Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
File: 7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft (raw, json)
Hash identifier: k7cDsDjH+29kr/WBIUawks3sRJGyCcfaPK/ozg2N+3A=
Subject key identifier: 4A:C9:A7:FD:54:71:00:CB:C7:0A:01:BB:14:86:ED:D6:F3:FF:A8:ED
Authority key identifier: EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66
Certificate issuer: /CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
Certificate serial: 019A71B92A96EA28F7464D73E77821142FA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
Manifest number: 057A
Signing time: Tue 11 Nov 2025 07:02:31 +0000
Manifest this update: Tue 11 Nov 2025 07:02:31 +0000
Manifest next update: Wed 12 Nov 2025 07:02:31 +0000
Files and hashes: 1: 7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl (hash: Gi9jK0/Q/k4HjZMIBFqmUmLA3WwOjSw39xh9JUk2XhE=)
2: kMswko4ElKY06SDhGpfueJq34D8.roa (hash: kJ3gz3NOtbD3WpAXsJWsntX+DKlol8R3qkfnxa7rQtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:2a:96:ea:28:f7:46:4d:73:e7:78:21:14:2f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeaa52416313b7643ed28d43bc3c4661f46ab366
Validity
Not Before: Nov 11 07:02:31 2025 GMT
Not After : Nov 12 07:02:31 2025 GMT
Subject: CN=4ac9a7fd547100cbc70a01bb1486edd6f3ffa8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:af:d9:0e:8c:af:90:a9:e2:4b:16:96:7c:
f7:e8:92:f4:b9:a1:36:76:a3:99:9e:45:79:10:1d:
ea:64:a7:19:1d:f6:9a:01:19:c5:ae:35:a1:7e:15:
9f:49:6e:53:75:04:e0:d7:ac:1a:92:54:f6:d7:ba:
86:31:64:31:d6:6a:9a:3d:f4:0f:56:82:09:fa:a0:
36:c1:20:cb:9a:fc:9e:d8:1a:1d:9e:80:34:8b:f0:
8f:ae:c2:10:a7:2d:a2:6f:f3:bb:ab:cc:6a:62:0e:
04:b0:ef:c1:5b:10:da:46:49:2a:1e:fd:04:5f:70:
f7:38:a5:dc:11:10:7b:bc:01:87:b8:b2:73:e9:08:
85:2d:0a:12:cc:d6:64:33:28:bb:4f:15:d9:10:1c:
e9:1b:dd:21:47:ce:5c:a1:07:ba:9c:c3:0d:90:1c:
0b:78:fc:c7:ad:75:11:99:6a:fc:db:f8:38:b8:f3:
2a:0b:76:d7:da:7c:c5:b1:a6:b6:33:c2:4e:f9:15:
b1:ac:bb:e4:79:f6:32:bb:81:2d:73:1d:5a:16:2a:
a1:dd:a2:20:69:ff:03:9e:af:ee:5d:df:43:49:0c:
e1:b9:cb:a4:5b:59:61:75:fe:c1:5d:2b:21:f9:19:
51:e5:7c:1d:18:66:36:57:d6:34:3b:9c:d0:fa:5c:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C9:A7:FD:54:71:00:CB:C7:0A:01:BB:14:86:ED:D6:F3:FF:A8:ED
X509v3 Authority Key Identifier:
keyid:EE:AA:52:41:63:13:B7:64:3E:D2:8D:43:BC:3C:46:61:F4:6A:B3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be312d-1724-4308-8240-d337b938d3cc/1/7qpSQWMTt2Q-0o1DvDxGYfRqs2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d0:f1:72:be:77:19:fd:00:fd:1f:5f:f3:59:da:f0:98:86:
d4:ee:77:f2:b3:42:94:34:f7:e7:9d:78:b7:47:0e:d1:d2:6b:
75:9e:39:c8:73:cb:f6:1c:15:f1:67:dd:f6:fd:54:c3:d1:3c:
cf:d8:bd:0c:d9:7d:e9:05:35:08:38:30:48:24:14:39:69:64:
7d:c2:1a:61:03:85:4b:ec:4e:2b:0e:a6:26:a3:54:9e:4c:c8:
0a:6d:87:5c:c9:8e:e6:bb:ae:da:db:1d:d8:c9:0a:d2:39:fe:
46:0c:3e:1c:fa:7a:cf:c5:9a:51:5e:07:04:04:a6:74:72:be:
9f:fe:f9:02:17:d5:ca:48:27:9a:50:ef:7b:ba:3d:22:45:e1:
a2:5e:e2:31:b4:91:a1:ea:fe:15:5c:96:95:84:f3:e3:0b:32:
fd:33:c0:38:6e:4a:9c:c9:b2:56:8e:df:ff:b4:36:2a:19:59:
b8:bf:e4:78:11:b4:3c:0d:a8:3a:aa:da:3c:d6:68:f5:f6:ef:
3d:2c:bf:da:fd:91:89:f1:20:56:6e:12:2d:29:c2:ce:c3:f7:
1e:a6:48:db:14:5b:68:61:8d:47:bc:72:c2:7e:a6:17:03:ca:
43:80:cc:51:b2:ff:49:a6:dc:9b:e4:c1:d1:8d:79:e6:59:bc:
8f:63:77:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:47 2025 by rpki-client