Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
File: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft (raw, json)
Hash identifier: ec0pHGGxYCd52Y+WB65YcG66Kwd/kl8q60fCDfdjExQ=
Subject key identifier: B4:2A:F3:30:32:36:B9:FB:28:58:89:00:0E:01:7B:72:CB:19:B3:51
Authority key identifier: 0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
Certificate issuer: /CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Certificate serial: 019A71B94DC0726D1A94F6337D489142B430
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
Manifest number: 09D8
Signing time: Tue 11 Nov 2025 07:02:40 +0000
Manifest this update: Tue 11 Nov 2025 07:02:40 +0000
Manifest next update: Wed 12 Nov 2025 07:02:40 +0000
Files and hashes: 1: 4ylciqY8jqFbgkvhNmhn6kXHXWI.roa (hash: uJRTz2tCC/hqbqxjSnS7M5EUtmYb5oX46HnfGtIazR8=)
2: C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl (hash: Ho5ggBSX15CR+Q68pflsXH0HnCWawXBu8Ky1hNK8Wqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:4d:c0:72:6d:1a:94:f6:33:7d:48:91:42:b4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb1d0f2c3d21e54c4d18127604435a90f24db51
Validity
Not Before: Nov 11 07:02:40 2025 GMT
Not After : Nov 12 07:02:40 2025 GMT
Subject: CN=b42af3303236b9fb285889000e017b72cb19b351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:66:b2:ca:94:4d:14:4f:3d:35:4b:3f:72:a8:
50:d1:8d:a7:13:e6:e5:6a:78:f3:82:16:f6:40:f6:
0d:8a:1c:cf:6c:fb:9a:33:6f:ac:03:7c:c3:2b:d2:
64:ad:7b:61:3f:a6:79:ca:98:d8:e2:fa:fe:34:f0:
74:43:02:a3:85:9f:a0:6e:44:d7:38:70:27:21:74:
61:9a:85:8c:fa:4f:7f:7a:57:49:b8:26:66:f1:a9:
ed:d0:eb:10:7b:b9:ba:64:dd:59:d2:b0:c4:a0:17:
74:00:58:2b:3e:9a:e6:73:f1:34:09:a8:f9:d0:a9:
17:70:77:2e:b6:1e:b0:6d:ac:fa:91:b3:59:42:65:
c6:3e:14:b0:c9:7c:f2:70:7f:0f:15:92:3b:18:1a:
ba:ea:23:2d:46:41:6b:78:51:57:67:41:87:49:b9:
c7:79:4f:4b:c3:3a:ea:9e:03:f4:8a:16:69:bd:dc:
09:7f:fb:35:10:cd:1f:8d:20:a8:00:97:2b:25:bc:
83:6f:f7:27:14:c8:5c:de:13:b7:02:50:b6:fb:90:
a9:d6:fb:18:11:fd:93:a6:dc:d0:a9:90:dc:f9:f0:
1d:61:ff:37:fc:2c:c6:e7:d2:c4:bb:e5:22:e3:42:
10:80:f8:a7:8d:e9:54:a5:f8:85:d8:35:21:4d:85:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2A:F3:30:32:36:B9:FB:28:58:89:00:0E:01:7B:72:CB:19:B3:51
X509v3 Authority Key Identifier:
keyid:0B:B1:D0:F2:C3:D2:1E:54:C4:D1:81:27:60:44:35:A9:0F:24:DB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e8b95d-c4f9-462e-8274-799f7f456160/1/C7HQ8sPSHlTE0YEnYEQ1qQ8k21E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c1:e4:5d:20:95:66:96:d8:27:68:d9:5b:48:9c:12:c2:40:
ab:74:79:3d:f0:b4:a6:42:a7:20:e6:1e:a0:ca:8e:1d:84:a4:
b6:9e:bc:89:0b:06:ac:a9:2a:94:b6:b5:fd:9f:86:3b:60:8a:
d4:9b:51:85:cd:23:b2:77:c9:a5:dd:4a:a8:91:b0:d8:f1:9c:
7f:9e:04:6a:e0:91:64:dc:4b:d1:8d:c4:cf:53:cd:a1:82:18:
6f:f1:58:78:bc:79:0d:f2:80:c5:e1:9a:a7:a9:e3:91:c9:d2:
ff:78:f9:85:2a:a3:6c:0b:37:d9:23:91:06:27:eb:9c:d7:60:
d0:09:d8:68:a0:7a:8b:17:e0:02:f1:78:2c:09:23:4a:8b:33:
36:24:d9:22:da:29:04:83:31:65:46:6a:5c:ed:c6:e8:5a:13:
17:bf:47:2e:b8:5b:f4:f6:72:f1:4f:b1:ec:9e:58:77:bc:02:
c5:fd:7c:f1:4a:e4:74:43:21:e5:7a:a8:b2:bb:fc:67:f3:07:
91:64:58:a8:52:37:db:94:3f:83:e6:50:7a:00:6d:b5:e2:f5:
13:23:51:a2:cf:31:e1:e1:bd:ca:06:73:aa:b8:67:b3:ff:c3:
a4:b4:4e:c9:51:26:63:d9:44:9b:35:c2:64:6e:fa:9a:41:9e:
c9:e3:c0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:01 2025 by rpki-client