Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
File: 7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json)
Hash identifier: oyZbHz519bjOAn+6Juik/RzKwurRBidB607w4Y6gszg=
Subject key identifier: CE:51:C9:05:0D:77:38:DA:EE:E6:30:55:CC:5D:3E:A8:E4:8D:62:14
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Certificate issuer: /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial: 019A714A01ADC39046E08CE034905CE0AABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:01:06 +0000
Manifest this update: Tue 11 Nov 2025 05:01:06 +0000
Manifest next update: Wed 12 Nov 2025 05:01:06 +0000
Files and hashes: 1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: JrMWZsHYUAyetWIUlZPCzJTHVrnkmaG1o6wFduLTWUs=)
2: 8rOJtiLxYHoU0BtAFzn-91ivD_s.roa (hash: Ru+2TW06RDS2clsfzv8MubQ+2olZEzQWBQuJZ31W9Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:01:ad:c3:90:46:e0:8c:e0:34:90:5c:e0:aa:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Validity
Not Before: Nov 11 05:01:06 2025 GMT
Not After : Nov 12 05:01:06 2025 GMT
Subject: CN=ce51c9050d7738daeee63055cc5d3ea8e48d6214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:58:98:37:73:60:d3:21:c6:30:9a:25:c0:1a:
0d:ec:81:30:7f:04:81:d1:76:56:47:9e:48:fb:59:
18:d8:78:67:68:52:f9:81:6b:1a:c9:ff:33:44:d7:
09:29:0d:2e:b1:65:e6:7c:d7:57:a9:0d:1e:74:78:
ad:4c:27:5f:9e:17:73:29:0d:89:73:8b:a8:f8:ce:
19:36:85:d2:c1:e1:49:33:c6:03:ed:7f:2e:c5:ea:
00:7b:34:92:4b:55:fb:17:72:fc:6f:d0:2a:7a:eb:
1a:44:52:a1:f0:76:80:ae:06:78:d3:a8:88:b3:ae:
73:98:67:c4:4e:4f:9a:7d:79:6c:f0:92:4a:fb:87:
61:6c:97:28:cd:62:86:a0:00:9a:b2:2a:ba:d8:a3:
be:13:c9:9f:24:29:c2:7c:61:9b:8a:e1:0f:7b:9c:
3d:84:d4:0d:a9:20:90:fd:f2:7e:e2:71:2d:a5:88:
09:5f:41:6d:33:bd:a6:8c:f5:94:1e:4d:44:e6:9c:
9d:7d:1f:f8:18:34:e4:33:7a:e6:0a:59:fa:de:a4:
57:4b:c9:51:84:de:2b:63:4d:38:af:16:b2:1c:ba:
b5:24:fc:6e:4e:95:94:31:e1:c9:5f:e1:f9:67:43:
43:dc:61:2e:1b:16:6f:e9:e6:02:86:98:f7:e5:68:
6f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:51:C9:05:0D:77:38:DA:EE:E6:30:55:CC:5D:3E:A8:E4:8D:62:14
X509v3 Authority Key Identifier:
keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fa:51:cb:9f:33:00:6b:6d:46:5e:71:88:c1:64:7f:cc:fd:
9e:74:5a:66:f0:5a:4a:30:78:b3:50:0a:86:d6:f7:3d:88:1e:
7b:98:9f:cc:20:56:de:f7:5b:f9:f2:46:e2:3a:f7:9d:66:03:
61:56:52:0a:5a:4c:ba:10:a6:ac:41:02:69:3e:ab:e4:41:0e:
a3:bf:39:46:34:1e:38:7e:1c:2e:ea:5b:65:82:40:dd:81:c3:
6b:63:e5:9f:68:fc:d7:48:9a:63:0b:33:0b:77:e6:10:dc:7a:
8c:fe:63:9f:53:9d:7a:a8:7d:68:8f:e3:05:07:7b:97:29:45:
0a:ec:29:39:89:47:0c:9c:a5:1c:64:ef:6a:94:ec:4e:4b:0a:
94:05:d9:1b:aa:11:d6:f9:73:35:6c:fc:64:9e:76:e4:8b:3b:
35:54:d0:73:a5:8d:0a:41:01:fa:41:27:1a:db:f6:c5:55:22:
14:96:b4:9f:b5:fc:67:04:8a:c8:ad:b6:d6:1d:9e:f9:47:83:
55:9f:47:ae:26:1a:11:df:0d:9c:49:bb:18:8e:fa:f4:fd:a7:
16:8a:ff:10:a8:f3:40:95:93:b2:9b:57:9d:90:f7:55:c0:70:
74:17:5f:b1:09:d9:1f:b6:9a:cd:17:78:fc:57:e2:5c:45:d5:
c4:58:15:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:58 2025 by rpki-client