Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
File: 7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft (raw, json)
Hash identifier: 4axltt0qTW6NGxZqIs6OqKoytRfbM10dClioyIN489c=
Subject key identifier: 50:76:E0:7D:45:46:C7:8B:07:C7:13:AA:E4:E3:45:D1:AA:20:A8:7B
Authority key identifier: EE:F8:E9:80:CE:1E:EB:32:74:8D:94:B1:D0:CD:42:48:9F:91:F6:E9
Certificate issuer: /CN=eef8e980ce1eeb32748d94b1d0cd42489f91f6e9
Certificate serial: 019A71EEB71FE8B4797A8E3FB00F63EA17C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
Manifest number: 101B
Signing time: Tue 11 Nov 2025 08:01:01 +0000
Manifest this update: Tue 11 Nov 2025 08:01:01 +0000
Manifest next update: Wed 12 Nov 2025 08:01:01 +0000
Files and hashes: 1: 7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl (hash: Jrkbi7onak7uYcdTTsxaW1oUDyjNku6KjAZ4RS0UfKQ=)
2: M_6QebMR4XXc_4ZSk3fzCdN3vvQ.roa (hash: VK66PCYpiRoLnxe0rDgGTNdxCqYRv5AkRtVmGa+QNQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b7:1f:e8:b4:79:7a:8e:3f:b0:0f:63:ea:17:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef8e980ce1eeb32748d94b1d0cd42489f91f6e9
Validity
Not Before: Nov 11 08:01:01 2025 GMT
Not After : Nov 12 08:01:01 2025 GMT
Subject: CN=5076e07d4546c78b07c713aae4e345d1aa20a87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:91:dd:af:1a:03:5d:44:6b:a7:41:b5:8a:a3:
09:5a:99:ed:9a:39:a7:5e:14:b6:d1:da:55:88:8f:
42:de:a2:57:79:26:c1:6c:72:65:c3:4e:d6:16:c1:
3c:96:f2:60:08:a0:57:b5:d2:59:5c:8d:f7:e9:a0:
3b:e8:78:ab:fa:29:8b:d5:b2:68:16:19:36:60:91:
d2:d2:d0:20:64:21:b9:4c:5a:a6:6a:ca:8b:05:8a:
83:ca:58:5d:be:30:54:4a:2a:94:5e:fa:58:7b:21:
b9:f7:68:0c:b6:4e:fd:45:c1:fa:4c:55:b0:19:4a:
83:5a:cc:80:1d:06:b7:97:15:83:f1:dc:ce:36:3d:
cf:5b:86:90:e1:7f:1a:7a:42:fb:07:b4:15:13:fd:
bf:69:e6:69:7f:96:35:5e:0c:40:95:2f:58:48:4c:
e5:16:8b:c5:c5:56:ff:66:15:9f:5f:1f:3c:f0:8c:
c7:a7:ed:13:90:3e:58:c2:1b:fd:2a:24:4f:1c:af:
0e:22:b8:8e:91:db:3d:6d:56:73:3c:28:5b:03:0d:
53:c8:82:46:86:2c:d5:9e:b8:80:fa:f7:ea:ec:cc:
bd:cb:f1:f4:46:7c:c7:8c:17:16:cf:bc:b0:09:7c:
4f:76:ab:8b:6f:30:b8:3f:c3:37:f9:59:75:c5:a9:
0d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:76:E0:7D:45:46:C7:8B:07:C7:13:AA:E4:E3:45:D1:AA:20:A8:7B
X509v3 Authority Key Identifier:
keyid:EE:F8:E9:80:CE:1E:EB:32:74:8D:94:B1:D0:CD:42:48:9F:91:F6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:49:3c:b4:7e:ea:f1:6f:3f:3c:02:34:d2:6b:9b:15:e1:27:
80:32:85:d0:f1:3f:1b:09:31:72:28:84:6a:c9:65:13:e7:e3:
08:67:01:ee:28:54:86:e4:ab:60:92:bb:44:5f:64:cc:7a:de:
e6:86:13:61:b0:a1:b3:6f:c1:15:73:f9:1e:01:6d:f8:fb:2c:
dc:9a:f9:06:b7:b5:ca:94:25:bf:c0:1b:0c:c4:e2:9f:a6:50:
6f:e4:a2:35:ed:f0:61:6a:56:af:e6:ea:9f:72:2d:ee:28:0c:
47:07:19:71:87:26:16:d1:1b:9f:f7:e2:8e:0b:5a:8e:fa:84:
90:6c:c9:9d:16:a8:9f:40:e2:ae:97:87:73:54:b1:ed:ad:44:
b8:40:c2:e7:c2:1b:73:a8:b7:fb:e5:18:84:b6:e7:92:19:2b:
57:1f:60:d1:0e:98:09:62:f3:60:f6:0b:a7:fa:ca:17:aa:18:
f3:25:e0:64:81:da:37:db:33:0f:4c:ed:7b:79:c4:1a:3d:45:
a8:6e:88:9b:9c:8b:b8:f7:6f:c2:61:2e:96:93:3c:3a:83:8d:
ee:b7:d7:76:cd:46:8c:a0:46:4e:b7:65:ea:6a:64:4a:5a:e8:
74:36:74:c9:73:69:46:57:04:ce:ae:fb:19:b6:7c:69:76:e2:
6a:21:be:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:36 2025 by rpki-client