Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
File: c7mBy27nnS34yJ1qNMVUveP8x18.mft (raw, json)
Hash identifier: h5nU/PVa+7SXTZPsgDQuNoyp0gjPmIUIt9K2rJCXAeQ=
Subject key identifier: 7F:DC:32:E2:FF:75:F4:08:95:82:FE:08:ED:24:FC:BD:B1:64:0C:94
Authority key identifier: 73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
Certificate issuer: /CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Certificate serial: 019A73385DE550D5FB3E9705CC467750DF38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
Manifest number: 0B07
Signing time: Tue 11 Nov 2025 14:01:05 +0000
Manifest this update: Tue 11 Nov 2025 14:01:05 +0000
Manifest next update: Wed 12 Nov 2025 14:01:05 +0000
Files and hashes: 1: c7mBy27nnS34yJ1qNMVUveP8x18.crl (hash: gu2i+Y3u5uKy5Dg2ykPAJWtB2R/a3A3kjOoeczFBZ5c=)
2: pP7tyuuRn66UIb06Z8juPizzBlI.roa (hash: vMVBYtNtS/yDZwAn3TTK359AmlCLqfTH6tG5fmDA5mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:5d:e5:50:d5:fb:3e:97:05:cc:46:77:50:df:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73b981cb6ee79d2df8c89d6a34c554bde3fcc75f
Validity
Not Before: Nov 11 14:01:05 2025 GMT
Not After : Nov 12 14:01:05 2025 GMT
Subject: CN=7fdc32e2ff75f4089582fe08ed24fcbdb1640c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:db:1c:82:68:47:32:bf:b8:a0:c9:41:56:32:
91:3f:59:7b:cd:34:c1:36:84:8d:be:89:cd:bd:99:
bf:78:c0:c2:7f:d6:bd:10:df:ca:94:49:01:78:66:
8b:b6:3b:f8:7b:ce:a0:db:5d:79:07:81:40:be:1a:
78:7b:d3:66:d2:15:08:4e:e9:09:1b:fb:21:7b:90:
98:48:27:f3:57:2e:78:9b:fa:30:70:13:58:c9:51:
1f:fb:23:13:75:d0:12:0b:84:74:c8:fd:22:01:37:
72:e9:20:a4:49:0a:15:44:91:fc:e0:a8:e9:cb:bb:
2f:16:c3:1b:22:84:e8:99:39:cc:75:68:d8:45:d0:
be:c0:e0:65:b7:6e:ae:6a:af:4c:86:a0:9a:cc:a5:
7a:a0:27:db:89:b4:84:2d:4d:82:09:65:b4:9c:52:
02:ea:dc:26:d2:97:79:3c:f4:6b:95:84:74:af:d5:
30:99:f7:d3:3b:41:9f:b9:e7:0b:cc:03:39:a9:2a:
eb:20:61:d9:95:76:3a:ce:0a:97:06:e8:71:00:04:
b8:ca:33:d6:8a:ed:68:22:7a:a1:2c:3c:00:c8:53:
ca:f9:63:05:f3:1e:95:b9:fc:4e:68:f8:b9:b3:19:
de:45:0b:b0:3f:69:e3:44:d2:bf:e2:d1:14:70:44:
2c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DC:32:E2:FF:75:F4:08:95:82:FE:08:ED:24:FC:BD:B1:64:0C:94
X509v3 Authority Key Identifier:
keyid:73:B9:81:CB:6E:E7:9D:2D:F8:C8:9D:6A:34:C5:54:BD:E3:FC:C7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7mBy27nnS34yJ1qNMVUveP8x18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d18b5a-40ef-4779-a0e5-aa581d378a7c/1/c7mBy27nnS34yJ1qNMVUveP8x18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:82:87:db:de:c2:ff:1e:ee:b7:84:27:cc:f9:9a:ab:54:5d:
b2:86:3b:20:34:dc:b3:10:92:f8:42:52:9c:d3:52:a1:04:58:
9b:13:a5:1c:8d:55:82:fe:ec:17:4b:20:4c:d4:25:a1:76:ca:
c5:cb:1e:6b:70:28:20:94:11:78:c1:3a:db:d2:6b:7a:5d:ae:
d2:32:2c:7c:83:e6:41:63:ba:67:ae:0b:34:fc:60:56:27:00:
4e:11:1d:93:45:a3:92:9a:81:47:d2:d2:33:56:ac:cf:16:16:
de:0e:d8:d9:a1:04:59:f1:ab:e7:05:d0:e4:55:81:04:01:57:
1c:4a:f8:68:89:17:7e:09:e3:19:23:6b:df:c6:ef:10:05:c4:
58:e9:ad:1a:ec:e6:b6:00:54:db:27:9b:f7:08:2b:92:6a:c5:
83:82:0f:aa:0a:b6:ea:6c:62:7d:13:7e:aa:f8:69:fb:04:f1:
51:c0:b8:03:83:06:3a:d0:45:73:98:2b:43:2d:38:03:f0:5e:
d4:59:48:db:ac:00:3e:db:c5:b2:be:ad:f8:ea:95:7d:cb:a2:
25:c6:80:c1:36:7a:82:4e:4e:37:99:f1:51:2c:38:dc:8e:0d:
ab:63:10:16:32:a8:ee:72:16:db:2d:34:c7:96:aa:21:52:5c:
da:e4:f0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:54:48 2025 by rpki-client