Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
File: 7V6DgxLgSu-flTbiDNQSg6e4t3s.mft (raw, json)
Hash identifier: UL+K0E3uCn8HufyyDUlWoK1z47uoQk5WHK8xjsI9tNc=
Subject key identifier: 57:1D:8C:2C:92:59:14:40:44:1E:E9:C0:18:8F:93:EB:EF:49:49:0E
Authority key identifier: ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
Certificate issuer: /CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Certificate serial: 019A714A0A27C420C7D210B87411DD2F9EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 05:01:08 +0000
Manifest this update: Tue 11 Nov 2025 05:01:08 +0000
Manifest next update: Wed 12 Nov 2025 05:01:08 +0000
Files and hashes: 1: 7V6DgxLgSu-flTbiDNQSg6e4t3s.crl (hash: vd3Z/hkkJAsx9UjLPhS+rgvxj+rG+EhepQUxK3W6Ccw=)
2: CU_2_6zid5vFMzzdCV2Mp3wVdj8.roa (hash: SmeUvVuEhfInXhWNJ0VU7sOK6/ghCJAsk+fSAJsrYgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:0a:27:c4:20:c7:d2:10:b8:74:11:dd:2f:9e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5e838312e04aef9f9536e20cd41283a7b8b77b
Validity
Not Before: Nov 11 05:01:08 2025 GMT
Not After : Nov 12 05:01:08 2025 GMT
Subject: CN=571d8c2c92591440441ee9c0188f93ebef49490e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:79:ef:6e:bf:99:3c:c2:c8:52:f4:d9:c6:80:
5e:7c:89:70:4e:54:99:d4:cf:3c:24:f0:44:44:1d:
70:3a:6f:f6:fe:9f:27:c3:50:9c:94:99:de:dd:56:
ea:40:36:4b:98:11:2e:43:bd:a8:11:52:46:c1:31:
f0:de:a4:ce:c5:db:44:08:46:69:bf:a0:2e:90:da:
30:08:78:28:08:28:2b:ab:8b:5b:70:51:da:5c:4e:
6f:85:c1:8f:fa:e4:f2:6d:d2:8f:e0:81:41:a9:10:
9f:ec:13:e7:7b:63:64:e8:06:55:e2:fb:f9:c2:99:
fb:2a:ae:70:63:b7:0e:41:e9:c3:e4:95:7d:ec:dd:
9f:b4:d6:e4:d6:c0:2f:e1:dc:5f:3f:d7:17:5b:17:
e2:68:68:d3:ae:3f:9d:ff:28:4f:65:a0:63:84:38:
1a:7f:b8:f5:1e:4e:0a:f0:3e:42:df:da:45:7c:09:
ea:e1:55:47:90:c4:d0:de:40:c2:06:d2:72:56:e0:
c8:c0:b3:1a:fe:68:69:69:7a:ff:26:98:cf:33:39:
62:09:0f:27:28:f6:73:72:6b:46:2e:d4:52:d2:01:
9a:d8:fd:b3:87:25:d9:e2:f8:a7:91:3c:dc:40:de:
a2:4b:ad:02:9f:93:59:2e:b9:10:8f:4a:e9:f1:9e:
56:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1D:8C:2C:92:59:14:40:44:1E:E9:C0:18:8F:93:EB:EF:49:49:0E
X509v3 Authority Key Identifier:
keyid:ED:5E:83:83:12:E0:4A:EF:9F:95:36:E2:0C:D4:12:83:A7:B8:B7:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7V6DgxLgSu-flTbiDNQSg6e4t3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bee5ac-99cc-41a7-a65f-edaca9d1361a/1/7V6DgxLgSu-flTbiDNQSg6e4t3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:aa:ef:48:0a:d8:56:cc:ba:85:ba:a2:11:67:19:ec:88:fa:
a1:f2:01:15:93:b6:b0:05:8f:af:c3:35:81:ba:b0:f5:1d:d3:
0f:53:d4:96:9b:da:5e:49:ac:f0:06:91:42:f0:3c:11:82:7b:
2d:99:5c:54:2d:8a:1c:ec:89:ba:23:06:25:81:13:a4:14:e0:
fb:e8:fc:4e:db:20:5a:09:c1:22:19:54:e0:b3:68:0b:da:6c:
ac:c2:a9:c3:c6:f4:4d:bf:d7:af:51:23:8d:ef:bd:ab:35:76:
99:6b:49:9d:6c:f1:4a:e8:b3:cf:e3:ae:02:16:3c:f0:6a:6c:
8e:b1:00:67:d3:b9:22:ee:a0:fa:1e:f7:e4:56:3d:ea:4a:bd:
c3:0b:e8:24:d1:e0:8d:a3:90:ca:47:cb:d6:0a:28:a2:0c:4a:
1f:74:97:b1:87:f4:d1:e5:92:fb:c7:ac:52:f5:ee:20:53:86:
fe:ae:c8:cb:99:3d:e6:1a:f9:04:76:76:d9:20:6e:62:19:ec:
42:fd:de:e8:6e:d2:df:3e:e5:2b:4a:bb:57:f1:61:cc:44:fb:
5c:8c:e4:ac:00:74:43:c0:6d:8a:62:09:b3:7a:cb:53:1d:8d:
dd:5d:7b:e8:db:96:cf:66:b3:61:86:c1:64:27:43:0d:56:41:
8e:c3:1e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:30 2025 by rpki-client