Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File: t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier: /eiwOrm3JXdkPoKZ+ITfV7SskKmJuZJuld1Jugby2c4=
Subject key identifier: E5:6B:EA:76:15:55:59:74:EF:20:24:C0:29:06:27:FA:59:C6:C4:E7
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer: /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial: 019A71B7AB28C36653B4620E2C1825404A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number: 047D
Signing time: Tue 11 Nov 2025 07:00:53 +0000
Manifest this update: Tue 11 Nov 2025 07:00:53 +0000
Manifest next update: Wed 12 Nov 2025 07:00:53 +0000
Files and hashes: 1: k9U72mP-Km1xWLf3e9wAtG2m9RI.roa (hash: Pej7Eh2aiqSEO+t6zjd8tEra9H0XG62qu73Vt5mmuqQ=)
2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: A768GcWyc9joxFXcWw8aTafw7fn2kUoeuAkWcReLO2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ab:28:c3:66:53:b4:62:0e:2c:18:25:40:4a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Validity
Not Before: Nov 11 07:00:53 2025 GMT
Not After : Nov 12 07:00:53 2025 GMT
Subject: CN=e56bea7615555974ef2024c0290627fa59c6c4e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:4c:67:b6:d9:70:42:c6:f8:99:a8:32:c2:
74:91:b9:85:f4:9a:b0:0e:04:43:51:b7:9e:5d:41:
3d:2a:f8:3f:df:27:94:fb:b9:8d:82:34:be:77:75:
af:9b:9d:86:e0:b2:77:48:5c:c5:d8:ac:98:af:c3:
a3:64:fb:eb:df:96:aa:e1:22:9b:fd:36:93:a0:c8:
7b:9a:e9:cd:e7:5c:66:30:11:73:fd:2f:dc:d5:76:
4c:48:04:7b:77:99:f5:16:ab:d7:11:df:62:ca:b7:
9d:a4:b8:7c:af:5a:61:6d:37:0c:71:6d:06:91:24:
db:ea:6c:f9:8e:4e:ef:e8:15:cd:c6:ec:b4:7c:d6:
b0:29:52:af:c8:b1:c9:8c:96:a0:1e:87:85:cf:98:
41:c8:59:46:1e:c4:db:10:0f:2f:b1:dc:f2:86:c6:
25:25:58:02:30:1e:0f:9d:6d:16:b2:01:ec:a1:7c:
4d:5f:02:5d:41:50:5e:d8:33:1f:f6:c8:fa:4c:3a:
e8:89:ae:bc:14:55:8d:b4:56:e8:39:59:94:5d:55:
fb:de:ff:81:55:5c:63:64:7a:f8:2a:cc:8d:23:7c:
9b:0b:b2:f7:7e:ec:70:2e:30:4e:cb:c2:a7:72:41:
bd:e6:3a:40:71:e4:b8:7f:d4:3f:8e:35:54:2e:40:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6B:EA:76:15:55:59:74:EF:20:24:C0:29:06:27:FA:59:C6:C4:E7
X509v3 Authority Key Identifier:
keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:58:8c:ec:cc:43:aa:d0:90:c7:d5:71:45:73:f7:76:ce:1c:
26:27:cd:c4:4e:ee:15:61:4e:b5:14:b6:8b:05:81:e1:6c:ab:
6b:c3:37:ce:96:bf:d7:fd:6f:95:12:c1:9f:f4:5e:64:01:64:
11:2d:b8:e5:8a:91:ba:7f:ac:2e:33:07:c7:dc:ee:9a:cd:94:
54:77:8f:7e:41:0d:07:94:ce:06:69:3c:12:5a:b8:0d:25:e6:
dc:8a:02:2a:8a:fb:c3:6d:bd:a8:26:f8:c0:37:e8:a2:91:2e:
bf:fe:32:aa:16:00:33:07:f3:94:01:90:dc:4a:5d:ea:ee:58:
78:8c:1f:63:62:50:61:91:2a:0f:d0:51:e5:2a:db:9f:84:4d:
59:81:a1:f5:c6:a4:f3:b2:a2:73:25:27:4c:28:67:39:08:e0:
05:a7:97:89:35:07:7b:ad:56:9c:8f:e2:b7:c4:75:78:13:6d:
c7:82:bc:21:97:7a:b0:18:f6:5c:4d:a3:6d:9d:7d:c9:c3:23:
04:e7:f3:06:d1:5f:24:31:2b:42:5e:42:14:95:fb:4c:95:05:
28:d9:b8:b4:16:5b:26:bc:6e:0d:c5:b8:92:3c:45:f5:91:01:
21:9e:5c:21:bd:75:a3:4a:59:c6:1f:b4:a6:bf:54:d6:ff:a1:
dd:7c:4f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:13 2025 by rpki-client