Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
File: su7525PeEaAlPVqoxT7Mrg-cPTM.mft (raw, json)
Hash identifier: SYseAQS7IC991VXh8GF1HQOsiLS1Zfrz4/SIrU8IuLE=
Subject key identifier: C7:BE:7B:D0:DE:1C:72:D6:DD:10:1A:F2:E0:78:D2:A7:CE:2E:02:21
Authority key identifier: B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
Certificate issuer: /CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Certificate serial: 019A71EE931FE65BAB5E130DAADA8DB9F4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
Manifest number: 0A91
Signing time: Tue 11 Nov 2025 08:00:51 +0000
Manifest this update: Tue 11 Nov 2025 08:00:51 +0000
Manifest next update: Wed 12 Nov 2025 08:00:51 +0000
Files and hashes: 1: HmEXSyMzNsE6ZXWyBUFqSz_-J_I.roa (hash: QHoycNdEbZMja0gAvjEgeC3E4wx2OI9vc9S4Y873m1w=)
2: su7525PeEaAlPVqoxT7Mrg-cPTM.crl (hash: StU7jQHCkmWvtKDN999kOZXduiEhgjI84g7CnzvYBRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:93:1f:e6:5b:ab:5e:13:0d:aa:da:8d:b9:f4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2eef9db93de11a0253d5aa8c53eccae0f9c3d33
Validity
Not Before: Nov 11 08:00:51 2025 GMT
Not After : Nov 12 08:00:51 2025 GMT
Subject: CN=c7be7bd0de1c72d6dd101af2e078d2a7ce2e0221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:8d:7e:9c:0c:0b:01:64:84:9e:4e:01:02:
99:da:dc:15:e0:bb:7d:26:a2:51:98:44:43:26:31:
f7:3d:79:ae:a8:19:b1:fb:fd:43:ec:40:2f:4b:85:
81:48:7b:33:57:d5:7c:26:dd:19:1d:bd:27:25:37:
61:f6:05:a7:ec:85:02:4c:16:1b:35:46:04:86:84:
56:d8:3c:8f:10:50:49:5e:18:57:77:e6:c6:81:6f:
92:8f:33:0a:ac:59:7d:8f:43:d1:16:4c:d0:1e:fe:
14:de:0c:23:ea:fd:c8:2b:0b:c8:43:60:c1:d7:26:
fd:a4:19:a1:75:98:21:a0:a1:c2:28:25:84:95:dc:
be:53:11:aa:3a:28:32:fd:85:68:df:65:fd:cb:87:
d2:20:e2:1b:ef:54:cd:b5:fe:e0:1a:c2:92:8f:35:
9a:04:b3:e2:dc:38:3c:f8:62:32:38:6d:34:63:01:
6b:40:c4:40:75:34:de:42:cc:09:e7:aa:99:af:62:
d6:81:20:9a:90:47:c3:59:d5:59:8b:1f:e4:95:a5:
08:00:f3:31:51:4b:c2:8b:42:d3:d2:b3:4a:08:cb:
7a:c7:5b:2e:fa:6d:a3:c0:0e:e4:f1:a4:00:cd:25:
76:ca:05:7f:18:a2:a8:9a:2c:0e:db:29:a7:81:33:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BE:7B:D0:DE:1C:72:D6:DD:10:1A:F2:E0:78:D2:A7:CE:2E:02:21
X509v3 Authority Key Identifier:
keyid:B2:EE:F9:DB:93:DE:11:A0:25:3D:5A:A8:C5:3E:CC:AE:0F:9C:3D:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su7525PeEaAlPVqoxT7Mrg-cPTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/73e90d-0553-4fe6-96de-deef8d154950/1/su7525PeEaAlPVqoxT7Mrg-cPTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a5:38:5a:05:f5:25:03:0b:97:e5:7d:72:70:cf:48:af:28:
79:c5:be:6f:21:8b:c6:23:32:09:aa:34:0d:b0:96:0c:10:b5:
e2:05:04:54:bf:71:10:60:f4:7d:8c:85:b0:54:1c:11:46:d4:
05:03:a1:fa:90:47:5e:8a:1e:36:ae:4a:a8:07:ad:a4:78:df:
5e:4b:df:2c:37:be:72:01:f7:6e:aa:5f:06:da:b4:94:42:b8:
e9:91:27:98:10:b3:6b:b0:71:bb:d0:50:e9:ee:fc:cd:2b:ff:
c6:8c:fc:15:b2:9c:d3:23:53:70:ac:92:3f:36:cd:01:ee:93:
38:67:7c:cb:d0:38:45:1e:fe:3a:d6:41:16:e7:0c:a2:a0:d2:
b1:29:4e:36:14:60:ab:86:ed:cf:7d:e4:10:75:ee:03:3f:4d:
f1:af:cb:c3:5d:4b:0c:5e:e3:3c:97:60:dd:0b:a4:79:cf:3b:
0b:06:36:e4:21:93:d6:06:22:c5:1e:93:fb:8a:c1:ab:c5:d2:
3a:1b:cc:40:9a:ca:e1:1c:ef:d7:07:37:da:da:7a:e3:8c:7a:
42:0d:90:90:fa:4c:b2:e5:5d:a8:48:06:9f:76:7a:d3:40:f1:
16:98:f7:17:56:05:64:f0:7a:54:6f:7e:51:45:98:53:18:7f:
fa:4e:e0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:49 2025 by rpki-client