Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
File: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft (raw, json)
Hash identifier: vchLZpAz4ryJRZCqj0U6KN12s2hCqp6aaZrBbNm8sC4=
Subject key identifier: CC:7F:AD:0A:1A:79:D7:83:DD:53:DF:29:A2:6B:69:97:67:5E:1A:B1
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 019A71EE782D997EDD3B2B11AAD253C09F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
Manifest number: 0670
Signing time: Tue 11 Nov 2025 08:00:44 +0000
Manifest this update: Tue 11 Nov 2025 08:00:44 +0000
Manifest next update: Wed 12 Nov 2025 08:00:44 +0000
Files and hashes: 1: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl (hash: un6iDPHYQpNPfA/i7/oigBVa1uD8ea0VgTtzQbn/Yr8=)
2: V8rwHt-KBtkyfMDcY6GbBS5O3lg.roa (hash: VKRjbMp2cA/7F+gIKAoYPT0t4kmN1vcNg+P5YqdMBPI=)
3: vLkg6vsM00eiYmKWC5SDs25Gs0o.roa (hash: laQ0wIfMQs3t8Q/rYbMaQJvlRI3pM205xGMs2yoH4OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:78:2d:99:7e:dd:3b:2b:11:aa:d2:53:c0:9f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Nov 11 08:00:44 2025 GMT
Not After : Nov 12 08:00:44 2025 GMT
Subject: CN=cc7fad0a1a79d783dd53df29a26b6997675e1ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:0d:0d:b0:1d:de:20:fb:75:b9:d5:14:1a:
10:67:36:53:e6:54:88:0e:b7:e4:ea:53:5e:8d:5d:
0d:90:96:41:ef:83:58:34:4d:82:3f:01:5d:46:0c:
2a:8a:cb:db:5b:b2:20:7b:3f:76:f4:1e:08:b1:8e:
75:08:63:a0:4a:e9:1e:a2:80:64:56:95:e5:15:70:
d9:6f:85:fc:6c:3b:9f:36:f4:87:f0:4c:5a:b8:cf:
83:d5:f6:ef:78:1e:79:55:d6:57:40:09:d2:66:cf:
c4:be:ba:66:45:b2:51:36:8f:df:1b:a1:38:52:78:
c8:f5:c5:4a:a0:46:8d:ec:20:e8:b8:e0:a5:33:fe:
d9:2f:ec:2a:00:f0:d4:71:66:be:f1:fa:44:ac:1b:
5e:49:ad:80:3f:43:ef:ca:e5:ff:ca:c4:4f:7e:63:
35:c4:2b:15:7c:2f:81:1a:82:34:16:55:0d:b5:60:
02:00:a0:5b:7e:96:e2:3d:47:7c:d4:d7:e0:c1:36:
7e:e5:c8:d0:80:27:25:27:38:87:47:01:30:80:0c:
98:ea:e2:4f:90:f9:14:2c:50:28:13:0f:d7:50:42:
34:be:7a:64:39:13:b4:1d:43:84:6e:ac:e6:a4:76:
87:26:21:95:78:12:3c:e3:0f:10:5e:96:b1:f4:8c:
ae:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7F:AD:0A:1A:79:D7:83:DD:53:DF:29:A2:6B:69:97:67:5E:1A:B1
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5f:d0:94:26:7f:23:93:be:49:f2:70:2c:eb:a6:6c:b5:9b:
58:a4:ee:bf:7b:5d:04:49:5a:5e:c0:75:01:82:b5:27:4a:10:
0e:b0:51:3b:2a:29:bf:fc:9f:48:98:aa:b7:55:ac:07:49:98:
58:89:8e:ee:b8:e7:1b:0c:b9:7f:7a:54:23:df:6b:86:76:2b:
fd:7d:a6:aa:55:79:4c:16:4e:11:00:fb:ed:1d:bf:39:72:73:
d4:49:3d:71:40:01:e5:10:0c:67:23:26:03:43:f2:a8:05:8b:
86:b1:a1:78:c9:3a:7c:28:e9:9d:0f:73:33:76:09:75:ea:a3:
ae:97:25:16:10:31:1b:ce:f8:43:e2:07:ad:b2:2d:93:da:de:
0f:a9:9f:f3:fa:4e:5e:07:d6:1d:3f:97:ae:69:2b:4a:ec:ab:
9a:51:a9:a1:85:74:6b:c8:b8:8f:54:cd:34:bd:e3:b3:31:31:
ed:ce:89:9f:64:09:65:3f:6b:d4:00:58:69:b9:69:06:75:7d:
ba:0e:b6:37:8a:d8:ed:16:a9:4f:8b:ae:ad:2e:e1:43:16:88:
af:c9:e0:49:57:82:ab:df:f2:42:46:f7:15:73:55:a5:ef:8c:
24:55:03:5b:5f:e6:d9:36:10:2e:d5:a7:1c:00:51:6c:8d:76:
b6:a8:28:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:27 2025 by rpki-client