Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
File: 8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json)
Hash identifier: kl8d//F6lCUUdTCekKm/T//NwmzNAJDH4KkF4IeCavg=
Subject key identifier: 7E:CD:A6:C0:0F:F9:C7:D2:1B:65:2A:B8:C3:F0:3A:D3:AE:79:00:7A
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Certificate issuer: /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial: 019A71B7C9161197CF49A412D0171F1D1F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:01 +0000
Manifest this update: Tue 11 Nov 2025 07:01:01 +0000
Manifest next update: Wed 12 Nov 2025 07:01:01 +0000
Files and hashes: 1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: LLmZl2CwrkFshJyOJMvs/SPLynWKpVweTBJwbu6tHSA=)
2: M0x4P-eqDOpLCOY_5rdYfIPAYXc.roa (hash: Hz1NV4C1yE6vehHnBgkxV2TE2v53JgdybplNGjL2XYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c9:16:11:97:cf:49:a4:12:d0:17:1f:1d:1f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Validity
Not Before: Nov 11 07:01:01 2025 GMT
Not After : Nov 12 07:01:01 2025 GMT
Subject: CN=7ecda6c00ff9c7d21b652ab8c3f03ad3ae79007a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:a3:04:40:d2:e5:ea:c5:4d:c6:1e:5d:3c:
65:7f:bf:01:bd:06:78:b5:75:f2:ff:b6:c1:8f:9c:
8f:9a:ce:69:67:96:cd:5c:0b:76:c1:c2:17:c3:9c:
dc:5a:79:15:e8:38:47:b0:f1:b1:3c:4e:8e:76:ab:
48:4a:24:dd:f6:3b:58:2f:71:27:74:df:a6:9a:e0:
14:d8:9f:cf:c5:65:64:57:f2:72:61:72:53:10:fe:
5c:3d:fa:05:5b:51:d2:26:49:21:fb:eb:11:45:68:
61:2d:2b:07:2e:b7:e4:2e:92:e8:22:5c:30:48:e5:
ca:99:bb:71:4c:72:2c:88:b0:32:b2:18:70:9e:02:
25:67:28:29:2b:84:e2:c9:a9:4b:09:bf:13:00:ce:
da:a0:91:cc:3b:bf:8c:8f:23:f4:02:b4:54:fd:24:
52:c9:0d:ad:98:7f:48:df:f2:24:9d:9e:ab:4f:1d:
79:a6:7a:c8:4f:b8:cb:19:44:fb:f4:88:ee:13:a9:
39:4f:53:69:73:39:dd:36:c2:a1:b0:c4:4b:42:e3:
4d:4e:d5:97:13:7c:b5:8c:85:84:d3:55:15:4e:6a:
12:d8:8a:c6:ef:f1:3b:0a:2e:e3:3b:7e:ed:c1:a1:
5b:f9:8e:f5:b4:7b:7b:46:46:f6:d0:3d:25:59:e5:
c1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CD:A6:C0:0F:F9:C7:D2:1B:65:2A:B8:C3:F0:3A:D3:AE:79:00:7A
X509v3 Authority Key Identifier:
keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e0:0b:fb:f6:e9:f6:b6:c3:69:58:1c:fa:d7:bf:a5:e6:05:
c2:04:05:95:3e:8a:0f:7c:88:9c:2d:f3:55:37:b0:4b:00:76:
d6:63:eb:9c:b2:c7:38:10:04:5c:d6:d9:2e:af:0f:aa:12:71:
3e:bb:4d:4a:f0:b8:22:d9:f8:90:4e:85:7e:46:65:83:36:de:
41:5b:8d:bf:ce:24:3a:71:76:c7:07:59:05:d4:3d:c9:43:2c:
04:a8:2f:2b:91:58:f6:fa:a6:2b:44:cf:0e:dc:50:4b:0a:92:
8d:6c:69:95:ed:a6:b4:a5:78:f1:bf:2a:98:bd:7c:f1:b7:31:
9f:27:1e:68:a0:5d:44:bb:61:34:ae:2d:38:7e:0d:9c:ee:32:
9c:a8:de:79:1d:97:e8:f0:99:37:67:a8:c9:61:ae:06:ce:03:
d4:ec:30:f3:c1:65:f9:9c:9c:70:9f:03:cc:13:bb:e6:9e:0c:
55:db:0c:c5:19:59:36:7f:c0:cc:94:6f:db:8f:94:b9:45:5a:
0d:94:b0:82:78:3f:d9:3a:60:9f:3b:b1:d8:47:6d:e1:ff:43:
d0:0d:b9:bb:28:94:8b:29:75:1a:a2:23:e5:0b:44:6a:ca:2a:
35:c6:ea:0f:2d:d3:f3:8b:3b:73:f5:77:c9:46:1d:f0:93:93:
a3:bd:6d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:11 2025 by rpki-client