Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.mft
File: f7UOfTt_0olM-3DklGCLMgzCFcE.mft (raw, json)
Hash identifier: lYroG440lKHVpJGjz80bm23K0Cueno6Xq+9Y4Ilml/c=
Subject key identifier: 2B:EE:C8:D9:C4:27:62:A8:81:E8:2C:16:EA:C9:B3:43:F2:EB:88:18
Authority key identifier: 7F:B5:0E:7D:3B:7F:D2:89:4C:FB:70:E4:94:60:8B:32:0C:C2:15:C1
Certificate issuer: /CN=7fb50e7d3b7fd2894cfb70e494608b320cc215c1
Certificate serial: 019A714A178DD7E998301BAD3E3AEFE2A193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f7UOfTt_0olM-3DklGCLMgzCFcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.mft
Manifest number: 33
Signing time: Tue 11 Nov 2025 05:01:12 +0000
Manifest this update: Tue 11 Nov 2025 05:01:12 +0000
Manifest next update: Wed 12 Nov 2025 05:01:12 +0000
Files and hashes: 1: f7UOfTt_0olM-3DklGCLMgzCFcE.crl (hash: 4YVeDsIP6HPWZcnqX8qJHHms3ZywOFZakCwqWuvE70k=)
2: oclKHAtmoA9vP-ZCW-nXoVl95RM.roa (hash: xxuHEbUOU/3xe58FFQOG42uiHerR1Ojst9xa4iCrTKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/f7UOfTt_0olM-3DklGCLMgzCFcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:17:8d:d7:e9:98:30:1b:ad:3e:3a:ef:e2:a1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fb50e7d3b7fd2894cfb70e494608b320cc215c1
Validity
Not Before: Nov 11 05:01:12 2025 GMT
Not After : Nov 12 05:01:12 2025 GMT
Subject: CN=2beec8d9c42762a881e82c16eac9b343f2eb8818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:5b:99:28:6e:1c:a7:98:06:2e:d0:37:ad:
9c:90:c0:b8:4d:4a:8a:89:dd:f6:2e:f5:91:84:98:
dd:ff:76:88:7e:30:3e:98:3e:5f:13:df:45:cf:4d:
c8:8b:d8:7e:f6:5e:9f:a9:97:f0:52:ae:87:64:8f:
eb:af:d9:cc:e8:71:ce:92:47:30:9b:89:d2:87:9c:
be:20:f7:aa:ba:00:a9:aa:4e:47:c9:bc:76:62:7d:
64:9e:1d:58:03:83:11:4c:76:76:b0:ea:09:a6:1c:
3e:9b:2d:d5:2c:61:ce:ad:fa:67:9d:1f:f0:f7:46:
ef:2f:0f:3a:71:ef:4b:d3:6c:d2:84:2c:18:67:02:
21:72:26:7d:d4:70:4c:49:4d:28:de:e6:50:61:81:
89:bc:94:ce:c2:87:57:59:a4:cd:78:dd:03:14:2f:
e7:99:6a:24:2e:de:9c:31:05:b1:65:e7:ac:fe:4f:
ce:7f:ff:a9:2d:88:77:95:93:ce:b3:6f:da:6e:1d:
2c:6a:e0:53:91:80:b1:b8:68:df:84:c4:01:c3:5d:
c8:8f:0d:7c:80:a2:a3:99:fe:ed:d0:28:77:65:a3:
c9:4d:1e:c4:ec:be:a2:de:99:a2:d7:ae:2e:1a:96:
f0:60:1b:ff:16:ef:f6:b8:70:ce:ad:f2:31:6f:05:
1e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EE:C8:D9:C4:27:62:A8:81:E8:2C:16:EA:C9:B3:43:F2:EB:88:18
X509v3 Authority Key Identifier:
keyid:7F:B5:0E:7D:3B:7F:D2:89:4C:FB:70:E4:94:60:8B:32:0C:C2:15:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7UOfTt_0olM-3DklGCLMgzCFcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a918cb-2044-4f1c-9700-93601a34f62f/1/f7UOfTt_0olM-3DklGCLMgzCFcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8e:ae:d7:2f:af:36:e7:c6:ad:34:1e:de:e6:4e:c6:2d:0e:
60:7a:27:fa:7b:35:ae:d9:a9:e7:68:22:32:24:9b:f0:7b:bb:
f0:42:7b:f6:15:10:d1:64:4f:1f:45:20:1b:d2:d4:9b:3a:ac:
52:9b:48:72:b5:2b:96:1e:fb:05:8d:3b:d1:04:5b:1b:95:82:
e0:c0:0a:6e:6c:1c:86:0b:72:36:ee:c2:80:4c:f8:69:ab:8d:
b4:53:d1:fb:e0:55:cd:ff:c8:d7:77:2a:3d:85:d9:54:4e:8a:
97:64:6d:7d:44:d6:be:5a:1e:9e:ce:3c:e9:76:56:52:37:de:
c3:e7:b3:30:95:2f:a6:3b:92:7a:20:84:b6:d7:16:be:d9:4f:
52:2d:b7:2b:d9:ea:1b:17:5a:80:6a:b3:5e:01:c2:a5:8e:15:
d7:17:2b:83:53:7b:f9:27:57:72:54:b1:5c:fe:15:fd:06:3b:
88:71:b2:fe:c9:2e:56:a1:6b:97:01:ad:47:ec:cd:00:b8:98:
40:df:1f:dc:9a:b0:1d:52:b5:dc:af:09:27:16:60:c8:3d:81:
9c:aa:36:50:ea:97:f9:00:d2:21:31:a2:99:ae:c1:13:67:1a:
e1:8e:6c:02:a6:4e:c0:13:4d:31:f4:71:af:e7:36:f6:fd:c9:
4d:e3:f6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:24 2025 by rpki-client