Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft
File: 7tf2sWWjjP80bePjUhGNyZ7YIsc.mft (raw, json)
Hash identifier: HIYYggvZ6zddIZAMp3k0GxNfCQ7EqLQ8I5Us0wo+zk4=
Subject key identifier: 33:A8:FE:FA:89:F3:8A:B9:D3:CE:D3:55:5B:B1:FD:D3:7A:0E:4D:21
Authority key identifier: EE:D7:F6:B1:65:A3:8C:FF:34:6D:E3:E3:52:11:8D:C9:9E:D8:22:C7
Certificate issuer: /CN=eed7f6b165a38cff346de3e352118dc99ed822c7
Certificate serial: 019A70DC1890FC55DB213ADDE768FAB3807D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft
Manifest number: 0A
Signing time: Tue 11 Nov 2025 03:01:03 +0000
Manifest this update: Tue 11 Nov 2025 03:01:03 +0000
Manifest next update: Wed 12 Nov 2025 03:01:03 +0000
Files and hashes: 1: 7tf2sWWjjP80bePjUhGNyZ7YIsc.crl (hash: 1unX81dJhiyf0d8enX2rRec3ZSUGYnX7TZrgNOTO0Lg=)
2: Ki-liMzit2Jo2WHroCxM5VPpxjM.roa (hash: 9WXsbfSa8emQvpxcrQX0QIVMCI+roYDTEL0EsjFfF+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:18:90:fc:55:db:21:3a:dd:e7:68:fa:b3:80:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed7f6b165a38cff346de3e352118dc99ed822c7
Validity
Not Before: Nov 11 03:01:03 2025 GMT
Not After : Nov 12 03:01:03 2025 GMT
Subject: CN=33a8fefa89f38ab9d3ced3555bb1fdd37a0e4d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:89:27:60:f1:eb:c6:ae:44:18:26:5f:6b:
16:0a:45:5f:f9:29:5b:86:2e:eb:11:d6:77:52:08:
53:00:e2:65:60:1f:b8:4a:65:49:c4:08:9e:ae:51:
ec:e6:32:12:cd:21:2e:99:29:06:39:aa:c4:c7:55:
01:7a:48:9f:52:12:51:02:0e:24:ed:86:d1:51:6e:
6c:6b:93:76:1c:fa:c6:4b:dc:8b:4d:eb:59:8d:59:
9e:95:be:ab:a3:f9:db:44:6a:0b:e6:1a:a6:ae:d5:
c3:f6:5e:e9:2a:ba:45:6f:a7:a2:04:96:c0:69:9d:
75:62:f5:a7:e6:c0:b3:92:a2:7a:4f:b3:04:f8:6a:
0b:22:54:09:27:c9:7e:d7:08:6d:e5:ee:c3:2f:52:
b9:9a:d9:8f:b0:b3:e6:19:ce:e3:2a:df:d1:48:26:
f2:5b:8d:8b:91:f2:2c:0e:6f:2a:45:70:6b:4d:1a:
dd:6b:db:54:3a:6f:31:5f:b3:20:eb:0e:87:b0:1e:
a6:d9:7d:b4:19:0b:28:9e:25:7b:b9:c1:f6:4c:5e:
68:d8:50:71:e9:c7:2e:6e:2d:45:de:f4:74:7a:9d:
3c:08:5f:35:a4:cf:3d:7b:46:bc:34:51:fe:0c:6b:
bc:7f:5b:c9:b1:bb:f5:34:96:be:19:d0:14:58:2a:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A8:FE:FA:89:F3:8A:B9:D3:CE:D3:55:5B:B1:FD:D3:7A:0E:4D:21
X509v3 Authority Key Identifier:
keyid:EE:D7:F6:B1:65:A3:8C:FF:34:6D:E3:E3:52:11:8D:C9:9E:D8:22:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tf2sWWjjP80bePjUhGNyZ7YIsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c55ea2-62d0-4db9-901c-eac63c33b085/1/7tf2sWWjjP80bePjUhGNyZ7YIsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f3:d6:69:f5:6a:4b:61:64:de:03:55:c4:89:64:d0:27:53:
ec:82:9c:f9:9a:d9:12:90:18:16:18:80:01:61:ae:ab:1b:bd:
eb:6c:b5:b6:9d:0d:44:e5:0f:e9:f7:7f:0e:cc:ec:52:81:cf:
cc:28:5a:bd:be:56:b2:62:52:d1:f1:4a:27:e8:bc:fb:e5:96:
39:a7:60:b7:47:50:c7:5a:e0:2f:46:47:46:12:0d:b6:12:a7:
8c:c7:3a:27:7f:36:74:91:2e:db:50:74:9a:d3:dd:0c:9f:cb:
27:c8:2c:75:59:b6:9f:5a:a9:7d:eb:ec:fa:e7:89:36:53:e2:
06:c8:d4:b6:a9:d3:72:2c:bd:9d:b8:4b:08:0d:f8:f1:b7:42:
1d:11:b0:22:1f:a4:47:b3:ae:b2:f2:f3:5d:3c:0c:5e:40:1f:
73:89:cc:2f:ee:d7:27:1b:bd:5c:3d:5d:f1:58:9d:4b:a2:24:
dd:1e:3b:7b:41:d2:78:69:d2:e9:a1:58:69:21:e7:6b:51:43:
54:37:51:66:22:b7:f0:dc:78:df:d8:5c:25:17:9f:ac:45:28:
f9:c3:72:ca:00:11:88:67:4d:e0:9e:6e:ea:87:7d:68:84:1b:
27:dd:3c:5a:d5:c8:15:70:80:ef:4c:60:52:e0:e5:7b:fb:54:
e4:93:7e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:40 2025 by rpki-client