:44:5a:c2:95:08:8c:b2:66:
53:8f:85:87:fc:f3:25:17:a7:47:09:31:8a:1c:64:
d4:45:83:c7:71:ce:5f:86:98:71:e0:ff:50:c4:77:
5b:59:00:1e:8e:8c:d8:10:4e:27:df:95:ea:aa:8a:
bb:9b:2c:5b:0e:90:95:e6:85:e7:43:7e:cc:f7:79:
76:d5:13:fa:9d:87:19:c1:fd:8f:a6:a2:44:0e:55:
ef:c2:4b:16:38:7e:a5:82:a7:eb:6c:fb:e3:40:3b:
eb:49:d6:32:a5:8b:29:2b:0b:76:ce:12:bb:1a:f8:
b6:a2:d3:4e:d0:5d:1b:56:f0:d7:d2:9e:9c:1b:41:
24:79:d5:f8:4a:82:ac:bd:cc:54:c7:5f:e8:c3:28:
e5:38:74:27:6f:ae:45:b5:09:8d:9a:1e:56:d4:15:
af:03:53:2c:47:0f:80:21:21:f6:9a:d0:9c:7c:9f:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D2:34:AA:6B:EA:A8:6C:5D:07:53:96:57:42:EA:B8:D7:72:8B:70
X509v3 Authority Key Identifier:
keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b2:71:ec:d8:a4:42:b5:7f:9c:2c:e3:6d:f5:f6:51:5e:90:
0a:ce:cb:b0:e5:41:3a:12:92:64:bf:12:eb:8a:50:a4:ba:3d:
3f:22:fe:ef:70:16:2c:2a:a9:45:de:98:68:97:2e:f6:0e:0d:
a0:d2:98:16:10:47:6e:d3:f8:5e:23:68:e0:b9:4e:49:e3:bd:
4c:27:73:dc:0f:e8:ab:e0:67:23:27:db:24:8e:4f:cd:0f:8c:
19:15:c6:20:2d:8a:4e:04:57:93:e2:07:b9:50:2d:cc:8d:66:
de:aa:b5:e5:de:30:14:1d:3b:6a:01:e4:d4:63:dc:4c:a5:01:
f6:38:78:5c:54:89:50:d4:34:e3:0b:54:99:7f:a5:ae:17:48:
77:50:b6:85:a4:d7:fc:59:d1:c6:32:6e:78:e1:bc:ca:4f:8a:
fd:c8:db:b7:fd:32:c9:7b:b6:96:06:0d:99:6c:0d:2c:6c:89:
75:f0:23:bd:a4:17:4e:3b:85:5e:df:47:67:66:03:e8:63:f5:
da:34:83:de:7f:12:8e:83:d9:cd:f3:63:8a:33:3a:73:7b:ba:
d6:24:0a:a7:a2:58:2a:17:85:87:bc:1e:c1:59:f5:2b:ab:09:
d0:e3:99:a6:9f:25:cc:86:5c:71:17:42:46:b9:c1:63:72:a6:
d4:6f:6c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:45 2025 by rpki-client