Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
File: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft (raw, json)
Hash identifier: IfPU/w/qR/uYMpv7SLeizaBmaToesXtMrcQsSYljpDg=
Subject key identifier: F8:B0:3F:CF:1B:72:EA:B8:4A:0C:9B:B9:87:B9:81:1E:4F:07:91:4C
Authority key identifier: EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
Certificate issuer: /CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Certificate serial: 019A71B7A4111CCB3F45454B89B66A2BE2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:00:51 +0000
Manifest this update: Tue 11 Nov 2025 07:00:51 +0000
Manifest next update: Wed 12 Nov 2025 07:00:51 +0000
Files and hashes: 1: 7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl (hash: OCF0TyCP2osPL/jzJ3g+zcQ8M3kD4FjgpJq1huCoY+E=)
2: VOwZFJ2kzA4iWyaWmWEZLWn-AT4.roa (hash: YQUstvHHSMLfCh8uMvOZZqE+6wkkgDZ2K70GWR3RN8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a4:11:1c:cb:3f:45:45:4b:89:b6:6a:2b:e2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Validity
Not Before: Nov 11 07:00:51 2025 GMT
Not After : Nov 12 07:00:51 2025 GMT
Subject: CN=f8b03fcf1b72eab84a0c9bb987b9811e4f07914c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:7c:06:0a:8e:e7:d4:5d:d2:ea:57:6d:09:
03:b4:ca:30:64:ce:e0:aa:19:83:65:a3:21:b3:00:
88:ae:48:37:1c:6e:f3:cf:ec:f7:e8:2d:e8:75:45:
77:57:c5:cf:7b:db:7b:d3:48:07:4d:91:7a:28:15:
0c:e2:ff:49:99:5c:ed:be:4c:65:dd:62:01:95:07:
e0:82:1b:17:08:33:26:b1:b5:0d:c7:50:40:3d:04:
20:ac:30:02:bb:2c:3c:40:5e:07:0e:23:9f:c3:bb:
90:31:81:15:4a:91:6a:d0:d6:1b:bf:1f:fd:7e:61:
99:3c:9b:fb:1c:d4:8b:d2:83:d1:3e:89:e2:fa:2d:
52:bf:9b:da:a0:00:c4:24:fd:41:59:02:76:e7:d5:
54:17:2e:33:f1:e3:19:64:b9:1c:15:70:fc:87:77:
5e:4d:3e:7a:8a:db:21:28:f4:c1:16:7a:57:dd:32:
3f:ab:48:29:b2:b9:5a:a3:22:fc:69:70:87:4b:01:
a8:b6:9c:7b:7a:ad:c0:28:2e:59:12:81:a1:c2:bf:
eb:4f:3f:c2:5d:02:91:61:96:0b:68:87:65:96:98:
30:53:4e:df:1d:8e:31:b6:a7:1e:79:1a:7b:08:79:
15:b2:8b:b2:0e:94:a7:a8:0b:fe:91:48:20:b0:93:
bc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B0:3F:CF:1B:72:EA:B8:4A:0C:9B:B9:87:B9:81:1E:4F:07:91:4C
X509v3 Authority Key Identifier:
keyid:EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5e:85:16:05:56:a4:a7:42:16:32:81:b7:b0:ac:1e:37:87:
ee:3b:bb:80:fb:eb:ff:92:a9:47:3a:d2:93:4e:c1:8c:5a:c7:
7d:f7:1a:ed:91:24:69:96:3a:0e:0f:6e:21:ce:b1:00:76:1a:
c1:79:42:6f:e6:3f:63:05:c5:f7:84:4c:3f:85:8f:d6:ac:62:
4e:f3:2e:7a:51:68:34:99:44:e8:97:f0:56:22:8a:f5:a4:45:
c9:c0:f8:c1:b7:e7:c9:9c:5e:c8:f9:97:77:0e:3c:25:7e:f5:
a2:45:10:0b:e1:3e:95:ba:b4:dd:00:89:52:a0:f3:f4:3c:ad:
21:c0:99:7d:b0:fc:5d:c5:5d:2d:f0:33:af:e7:df:b3:45:c0:
3e:a3:5f:25:5f:5b:32:39:ce:ae:47:a7:2c:b6:cc:db:72:ac:
80:86:b0:8d:8c:f5:1d:bb:7e:1b:ca:29:e5:5f:6d:9f:47:93:
63:08:2c:92:85:8a:d6:e7:b3:ac:8d:60:d2:e8:db:44:22:3f:
be:b8:d1:a2:fc:7d:55:41:94:ac:b4:c8:3a:61:61:16:09:47:
0b:93:40:4b:ca:bc:d5:eb:29:36:ef:fc:e5:13:57:55:f2:22:
b8:cf:5d:a9:b4:27:3c:95:9d:d4:cd:1e:3b:ae:92:d7:55:40:
0f:fa:51:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:06 2025 by rpki-client