Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier: UKIzrrx4soIG+ntaJekkLjqP5bweXJ1Siiy/R3uQ7mY=
Subject key identifier: F7:B3:2B:9F:06:B0:CF:C7:62:C4:1A:B4:F3:2E:86:23:06:5F:47:0E
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial: 019A725C69599DA1225510C398B7D36BD958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number: 0C7A
Signing time: Tue 11 Nov 2025 10:00:50 +0000
Manifest this update: Tue 11 Nov 2025 10:00:50 +0000
Manifest next update: Wed 12 Nov 2025 10:00:50 +0000
Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: Sl2f8FoeActTytECasiYHi0aefvbZ2fO29WqMphJrh8=)
2: sQ3JYG1qE-VbpJkkUv7gjERWISw.roa (hash: Eu9amXI9PIYJvHJFlrP4Ds55UyoCv7usyPM4xlXYBx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:69:59:9d:a1:22:55:10:c3:98:b7:d3:6b:d9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
Validity
Not Before: Nov 11 10:00:50 2025 GMT
Not After : Nov 12 10:00:50 2025 GMT
Subject: CN=f7b32b9f06b0cfc762c41ab4f32e8623065f470e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:71:4a:3c:2a:a3:54:fa:ec:c4:9e:a0:d2:
5d:4c:58:61:d0:ac:c7:dc:fd:5d:91:fd:55:29:cd:
7a:19:e9:2b:d8:6a:c7:76:d3:92:80:48:c3:91:11:
70:7c:81:17:35:32:13:37:57:a6:e2:c2:a2:6f:66:
4b:f4:88:94:59:51:04:fe:15:39:21:f0:23:59:f8:
e6:15:26:2f:50:0c:17:12:27:55:dc:b2:59:76:1a:
c5:47:2e:9a:8b:94:18:89:f9:a2:8e:46:a9:ef:cf:
21:23:cc:8a:5f:87:4f:4a:dc:1b:9f:a0:ad:c4:cc:
17:b0:48:b9:ce:49:d5:82:a8:5b:ff:14:78:65:d9:
06:a7:d0:2b:01:5f:1b:42:bf:14:fc:ec:87:01:06:
c1:22:df:61:b2:eb:e8:ae:44:20:d1:77:30:8d:b1:
5d:bd:46:c3:a1:f1:3b:26:7b:a7:7f:93:e2:77:d4:
69:87:a7:80:ef:48:d2:1e:23:e3:c4:47:6e:65:39:
a5:46:a7:04:dc:75:a2:7c:4b:ea:0d:8e:64:9a:f2:
cf:2d:bf:8b:31:d7:06:cd:d5:8d:72:7e:94:e7:31:
5c:90:0b:4e:0b:4c:4e:75:80:3d:9d:df:d3:5d:e3:
c0:d4:1f:b8:e0:9a:ca:3e:fa:5e:e9:20:d4:13:2b:
56:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B3:2B:9F:06:B0:CF:C7:62:C4:1A:B4:F3:2E:86:23:06:5F:47:0E
X509v3 Authority Key Identifier:
keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f2:c6:dc:80:32:79:2d:3e:a0:18:c0:50:75:6c:11:63:ff:
cd:d2:68:35:df:f6:b2:72:01:be:17:0d:8e:0d:99:74:4a:64:
0b:cd:3d:94:2a:0b:69:9b:22:07:59:8c:88:5e:66:ee:88:7b:
86:8b:c0:21:61:80:78:80:99:0e:e1:c5:0c:cb:70:61:0f:cd:
2d:85:47:71:e0:29:09:2c:a6:9e:96:82:69:bf:a1:ea:12:b5:
e2:a8:56:5f:57:33:6f:d7:9f:58:e5:80:79:bb:48:7b:2a:e9:
b5:ae:96:7e:e7:0c:3f:b1:81:f8:c1:fa:4a:b5:da:bb:fc:2f:
bf:7e:05:2e:99:ec:92:e9:1a:a3:3f:4a:4c:a0:e7:60:4e:cc:
1b:00:ab:7a:e7:5e:c2:9d:ce:de:62:c4:eb:43:c6:56:90:86:
3f:0d:f5:4a:b0:01:fa:7b:e7:76:44:19:ae:cc:53:ad:d9:30:
50:5c:b7:eb:69:39:b7:0f:dc:d4:69:3c:b2:f7:90:37:aa:30:
35:bc:47:f2:03:49:62:16:6f:d3:9e:f2:1a:a3:ee:82:e4:ad:
13:e8:5c:d9:7d:8c:11:ae:3b:c1:a7:7c:ba:ce:b7:60:13:60:
d8:75:fb:96:82:4e:60:43:e3:0f:a9:1a:58:44:65:b6:a1:be:
d5:b7:1e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:06 2025 by rpki-client