Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
File: 7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json)
Hash identifier: jPguUi61BvWM6flLiGOVz1CcNkYTzbZCLsmX8MxY3XU=
Subject key identifier: 17:15:D8:22:37:9D:3F:10:2C:11:75:20:4B:50:91:10:24:3A:C5:44
Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Certificate serial: 019A71B847742E15CADEBF1489B20B5EA715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
Manifest number: 0292
Signing time: Tue 11 Nov 2025 07:01:33 +0000
Manifest this update: Tue 11 Nov 2025 07:01:33 +0000
Manifest next update: Wed 12 Nov 2025 07:01:33 +0000
Files and hashes: 1: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: egLPjg/eP+HgrkRZY5ToWhorQXh1mLnmZyDvrVqE9rs=)
2: xmQ5skD8YtPqUxW5yzoA6bHhREg.roa (hash: JOTsRiuQWzCXcl+Wr2hE6xVJO7LXDTormwzqqmVX6eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:47:74:2e:15:ca:de:bf:14:89:b2:0b:5e:a7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Validity
Not Before: Nov 11 07:01:33 2025 GMT
Not After : Nov 12 07:01:33 2025 GMT
Subject: CN=1715d822379d3f102c1175204b509110243ac544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:16:7c:e4:8a:79:0b:55:bc:58:44:1c:43:da:
5a:34:18:93:ea:64:cb:53:d9:8e:b9:47:48:16:cb:
7b:68:6a:d4:53:0c:91:c1:93:03:6a:1c:d2:2d:f7:
7f:d5:2f:f9:c6:61:8a:bc:b3:7e:cf:0b:d7:c5:44:
c6:61:06:cb:40:58:b9:bf:f4:b8:5b:fe:76:a7:67:
25:46:c5:ca:aa:41:4c:b2:37:e0:0e:29:08:69:ad:
23:ff:7a:77:53:72:08:f9:2e:d0:62:ea:0c:7c:10:
ad:0c:a8:19:4e:36:6c:19:5f:7c:7d:2f:ea:0b:d3:
a5:0e:1a:4d:51:fb:8b:0c:a1:27:45:1e:da:10:18:
96:4c:64:32:dd:31:b8:ce:1a:0e:ce:23:51:11:7e:
79:19:0b:1e:68:5d:b4:c5:aa:60:02:1c:02:e4:44:
e3:22:92:cd:9a:50:82:35:29:de:55:74:df:0f:c1:
2b:c2:e1:26:68:8e:fa:50:f2:3f:32:5b:b7:96:da:
7a:eb:ee:be:bd:aa:97:aa:62:df:5a:4b:c5:50:82:
b0:b6:2e:aa:d8:99:4b:cf:78:72:47:12:c0:2c:b0:
e1:27:4b:6d:bf:50:91:89:59:96:15:de:61:09:c7:
62:a1:00:04:c4:06:21:2f:16:e1:c4:f6:8c:51:cf:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:15:D8:22:37:9D:3F:10:2C:11:75:20:4B:50:91:10:24:3A:C5:44
X509v3 Authority Key Identifier:
keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:89:9c:09:6a:ef:b4:ec:c6:d3:fc:45:4c:9d:b5:f8:93:35:
5f:d9:ae:c1:2d:5f:d8:dd:37:95:da:80:70:4d:bc:18:c1:b9:
6b:c2:e9:24:23:14:8f:fd:ec:84:53:04:1a:7c:07:e5:2f:55:
ad:52:09:6d:37:53:8f:d9:14:4f:c7:12:84:39:b4:97:09:4c:
62:da:c3:3e:f3:13:f4:9b:f4:23:a4:9c:80:14:f7:35:38:2f:
8a:04:dd:db:94:c4:f6:83:32:fb:c7:8b:ca:b8:a3:76:a0:d3:
b0:4c:ff:30:4a:34:63:3e:e2:c9:44:b0:14:b4:62:04:89:30:
3c:28:a8:05:ea:88:f8:1c:6e:f1:fc:02:d4:30:dc:01:a6:52:
40:52:93:ca:d0:73:81:52:17:1a:93:93:0b:f6:fd:ab:e7:24:
13:5c:14:62:5f:6c:b9:a3:6b:59:a1:72:5e:8c:6f:62:b1:78:
7b:81:7b:c3:09:09:96:19:5b:42:fa:84:ba:58:92:50:55:5d:
53:f3:2a:10:d8:c6:8c:cf:8f:7d:29:4d:31:5e:36:0c:43:f0:
2d:81:6d:b7:70:05:41:0f:5c:ba:03:f5:56:6a:5d:22:5c:89:
2f:62:88:dd:8e:07:b2:06:13:93:66:76:14:54:55:a2:2c:af:
d7:d4:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:57 2025 by rpki-client