Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
File: t7Z7pXn0ikIHrECav08BGUBG6jo.mft (raw, json)
Hash identifier: 4tow6j8gmmA4ipqrSbdcn0m36VncUngrwTkFwxX7jyg=
Subject key identifier: 63:01:74:14:CA:A8:1C:D0:32:C8:19:E7:8B:59:50:33:BF:45:7D:63
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Certificate issuer: /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial: 019A71B82AE3A93767C809FC016C944B7C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 07:01:26 +0000
Manifest this update: Tue 11 Nov 2025 07:01:26 +0000
Manifest next update: Wed 12 Nov 2025 07:01:26 +0000
Files and hashes: 1: k-hTaQknXDp2DKuP6vvaZN3brec.roa (hash: IoaNc7VRuQAEFnNwpBORifvWy2POOqQygfpjoy01lPY=)
2: t7Z7pXn0ikIHrECav08BGUBG6jo.crl (hash: JUVrIKjaR1gxPPJE48APTqs2hMVXBTbdxuV2v0qHVSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2a:e3:a9:37:67:c8:09:fc:01:6c:94:4b:7c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Validity
Not Before: Nov 11 07:01:26 2025 GMT
Not After : Nov 12 07:01:26 2025 GMT
Subject: CN=63017414caa81cd032c819e78b595033bf457d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e1:fc:dc:80:be:fa:88:ef:07:be:67:c8:70:
22:f5:96:5f:c3:a3:9e:d7:56:35:28:20:0b:4a:99:
67:c6:99:bc:c2:90:64:e2:fb:ed:cd:a5:d4:4f:04:
8e:11:54:83:3d:1d:26:77:a5:69:2f:c4:66:d1:09:
2b:a8:b2:98:5f:cc:2f:45:8d:99:31:d6:de:f8:96:
65:a3:2f:f4:56:df:f9:dc:80:46:b8:53:91:9f:b2:
8a:40:9c:a5:70:93:98:02:03:01:5a:45:00:61:3c:
92:ba:6f:5e:40:85:a3:ff:af:8e:d7:67:69:ad:3f:
1d:73:0c:ad:0b:78:14:1e:d3:02:ea:0b:22:c2:04:
99:11:12:c9:cf:44:b8:c9:12:42:c7:3f:b8:6f:c1:
3d:06:35:5d:07:ca:7e:0a:71:e0:dc:0a:8c:55:7a:
6c:8c:b1:82:c9:db:e1:9e:f3:5f:02:1c:c1:57:9a:
f4:4d:71:6b:c5:66:63:b6:38:75:d8:d1:91:c9:ec:
51:94:17:f0:87:e3:2d:f5:c8:92:74:d8:da:cb:1f:
9e:37:ae:3b:67:35:8c:e4:92:b6:9f:c1:2a:a0:54:
01:a8:67:d5:56:03:7c:fb:82:2e:35:8b:f5:27:2f:
9e:da:bf:b1:d6:15:20:5e:96:73:ce:f7:91:0c:28:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:01:74:14:CA:A8:1C:D0:32:C8:19:E7:8B:59:50:33:BF:45:7D:63
X509v3 Authority Key Identifier:
keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1f:6a:8e:a0:8d:d9:04:47:9f:64:3a:5a:b3:b0:42:e7:e1:
a8:ee:18:26:13:a3:78:10:8c:c3:4b:f1:17:84:4f:dd:2a:be:
08:ef:68:58:66:c8:e0:8c:3c:a9:f4:e5:3b:25:20:82:f4:3f:
98:ae:45:05:86:0b:aa:69:67:f5:19:cc:3a:4c:95:e7:4f:47:
bd:81:80:5b:71:ea:bd:2f:15:22:88:e8:e2:b0:44:65:a4:3d:
8b:f0:25:07:d1:9f:ce:f3:44:7e:f8:9f:37:33:39:5d:75:41:
69:9c:62:4e:9b:0b:eb:78:40:04:12:3f:1a:b8:6c:31:b0:99:
fc:24:f7:f0:9f:48:e2:2d:8d:34:89:e7:34:9f:52:5a:88:80:
37:15:37:8c:e9:48:b8:76:6b:5e:a4:69:3c:c1:d3:af:38:f6:
6a:f9:63:d6:5e:c2:8b:5a:67:58:4d:79:18:2f:32:86:a7:c6:
33:30:f5:c1:87:64:07:5f:55:7a:19:d0:ec:43:15:34:e1:fc:
5a:12:13:4b:80:99:94:f2:c7:b8:07:1c:b8:4d:ab:af:3c:20:
8b:2b:eb:e1:7f:89:f3:82:de:72:c5:3e:1d:ef:2d:1e:f2:66:
5b:d0:24:57:f7:9a:c9:45:fd:a2:95:4f:b6:66:27:dd:b9:53:
eb:ea:77:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:02 2025 by rpki-client