Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
File: 7uNuuo1bP-lfMgGrLRFnXqAceBw.mft (raw, json)
Hash identifier: RI3PN+49ZzGvXrSNfkDSN+3cCVlTahNQizpHjy5c1tA=
Subject key identifier: B9:46:AC:8A:6B:86:2B:E4:2A:59:06:90:0A:85:BA:4F:8C:9F:C2:6A
Authority key identifier: EE:E3:6E:BA:8D:5B:3F:E9:5F:32:01:AB:2D:11:67:5E:A0:1C:78:1C
Certificate issuer: /CN=eee36eba8d5b3fe95f3201ab2d11675ea01c781c
Certificate serial: 019A70DC6CAA3FD1B045368C37ABCD18537E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
Manifest number: 01D7
Signing time: Tue 11 Nov 2025 03:01:24 +0000
Manifest this update: Tue 11 Nov 2025 03:01:24 +0000
Manifest next update: Wed 12 Nov 2025 03:01:24 +0000
Files and hashes: 1: 7uNuuo1bP-lfMgGrLRFnXqAceBw.crl (hash: Br1iIesO3E5hBQcG7PM+v77He3Vsqeb54AMrpqPWjw4=)
2: qatCLbB1wt003ugiHLUeaH6Egzo.roa (hash: kqMRNz8HFIkfR5BK7WY1x5EiB+ZuSgywUlDGBzooYrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:6c:aa:3f:d1:b0:45:36:8c:37:ab:cd:18:53:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee36eba8d5b3fe95f3201ab2d11675ea01c781c
Validity
Not Before: Nov 11 03:01:24 2025 GMT
Not After : Nov 12 03:01:24 2025 GMT
Subject: CN=b946ac8a6b862be42a5906900a85ba4f8c9fc26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d9:8d:a3:93:24:84:06:fb:cb:2c:df:3d:86:
f2:18:10:11:a6:c5:45:73:75:d4:1f:1d:4a:d4:af:
aa:1b:d3:4d:b6:f7:b8:45:84:4f:02:26:1c:53:71:
ce:80:5e:78:06:1a:8e:1b:ae:9a:14:a2:95:04:63:
a9:3c:59:ca:9b:7e:df:ea:3b:8c:c2:0f:7e:03:c3:
12:92:25:69:7e:17:57:a2:5d:ca:15:86:2a:c5:c7:
ca:30:6d:98:81:90:cc:b7:3e:e0:a8:1c:e8:0d:8c:
00:b4:d3:e8:be:b9:5e:78:d6:8d:7d:04:f3:c6:52:
6c:c9:0c:3c:3a:bb:3f:20:41:9f:b6:2f:63:54:59:
42:c8:c3:e0:4b:63:65:4f:f4:1d:a3:f3:e2:9f:3a:
cf:a4:5d:67:0c:06:c2:af:56:5b:29:37:f7:de:51:
4a:f0:2b:3c:cf:a9:48:53:ff:25:63:de:08:01:e6:
8c:6e:a3:f3:86:6c:29:eb:78:1c:f6:79:68:90:82:
c8:26:b4:8a:7c:ff:6d:58:13:92:bc:85:48:27:cd:
9a:8b:a7:0c:fe:70:2c:68:cf:b2:7d:55:e7:4e:72:
24:2f:24:d7:e4:4c:4d:b3:d4:b9:af:4c:94:70:92:
b8:8a:5c:a5:c3:47:e8:25:56:c9:cb:3a:dd:82:59:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:46:AC:8A:6B:86:2B:E4:2A:59:06:90:0A:85:BA:4F:8C:9F:C2:6A
X509v3 Authority Key Identifier:
keyid:EE:E3:6E:BA:8D:5B:3F:E9:5F:32:01:AB:2D:11:67:5E:A0:1C:78:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uNuuo1bP-lfMgGrLRFnXqAceBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b06e07-01f5-43dc-b80b-e5c8cc86abd2/1/7uNuuo1bP-lfMgGrLRFnXqAceBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6c:7e:37:bb:00:eb:cb:8c:ac:15:3e:c4:14:1c:9f:91:98:
78:63:bb:73:6e:8d:aa:ec:3f:e7:df:95:cf:46:ab:d1:69:05:
0e:95:ca:f9:9c:c5:0a:68:79:4f:1b:b2:fd:29:52:07:a1:91:
2d:bc:5e:c8:be:8c:9b:d9:f7:90:97:47:b5:57:42:0d:a3:9a:
9d:bd:a9:9b:2e:85:61:e3:4e:5b:5e:d8:e1:e7:47:21:ca:3f:
35:4d:2d:ff:57:86:7f:e0:d2:0c:73:1a:d7:c2:8a:f2:6d:0e:
43:e7:02:b2:f8:08:4d:91:70:25:15:33:67:25:1d:b7:cc:d2:
66:51:47:b9:1c:ef:12:f9:b2:0e:5d:ba:e3:b4:2f:11:11:ca:
dc:f9:aa:9e:39:6c:8a:34:db:fb:b3:c0:01:20:1a:45:90:1f:
5b:d8:e9:25:13:53:e5:9c:52:ce:5f:05:78:a8:66:df:62:b3:
b8:9c:8b:f6:95:42:55:44:14:d1:fa:47:52:3a:2b:78:51:76:
9d:5d:06:5e:15:9a:5f:e7:8a:03:f3:99:e5:69:a0:17:fa:bf:
e3:a4:ec:b4:b1:35:9b:91:bc:9c:4b:2c:9e:05:01:43:23:37:
cf:f8:dc:b4:6b:b2:3d:6d:40:0f:42:c8:bb:1a:ab:a8:af:e4:
f1:29:cb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:39 2025 by rpki-client