Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
File: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft (raw, json)
Hash identifier: gqnvQyVA1nnHXRF/zD5juqj5XoyM94HDr9nAhPYJVWE=
Subject key identifier: 11:AF:7F:0B:3A:3B:38:02:74:04:C9:25:07:38:F1:03:AA:7C:01:D4
Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
Certificate issuer: /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Certificate serial: 019A228ABAD444FABAFB9716EA36BACEEA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
Manifest number: 046B
Signing time: Sun 26 Oct 2025 22:01:48 +0000
Manifest this update: Sun 26 Oct 2025 22:01:48 +0000
Manifest next update: Mon 27 Oct 2025 22:01:48 +0000
Files and hashes: 1: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl (hash: hvoKrkDE0Q/4pS5glk56DpN7Fv9Frb3Wd2u3SM2aoYg=)
2: m0FdEd7qA5TjbE6u-KPGxVuqdzo.roa (hash: YB/7zgnoht2aguJRWPrUhzZwqPvY+5PbEOGpRfTLI+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:ba:d4:44:fa:ba:fb:97:16:ea:36:ba:ce:ea:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Validity
Not Before: Oct 26 22:01:48 2025 GMT
Not After : Oct 27 22:01:48 2025 GMT
Subject: CN=11af7f0b3a3b38027404c9250738f103aa7c01d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:6a:70:88:08:b8:bb:7f:9e:a8:d8:0a:b6:
0d:69:16:78:64:6a:73:9e:38:91:6a:64:c9:5a:92:
4b:86:24:f1:b1:a8:24:2c:00:67:86:61:4a:e7:b1:
21:0a:0a:bf:1c:83:7e:c6:c8:d4:39:d9:42:95:4a:
61:d3:4d:5b:cd:8f:a6:9e:be:64:f3:8f:96:06:da:
30:05:b2:e7:e7:c1:04:da:cd:73:70:5a:ee:38:4f:
01:f1:46:0b:f7:a4:d4:51:65:c8:38:55:e4:70:38:
35:2f:82:8e:21:45:79:7d:00:1e:cd:7c:1f:c3:c7:
05:f8:70:f7:88:b4:00:41:36:1e:80:11:7b:0b:57:
c5:e7:62:33:6e:58:e6:6c:3d:1c:3c:6d:c9:f9:08:
a8:65:2e:cf:7d:1a:9f:c1:8f:6c:25:3f:ba:18:4d:
e3:e0:6c:0a:4a:7a:5d:d7:c2:8e:6f:ac:20:73:6e:
d5:27:c1:5c:91:f8:4b:dd:98:05:62:58:ed:3e:28:
1f:85:d1:67:35:c7:23:62:09:6a:73:53:16:bf:70:
95:47:d0:5e:a3:7c:c3:bc:ed:8c:ba:26:19:06:70:
3d:b5:a8:45:cb:c6:4c:9c:3c:46:98:3d:fd:2a:5f:
4b:36:ae:70:47:a7:e3:7a:bf:60:d0:82:17:2a:c6:
d2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:AF:7F:0B:3A:3B:38:02:74:04:C9:25:07:38:F1:03:AA:7C:01:D4
X509v3 Authority Key Identifier:
keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:23:1b:50:41:53:10:b5:b2:f2:db:97:36:5d:87:d3:69:0f:
30:a0:21:84:4d:eb:2b:f7:29:1f:45:39:4d:da:a4:4b:7b:77:
9d:d3:1e:bf:62:52:ef:70:d1:63:0b:6a:92:b0:02:c6:4b:b2:
ab:0b:37:60:b0:9f:64:6b:06:f0:74:df:85:d3:90:b3:20:0b:
99:94:29:af:6f:fd:9b:74:ce:ce:6c:55:15:dc:20:0b:d1:b5:
f0:61:60:5c:21:11:e4:e5:8e:f6:51:5b:99:2b:97:05:0f:95:
86:b4:7a:4a:ed:a5:1a:bd:35:ce:35:2b:07:c3:df:50:bb:e4:
52:f5:1f:80:36:15:6a:67:20:bb:e9:69:fd:96:58:1a:4b:f6:
a7:3a:f1:d4:ad:60:d4:dd:b0:74:7a:e4:2e:5f:be:f9:30:eb:
b2:ac:a0:19:50:87:3f:14:5f:99:0d:48:49:86:b7:9a:f7:d2:
a0:c7:78:0f:f8:dc:25:d9:2f:c3:97:0d:17:55:78:bc:ad:49:
2c:73:83:92:9b:60:a8:d2:95:0c:a1:b7:81:39:56:9f:65:30:
f0:93:13:bc:89:2d:e6:99:aa:0b:1b:fc:8a:77:66:50:64:ca:
45:70:a8:17:93:5e:4d:37:a8:24:fb:4b:2c:89:b0:f1:d7:02:
10:47:64:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:43:04 2025 by rpki-client