Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier: Ma57f5zdLwHMniMVHONytmWtjGkdaZ3zsG/mWqcCY4Y=
Subject key identifier: B3:D9:5E:F0:97:78:2C:A7:EB:E8:6A:35:D3:A6:9F:1C:8A:4D:F1:D6
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 019A71135A9C12760479223A407359E35ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number: 0E8E
Signing time: Tue 11 Nov 2025 04:01:25 +0000
Manifest this update: Tue 11 Nov 2025 04:01:25 +0000
Manifest next update: Wed 12 Nov 2025 04:01:25 +0000
Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: 9SYY7hlgAxwGK1g4badDG7r5RpyjYO8GbKPmYn/5QIY=)
2: _JGWiygFUesXv5bnUwI668QYMo0.roa (hash: tSMCpwe6YrahqMRkzD/bacyXkbLZAIyumbRrGFQA0qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5a:9c:12:76:04:79:22:3a:40:73:59:e3:5a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Nov 11 04:01:25 2025 GMT
Not After : Nov 12 04:01:25 2025 GMT
Subject: CN=b3d95ef097782ca7ebe86a35d3a69f1c8a4df1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:56:04:ee:c8:d0:c5:91:df:1f:79:a5:c1:
d2:8f:81:d3:6a:bc:af:ce:14:b2:bb:39:5b:49:6e:
f4:f0:1f:af:ce:24:90:68:d9:02:a1:82:ed:04:a4:
62:39:5c:6e:ff:8c:47:3c:0e:19:c2:ea:9c:79:f9:
8c:3d:c3:97:dc:cd:73:d8:40:2d:69:87:29:f8:f3:
85:2a:d1:1c:f5:41:44:11:e1:7f:64:35:76:91:e3:
27:15:03:10:8e:19:8d:00:5a:a8:00:82:bb:f3:3b:
45:95:15:67:41:7a:d3:99:fb:25:48:b2:77:60:b2:
e0:b4:4d:8c:59:db:1d:a7:74:7c:4b:51:47:2b:e4:
e6:70:8b:c3:8b:1d:03:df:bb:36:86:5b:b3:09:92:
a2:70:b4:23:69:3d:76:d6:2f:f5:46:d8:a5:34:00:
22:95:6f:7c:30:db:fa:bd:b0:9e:0c:86:b4:1b:3a:
40:aa:7c:85:3c:1b:ea:e3:95:42:3b:08:04:8b:cf:
07:80:42:46:71:89:4b:3b:3d:48:29:7b:a9:08:7c:
94:29:94:6c:45:cb:90:ce:d5:e0:85:23:46:23:eb:
ee:b5:0e:f2:5c:90:9f:2b:16:9c:2e:7d:d4:0b:2f:
a0:d4:7a:ab:8d:82:18:a5:25:b3:e2:8f:61:15:d6:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D9:5E:F0:97:78:2C:A7:EB:E8:6A:35:D3:A6:9F:1C:8A:4D:F1:D6
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c7:77:e8:1f:08:2e:57:05:52:ed:fe:90:52:bd:bb:01:5a:
de:a0:96:9d:bc:9f:ba:38:5a:66:74:3f:71:11:15:a0:47:14:
41:fa:f9:d9:0e:9e:d5:3c:cf:3d:9d:01:3f:7f:5d:58:4f:92:
48:b9:e8:bb:b9:f3:32:3f:7c:4c:be:a5:a2:fd:a4:38:f7:62:
a3:40:a2:bf:53:dd:5b:3d:a0:af:15:83:58:f9:b6:29:16:65:
d2:a9:70:c1:fe:0b:9a:03:d0:52:9e:46:86:dd:5b:e9:15:8b:
98:ec:a4:70:14:25:2e:15:5f:21:f6:b0:1e:75:cf:d8:92:1b:
fb:3c:42:62:0e:4e:cf:80:49:47:27:ac:d6:53:6f:a6:84:9f:
88:86:c1:e8:75:de:51:1c:a9:b0:e1:ab:5b:ca:3f:57:ae:2a:
2c:22:25:7f:33:a5:e8:de:5d:15:75:ff:71:fb:3b:f9:e7:ac:
1c:60:48:fe:fd:45:14:75:e6:97:64:bf:06:18:ed:a9:8e:ab:
53:63:d3:b1:02:1a:26:3c:b2:6d:fc:e9:d8:21:f5:d4:38:64:
ad:81:7c:ae:4c:62:ad:fa:88:60:c9:b4:77:b1:62:29:35:5a:
29:83:06:78:cc:43:11:bf:a4:5c:f6:55:44:ae:23:c2:02:b0:
8c:32:8f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:11 2025 by rpki-client