Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
File: 7v5LdSmMAHIB5xyAalyMCee3dBE.mft (raw, json)
Hash identifier: K+HQLdXK+YhD39gvNWE+rFrlbdydcDaRNfV8nliZ0a0=
Subject key identifier: 69:21:54:4E:88:17:1F:DD:58:9F:DA:5E:34:AC:82:69:CE:4B:E0:6F
Authority key identifier: EE:FE:4B:75:29:8C:00:72:01:E7:1C:80:6A:5C:8C:09:E7:B7:74:11
Certificate issuer: /CN=eefe4b75298c007201e71c806a5c8c09e7b77411
Certificate serial: 019A71B8C79A7711BB2FA5BA9A92AFDFF5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
Manifest number: 4B
Signing time: Tue 11 Nov 2025 07:02:06 +0000
Manifest this update: Tue 11 Nov 2025 07:02:06 +0000
Manifest next update: Wed 12 Nov 2025 07:02:06 +0000
Files and hashes: 1: 7v5LdSmMAHIB5xyAalyMCee3dBE.crl (hash: 2th3y//FknxSQEajryl4o4EUrqQM8KtXhCaMQX6OeuQ=)
2: PefmmKkeHckF1TFIBsiHu-KGY9A.roa (hash: tPgDzgEVBJrCaqPTjl+G8vf08ZvCLU8Bf3lj6k6XGBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c7:9a:77:11:bb:2f:a5:ba:9a:92:af:df:f5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefe4b75298c007201e71c806a5c8c09e7b77411
Validity
Not Before: Nov 11 07:02:06 2025 GMT
Not After : Nov 12 07:02:06 2025 GMT
Subject: CN=6921544e88171fdd589fda5e34ac8269ce4be06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ff:a4:ee:e3:83:45:fb:ef:1b:5b:88:6e:94:
0b:5b:82:b2:e6:4e:e7:de:ea:ef:a2:44:d4:81:d8:
53:27:7c:e6:58:0a:88:cc:23:dc:42:4f:f8:b5:b4:
86:c3:32:02:c9:b2:c5:be:a8:da:be:61:8a:10:8b:
2e:cc:cb:54:d7:b5:46:65:6d:24:c9:12:46:e8:fa:
f7:3d:17:b7:fc:7c:e5:a3:a2:e8:1a:cc:ab:de:50:
e4:95:7d:a2:92:20:f6:db:e2:5a:ab:6e:e1:49:f4:
c5:2c:76:96:3e:dd:f8:05:e7:4f:16:56:67:57:aa:
ae:a8:57:1d:3a:ee:0b:9f:8b:81:4a:3e:f4:ad:de:
ea:31:57:dd:f2:47:3d:6b:66:f9:8e:0d:10:16:b2:
ba:4a:e8:b9:d8:d0:d8:89:bf:b5:90:39:6a:57:67:
bc:ad:9e:22:8b:ec:7f:fa:7b:04:42:a6:85:56:69:
5e:2a:f1:de:d7:7f:03:44:d8:ea:ed:53:49:db:d6:
de:5d:ee:7c:32:96:9c:30:10:39:9c:d9:24:2f:03:
a3:1d:49:98:93:2f:93:1d:17:19:00:9e:7e:c5:c3:
b2:6d:5a:65:b1:5f:a4:ba:0a:e7:f1:c4:2d:35:fe:
98:45:49:dd:a1:c5:46:c9:48:cd:af:a5:58:4a:22:
33:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:21:54:4E:88:17:1F:DD:58:9F:DA:5E:34:AC:82:69:CE:4B:E0:6F
X509v3 Authority Key Identifier:
keyid:EE:FE:4B:75:29:8C:00:72:01:E7:1C:80:6A:5C:8C:09:E7:B7:74:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:31:fa:3e:24:e3:2d:28:0a:cc:f2:f0:8a:26:30:d9:af:5f:
56:77:21:8d:5c:9c:b5:5e:c9:e1:b2:63:4b:ca:dd:b4:b3:65:
d8:4d:a6:65:ad:4d:19:8e:ec:fa:ad:64:e5:50:32:0c:25:84:
60:d8:80:31:fb:61:af:b2:46:85:96:75:8c:96:3c:af:a5:73:
b9:2e:a5:df:bb:3b:61:9f:71:a3:0c:3b:9a:ab:bc:9a:bb:22:
7b:f3:45:7c:cf:b7:1b:4e:7c:6a:9f:6d:3a:2c:00:aa:32:fc:
28:3c:a1:9d:0b:e2:17:33:ad:78:bf:09:ca:17:e7:72:60:ee:
d3:6a:0f:1e:99:03:c0:79:88:2e:af:61:a3:fe:3c:1b:2a:1e:
d8:ff:8f:89:f1:8c:16:87:75:08:8f:29:69:3a:3f:72:3d:69:
6c:4c:4b:11:f1:08:65:a9:49:3a:86:49:bf:ff:67:3a:85:28:
c3:b2:c4:87:7f:d3:8a:b6:4e:38:c6:4c:ae:83:15:b3:2c:90:
45:79:de:64:b4:21:8c:fe:5a:ab:84:e4:5a:ca:81:eb:43:68:
90:55:1c:5a:d5:11:f3:f2:2b:00:ff:41:a7:11:2e:f5:af:e2:
65:58:05:d3:a4:03:78:e7:84:34:48:64:b9:cb:64:44:1f:bb:
c6:e8:04:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:17 2025 by rpki-client