Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
File: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft (raw, json)
Hash identifier: LXns/GIwWPqQ6FQAXCwtA/cax61kny9IPi7J9ft3SHI=
Subject key identifier: 49:AF:32:E9:C6:F7:C3:7E:94:F4:A3:DB:C4:D1:85:55:F6:A1:0E:4A
Authority key identifier: EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
Certificate issuer: /CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Certificate serial: 019A123A5995DC0BB31BF1E1E95B9CF6BFD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
Manifest number: 063C
Signing time: Thu 23 Oct 2025 18:00:05 +0000
Manifest this update: Thu 23 Oct 2025 18:00:05 +0000
Manifest next update: Fri 24 Oct 2025 18:00:05 +0000
Files and hashes: 1: 7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl (hash: ZtzNX4fQJEESopLCdr8WZMwuN2uAKpurQKn8WmUypwI=)
2: QaiA1bZYqqrrTFcETKEeVAb9d0I.roa (hash: 3/CpVEgMrkvVAywW4VLDUD5sCi7Crs9f+8Us3UCgxOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:3a:59:95:dc:0b:b3:1b:f1:e1:e9:5b:9c:f6:bf:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeea4d4a6ad6b7289b1822ff4e3837a0a0619204
Validity
Not Before: Oct 23 18:00:05 2025 GMT
Not After : Oct 24 18:00:05 2025 GMT
Subject: CN=49af32e9c6f7c37e94f4a3dbc4d18555f6a10e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fe:f5:67:02:6d:80:c2:e5:35:66:59:4c:e8:
dd:18:79:a9:ba:2c:d8:27:b4:e0:c7:72:46:6d:c3:
85:6f:3d:e8:2e:61:99:73:c0:1d:a6:1c:d0:29:94:
e1:18:94:93:92:bc:13:4c:10:b8:ac:e4:48:34:0b:
c3:f3:d3:5c:9b:4f:81:9c:10:af:13:c6:ba:f9:d0:
8c:30:27:8d:a2:9b:06:e4:31:6d:f7:21:ce:c6:19:
d3:4d:1a:b7:31:db:0b:f8:54:36:fc:dc:ed:bc:10:
2c:9b:ab:eb:b2:87:0c:86:fe:ff:1f:46:50:ad:bb:
9d:e3:ec:c3:8d:a4:97:3d:43:a8:08:af:22:87:1e:
9d:0c:cd:5a:08:7e:ce:d8:c3:e0:c9:55:92:61:4b:
42:28:9a:03:38:d6:4d:1d:16:1b:cb:3a:48:81:be:
71:77:c1:34:1c:e1:32:6e:c2:2b:77:39:97:49:98:
50:3d:51:03:a0:f2:bb:cb:99:00:7c:68:71:2a:18:
ad:db:b8:b3:10:d8:64:bf:89:35:b6:c5:ff:a4:7a:
69:5a:d7:a1:ef:a6:f8:cb:fc:d1:be:e7:c9:d9:b8:
10:09:79:74:cf:b6:2a:40:4b:cf:34:50:ac:f8:99:
00:17:40:6c:2a:9b:d4:f7:c1:a9:ac:97:1c:4c:c0:
ac:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AF:32:E9:C6:F7:C3:7E:94:F4:A3:DB:C4:D1:85:55:F6:A1:0E:4A
X509v3 Authority Key Identifier:
keyid:EE:EA:4D:4A:6A:D6:B7:28:9B:18:22:FF:4E:38:37:A0:A0:61:92:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7upNSmrWtyibGCL_Tjg3oKBhkgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/d48cd4-2088-4025-aa17-f72233179ccf/1/7upNSmrWtyibGCL_Tjg3oKBhkgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ef:f5:f9:6b:73:10:9f:0f:44:42:b2:ae:0e:15:02:e9:33:
5a:30:0e:0b:08:d4:ad:63:48:21:a1:a3:0e:3e:f6:1d:b8:0a:
01:9f:61:18:65:89:4e:ff:3f:4f:ea:eb:81:e6:83:41:22:77:
a5:d2:47:17:17:c2:6b:f3:d1:43:92:5c:56:d0:13:cf:78:04:
fe:2d:5d:9e:ac:45:a9:4a:63:b0:a4:ea:d9:84:4a:cf:af:8e:
f6:44:98:71:60:23:f4:da:07:23:ca:53:c7:19:52:3e:49:0e:
bf:69:43:7d:9f:54:48:1d:f0:91:6b:09:03:14:36:bb:9f:d1:
04:b9:11:f8:8a:84:26:b4:e7:1d:aa:79:7d:ce:75:7c:f0:58:
d0:54:f5:30:21:9f:f7:e6:73:84:d7:4f:c4:16:db:18:d1:b2:
85:41:c1:4f:b0:8f:47:37:5a:e9:74:7a:8d:bc:66:bf:bf:a6:
5b:95:c1:29:ff:bf:55:46:20:c5:a6:a3:0a:8b:9b:d0:67:d9:
08:83:02:55:3c:e0:2f:d6:ad:a2:ac:0e:a4:5e:ce:c9:48:25:
8a:51:c7:7a:5c:25:73:9d:3a:ff:c8:26:67:af:5b:7e:ad:aa:
05:25:87:3f:b0:0d:87:a5:80:43:85:ec:ee:07:0c:fa:56:49:
cf:83:e1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 21:21:56 2025 by rpki-client