Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
File: 7sI7DnggvD7NT4cI57mQ7daSDV0.mft (raw, json)
Hash identifier: ncBIHRjiffLUa8q5V1/t4BrLrgzDybrLJ6SfssGlcOM=
Subject key identifier: 29:29:2C:25:C8:44:62:8D:8C:A3:D1:7A:DC:4C:C1:DB:69:C7:13:31
Authority key identifier: EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D
Certificate issuer: /CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
Certificate serial: 019A71EEE711B02B44E81EEFE5C37F849E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
Manifest number: 06E4
Signing time: Tue 11 Nov 2025 08:01:13 +0000
Manifest this update: Tue 11 Nov 2025 08:01:13 +0000
Manifest next update: Wed 12 Nov 2025 08:01:13 +0000
Files and hashes: 1: 7sI7DnggvD7NT4cI57mQ7daSDV0.crl (hash: hinmUAl+8iyl8e5D8QP7KQEaNGNV12ByuEYmz79YM6A=)
2: cOvqfWc0KSjggAuY6_9kDhPxPi4.roa (hash: qOhF3wsSLpYe0ueqSqnl30WHCmyv59VHWzhvhRJuKFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e7:11:b0:2b:44:e8:1e:ef:e5:c3:7f:84:9e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
Validity
Not Before: Nov 11 08:01:13 2025 GMT
Not After : Nov 12 08:01:13 2025 GMT
Subject: CN=29292c25c844628d8ca3d17adc4cc1db69c71331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:b0:60:40:e9:cd:43:97:06:54:e8:22:3d:
21:f9:c6:56:48:89:d8:37:ea:d4:e0:a9:44:3b:57:
fa:0e:76:42:86:1a:22:33:2b:54:77:a4:2d:d0:7c:
5a:79:a7:ed:43:a3:4f:ff:2f:22:be:8d:23:72:93:
6d:3b:45:75:04:2d:51:6d:4b:ff:0f:48:6c:9a:5d:
fc:f1:7c:56:89:d1:71:a9:25:cc:1a:39:46:2e:37:
6e:01:27:40:b2:08:c5:5d:24:6f:78:a3:cf:5d:82:
5e:1c:fc:85:7c:1c:2f:4c:84:66:d6:8e:6d:10:53:
9b:a1:f3:4f:63:01:49:6b:1b:d0:32:1d:60:36:d6:
01:21:7c:5e:07:ad:d6:1f:59:be:65:98:9f:f6:77:
8f:2b:ae:75:89:ac:83:a8:38:66:5a:38:93:4e:0a:
d7:7d:6f:63:e3:cb:7c:94:e4:6b:98:6a:4f:12:d6:
a7:fc:c7:a1:d9:e3:a5:fb:f1:55:0b:e7:6f:20:e8:
c4:cd:f5:82:5b:63:0b:23:cc:5b:d0:3e:e6:63:d0:
4f:bd:88:9f:af:11:e0:b4:01:d3:0a:3a:77:62:56:
1b:ec:95:c7:d7:a2:a3:f5:4b:3a:76:41:1a:36:87:
c2:11:a0:cd:9e:23:dd:cc:92:33:c8:27:14:e7:78:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:29:2C:25:C8:44:62:8D:8C:A3:D1:7A:DC:4C:C1:DB:69:C7:13:31
X509v3 Authority Key Identifier:
keyid:EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3b:5d:c5:b0:81:5b:6c:6b:6d:a5:99:d2:a6:0a:11:02:8b:
53:2e:b5:44:d9:66:95:e5:f8:d8:8d:73:68:97:4a:ac:77:68:
35:14:e3:04:e8:44:6b:f1:2a:a3:0c:c5:2e:c3:94:6c:84:ee:
16:db:3e:15:80:be:dd:96:6f:c3:db:15:af:8f:76:67:5f:14:
73:60:ea:02:ed:d2:d7:2e:e5:34:4a:c9:94:13:56:a5:06:77:
19:7f:cc:8c:28:dd:5f:49:fa:9d:ff:2f:8b:1f:66:c7:10:8a:
5c:78:20:77:59:10:db:83:76:68:f5:d9:3c:1a:c2:0c:2f:94:
0b:b3:36:48:88:f7:d4:ba:f0:bb:ed:56:0b:be:a0:f1:42:42:
9d:f2:42:52:5d:df:b1:7b:22:05:15:7b:01:9c:4f:ae:6f:a9:
2f:b8:19:eb:1e:fe:da:92:5a:c3:a1:f0:98:f8:b8:b7:a9:4f:
33:b8:83:e8:63:1e:7c:7f:2e:82:ec:0b:59:47:5b:31:43:29:
76:df:bb:97:71:1b:6a:54:3c:79:a0:47:67:f3:e5:9c:9b:4e:
27:6f:aa:8d:22:a3:f0:c2:73:9b:4f:66:7c:9d:1e:d9:05:98:
07:50:2b:17:54:6f:91:d3:1b:be:0d:1a:d4:37:1a:3b:44:8a:
a0:8b:20:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:06 2025 by rpki-client