Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
File: 07SieHIiWX8W0e5MQ1voaQ8QM9k.mft (raw, json)
Hash identifier: 8MkK7o36+6LJng5y/NIt1Z5kbBBn9T4h4hD2KmqWwr0=
Subject key identifier: FA:74:B9:6C:65:39:1C:E7:3B:A2:E6:DC:FB:08:DA:E0:AE:34:6B:77
Authority key identifier: D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
Certificate issuer: /CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Certificate serial: 019A71134E0EE4BC5E20BE6115503A1A4EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
Manifest number: 06C9
Signing time: Tue 11 Nov 2025 04:01:21 +0000
Manifest this update: Tue 11 Nov 2025 04:01:21 +0000
Manifest next update: Wed 12 Nov 2025 04:01:21 +0000
Files and hashes: 1: 07SieHIiWX8W0e5MQ1voaQ8QM9k.crl (hash: EdNgRR5U/O5imqLHIyBqKT1Azv9m51a1DaeSfgZ1/6A=)
2: _CsObP4Ze3uU9K2w6CdOR8S59eQ.roa (hash: 1vz8OL2ZT6+f1AOzld1JihOzraesTCmal5gPezTDoY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:4e:0e:e4:bc:5e:20:be:61:15:50:3a:1a:4e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Validity
Not Before: Nov 11 04:01:21 2025 GMT
Not After : Nov 12 04:01:21 2025 GMT
Subject: CN=fa74b96c65391ce73ba2e6dcfb08dae0ae346b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f5:ea:f5:0a:16:52:6a:73:6b:e2:85:88:dc:
5f:a1:fb:5c:1f:3f:d5:09:c5:18:8f:42:81:98:03:
c2:0d:b8:1a:f0:7b:09:ce:2d:59:b0:8c:17:f9:a2:
27:c6:b6:12:bb:a1:03:71:3e:0b:82:90:e5:ca:2e:
42:9e:97:ea:32:70:14:20:0c:af:a6:c9:02:41:17:
d4:1d:75:83:86:bc:17:63:89:60:1b:7a:2d:96:7f:
f9:e5:0c:9a:9c:8b:79:f3:25:52:dc:bf:95:c4:39:
b2:f4:74:63:36:d5:e5:e6:08:d0:71:88:06:43:ad:
69:d1:9f:8f:28:a0:d8:ec:6e:7c:f9:a7:43:3d:4b:
57:f4:07:99:d9:0c:bf:20:55:06:04:4e:9d:5f:76:
71:aa:97:2e:67:3e:86:1b:e4:9e:1a:6b:23:af:3c:
22:08:05:6a:fe:83:5c:cf:fe:77:6d:5f:66:6c:79:
92:0d:99:a1:63:7c:13:dd:49:d3:85:e5:02:8b:21:
5c:e2:e5:c3:ec:2d:bd:d4:e0:08:0f:fb:c3:a4:59:
a7:97:04:a6:74:00:21:7b:8d:81:89:6d:d9:0e:b0:
5a:e0:31:9e:5f:d3:7d:98:58:6e:d0:1e:13:44:be:
57:ac:df:d6:b5:78:f2:1d:f2:04:3e:c1:19:0a:a7:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:74:B9:6C:65:39:1C:E7:3B:A2:E6:DC:FB:08:DA:E0:AE:34:6B:77
X509v3 Authority Key Identifier:
keyid:D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c0:38:4a:09:e1:67:9f:4f:ed:07:dc:ed:5d:30:f2:86:26:
ed:72:f3:0b:fd:94:2a:9b:b9:e7:a4:a0:1b:ae:4e:ba:88:3c:
ec:8b:7f:be:8c:c0:2a:a1:0d:01:09:01:28:75:91:1c:bc:86:
44:9f:20:dd:91:71:fc:b2:1c:96:21:07:05:6d:03:f7:75:e1:
20:cb:a4:de:a1:98:56:13:9b:f2:e6:71:2b:1b:fa:e4:de:a5:
85:c1:8a:68:24:77:ae:3f:6a:3a:17:e7:af:ec:0c:96:78:67:
77:25:eb:c3:ec:c7:ac:00:a5:e8:7c:9d:92:85:3b:8b:e7:62:
c1:33:13:a5:b1:3d:82:19:e5:e6:7a:f6:2e:d5:d4:60:e8:9e:
b1:86:9f:48:49:be:2f:62:96:b3:ef:21:ce:25:aa:04:67:2c:
bb:6a:ef:12:1e:22:f5:c5:35:08:ae:fc:5b:3c:6e:de:f6:9a:
3a:e9:41:a2:ff:57:61:c6:c3:26:f1:d4:0a:92:0b:77:ac:de:
3b:31:a8:36:51:da:dc:30:e0:10:33:a7:ea:22:b8:3e:14:e9:
fb:02:0a:2d:09:5a:99:0c:86:2f:53:4d:ed:b6:c5:ec:7b:07:
aa:4b:2a:51:3f:a6:64:cc:e9:41:12:54:49:58:b3:a5:60:1e:
67:4a:87:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:24 2025 by rpki-client