Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
File: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft (raw, json)
Hash identifier: zd7lod1SuWNiUHwstmbAwQAkSbV0fgm0n74rbAzwqSg=
Subject key identifier: 2F:4E:19:31:F0:42:7A:EE:38:DE:93:C8:49:20:0C:63:A9:48:71:7D
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Certificate issuer: /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial: 019A7293804ED2F1A5BE74A4E0CF3C5715F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:01:00 +0000
Manifest this update: Tue 11 Nov 2025 11:01:00 +0000
Manifest next update: Wed 12 Nov 2025 11:01:00 +0000
Files and hashes: 1: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl (hash: CwUjjvJSzww9rwP6At+pvdrqaq2fPf7RbS6Nwh2fT9A=)
2: Ao7-x_8NPg2IIluWIinvFu8yH0U.roa (hash: A3P+oKM2oi9ju+YskOIABqGTeUYgSje5pwMOXAO8OH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:80:4e:d2:f1:a5:be:74:a4:e0:cf:3c:57:15:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Validity
Not Before: Nov 11 11:01:00 2025 GMT
Not After : Nov 12 11:01:00 2025 GMT
Subject: CN=2f4e1931f0427aee38de93c849200c63a948717d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:54:4f:05:bf:5b:b4:0c:c7:b2:22:bb:7c:
80:2f:27:c7:c8:32:da:ae:3b:d3:aa:4a:18:72:ba:
39:cf:e6:c5:2e:67:0d:3b:6a:46:6e:aa:b3:53:2c:
16:8e:06:9f:76:20:da:63:c3:1b:24:df:7e:66:b8:
bf:ef:a5:ca:9c:4f:9e:ad:fa:db:62:44:22:03:6c:
cd:5e:6e:85:4d:17:67:43:0f:bb:a7:f4:c7:51:0b:
6d:69:b9:05:b8:00:37:9f:24:ea:f6:96:a8:e5:64:
82:00:1b:68:bf:ac:ba:3f:70:24:3a:ff:5e:81:9e:
9b:e1:ee:c5:eb:53:9b:11:d1:14:af:46:fd:46:72:
75:09:3a:f2:91:35:8c:c9:9f:fc:30:ad:31:71:7d:
d2:d8:19:ae:52:56:75:f7:68:c5:ae:42:37:fe:70:
61:70:a8:d7:a4:cd:20:00:52:d3:bf:1c:ad:d4:61:
51:f7:09:0c:b3:cf:07:13:fe:ef:c8:cd:e7:84:1a:
7f:b0:ce:ed:4c:83:78:83:c2:61:1c:50:f6:d9:ab:
a4:ce:21:a3:ad:25:fb:91:b9:67:53:48:15:3c:0e:
cf:3a:54:dd:2a:41:96:b7:fd:7b:f8:b2:8a:04:c9:
f6:10:72:f2:e8:b4:2b:bf:36:b4:79:f4:2f:7b:82:
55:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4E:19:31:F0:42:7A:EE:38:DE:93:C8:49:20:0C:63:A9:48:71:7D
X509v3 Authority Key Identifier:
keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a5:61:96:57:5f:9f:22:1e:8e:6a:00:59:f4:44:47:0e:ac:
45:33:81:bc:68:f7:6d:84:f4:8c:09:b2:b1:17:97:a9:4f:0a:
08:34:d4:a0:66:55:84:54:68:0c:60:2b:f5:66:f3:63:79:17:
ac:b1:fb:8d:6d:6c:48:b7:64:07:c0:aa:f0:3f:01:df:8b:e4:
7f:0d:61:d5:80:6d:b9:07:2f:2d:85:33:46:46:7e:40:7f:50:
75:ea:00:f7:f0:e6:0d:fb:65:80:47:34:a2:3c:51:04:c3:b2:
80:a4:1c:84:0d:f9:61:ce:ae:ed:14:c4:2e:09:eb:d2:7f:23:
62:a0:0c:46:08:2d:65:06:af:61:83:bd:9c:b0:df:14:59:c9:
a8:24:6c:6c:6d:4b:85:bf:5f:1c:13:c0:6e:70:8b:0c:54:7c:
21:78:93:66:ba:ef:f5:d9:11:2c:91:c8:20:8a:e6:9a:14:41:
5b:22:9a:c0:a6:50:5d:84:32:54:70:f6:4a:a6:93:5f:b9:0b:
bb:63:18:4d:49:5b:7b:7d:eb:71:4a:7b:5e:61:9f:15:81:65:
df:0d:27:86:69:75:9f:7f:5d:c5:90:5d:a4:19:b7:1a:c8:05:
b4:cd:f8:d0:ce:9e:03:19:84:96:87:dc:71:46:8a:10:8c:0c:
83:68:1f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:17 2025 by rpki-client