Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
File: 7onRezmnaEppVLl7iw-6x9SJVMo.mft (raw, json)
Hash identifier: AO/O6Llql8zeFxyY8Gq5B7iN1KXCClLhG7EIfNqdSSc=
Subject key identifier: E5:04:05:D7:B0:1F:50:A7:D7:9A:83:43:C5:33:F2:D0:45:34:1C:DE
Authority key identifier: EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
Certificate issuer: /CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Certificate serial: 019A71808B49ED9EEFEB513F70F7CADFA639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 06:00:40 +0000
Manifest this update: Tue 11 Nov 2025 06:00:40 +0000
Manifest next update: Wed 12 Nov 2025 06:00:40 +0000
Files and hashes: 1: 7onRezmnaEppVLl7iw-6x9SJVMo.crl (hash: 6cA/ZveTWo5qZmjh+ZVLY0q1PphaWX/9lFFcgncSyKE=)
2: SWG7ULWsbdkT7YnAYLal6aiUNPU.roa (hash: 4R5oEsAspImowOjIwYW5eNE8lcSJazbh0RoaPrdVo18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8b:49:ed:9e:ef:eb:51:3f:70:f7:ca:df:a6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Validity
Not Before: Nov 11 06:00:40 2025 GMT
Not After : Nov 12 06:00:40 2025 GMT
Subject: CN=e50405d7b01f50a7d79a8343c533f2d045341cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:8d:f2:46:18:a6:0b:9f:bb:f9:96:da:ec:
5e:6a:2d:a0:96:5b:cd:cf:11:e0:15:dd:84:bb:b4:
9c:ac:ca:2f:c5:b2:0a:f2:18:a5:01:d0:ef:9a:d0:
c6:b8:41:69:dd:0b:29:2b:f7:c3:87:45:3c:f3:c5:
8e:e0:7d:58:18:4c:68:1b:59:1c:43:fa:c9:aa:b5:
69:ae:86:a9:fb:78:5c:f6:93:45:11:01:5f:9f:82:
57:89:6d:d7:76:ed:4b:92:da:ca:9f:f9:4d:d0:23:
d3:83:1b:e0:cb:9a:4d:55:90:1c:0d:6c:de:82:68:
6a:cf:0b:2f:53:c0:d7:a0:e8:9b:3d:06:d4:98:41:
2b:d8:f2:a5:b6:93:fc:bd:9f:14:db:71:ec:26:5f:
3f:4b:77:2b:f8:cd:69:c5:fa:22:08:c3:8c:02:ae:
60:1b:ae:16:79:26:5c:0d:6e:38:80:f6:ba:f1:03:
8c:f3:0a:66:0b:18:97:1b:e5:06:f5:43:05:a3:ba:
5b:37:92:ca:f1:28:90:f7:f4:82:16:b9:ac:05:71:
93:82:be:08:02:12:01:97:1c:18:15:2f:ef:6e:8f:
d2:8b:e5:bc:b9:d4:89:38:2d:04:81:08:2a:10:28:
a8:91:b5:97:40:4e:19:5f:6f:d8:b6:53:9c:82:f0:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:04:05:D7:B0:1F:50:A7:D7:9A:83:43:C5:33:F2:D0:45:34:1C:DE
X509v3 Authority Key Identifier:
keyid:EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:02:7d:32:9f:8a:91:51:99:25:98:1d:88:98:98:5f:a8:9a:
72:ae:80:5b:cb:a1:16:37:b2:46:bd:00:fd:aa:b6:e9:54:48:
e6:6a:62:1f:55:fd:fc:80:01:a6:c3:60:da:0b:e4:c3:e5:77:
b9:14:56:23:29:3e:99:bb:bd:23:74:8b:99:e5:89:70:20:5c:
2c:dc:72:b0:fb:f4:3e:95:1f:7b:5b:9e:68:17:6e:e7:ba:ee:
4b:60:8d:c8:25:5d:98:c3:bd:48:b7:99:0f:5a:88:7f:90:83:
2e:ea:eb:3a:91:36:1f:22:56:9b:76:8e:b1:5a:ad:29:fc:0f:
fc:9d:70:d1:96:34:4b:6f:a4:23:db:17:3e:f0:cf:7f:dd:cc:
e3:bc:71:b5:91:19:18:88:85:d7:ff:04:61:cb:b0:df:b3:bd:
ff:75:ba:77:ad:c2:64:af:9b:08:ec:88:bb:04:36:99:7d:d0:
cb:d1:c3:f5:bc:be:cf:f5:d6:d4:cc:80:da:30:32:db:3a:8b:
dd:49:40:83:38:ee:4e:d8:f4:ca:73:60:f3:4e:c3:84:a5:36:
15:7a:cb:c8:42:45:ed:a9:70:29:1d:bc:77:14:e0:3f:45:98:
be:bb:e6:48:67:39:6e:da:b9:c1:b3:8f:8a:2a:8d:35:a3:9d:
79:da:52:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:48 2025 by rpki-client