Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
File: 7WtTyjBwQ0J-9OrInHfBuhP28C4.mft (raw, json)
Hash identifier: tcxuQZvqyZoju0AXlZFzvFCART8rwaAjalXpa0xZ0nc=
Subject key identifier: 34:CC:64:10:60:56:74:D5:BB:A5:4D:1D:D0:92:DA:13:61:31:76:68
Authority key identifier: ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E
Certificate issuer: /CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
Certificate serial: 019A71B7AB4250AD872D6E5B80A87AF585F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
Manifest number: 0D13
Signing time: Tue 11 Nov 2025 07:00:53 +0000
Manifest this update: Tue 11 Nov 2025 07:00:53 +0000
Manifest next update: Wed 12 Nov 2025 07:00:53 +0000
Files and hashes: 1: 7WtTyjBwQ0J-9OrInHfBuhP28C4.crl (hash: wodRdkiNCAR7JgZDq57CfMKN/gxBSVNHULt9ZDoxnCc=)
2: YUYJWAPlDAqYr8-D4VfN8LQLeMA.roa (hash: at6X5FWtDhfqKory2gk30h0rP9dNBcyxgRSPjmnHkpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ab:42:50:ad:87:2d:6e:5b:80:a8:7a:f5:85:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6b53ca307043427ef4eac89c77c1ba13f6f02e
Validity
Not Before: Nov 11 07:00:53 2025 GMT
Not After : Nov 12 07:00:53 2025 GMT
Subject: CN=34cc6410605674d5bba54d1dd092da1361317668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:7e:e9:6d:b4:f6:c2:fb:3d:c9:93:5d:14:
b5:25:a0:06:ef:85:aa:6b:a2:02:32:28:d5:a6:bd:
74:99:2a:19:c1:e0:cf:78:20:8f:d9:b3:b0:a5:42:
67:24:cb:9f:fc:7b:1b:12:62:eb:ba:2e:b3:a6:f8:
0f:a1:16:18:c4:2c:2d:aa:24:87:f3:b4:c7:38:e2:
67:8d:15:a2:fc:0c:ba:85:aa:24:5f:26:62:bd:5e:
0c:ae:1b:8f:65:a2:54:ca:50:7e:9b:7b:c8:32:4e:
5e:a4:ec:7f:fd:c1:67:90:39:db:e6:29:65:79:7e:
d5:4a:f8:5d:11:e0:40:3d:aa:5a:41:05:76:3a:75:
6d:54:64:92:18:d0:7d:45:d4:5a:bb:0b:cc:41:5b:
1a:35:29:86:98:e8:20:c2:e7:17:e4:db:d4:f8:47:
59:35:5a:f4:fe:c7:fc:70:25:19:2a:83:3a:2f:60:
8f:b8:cb:84:fb:c5:4b:4d:c1:d1:10:1e:c9:eb:c3:
6c:2a:eb:3e:02:75:96:c2:7a:e7:6f:e7:17:6f:90:
c0:52:b1:85:fe:12:54:55:e3:6b:0e:f6:28:c1:50:
cb:ac:d5:40:84:e3:27:01:a9:33:53:50:a1:a9:c2:
f4:7b:e5:d9:fb:b9:d3:64:8c:7d:e1:4e:42:05:ed:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CC:64:10:60:56:74:D5:BB:A5:4D:1D:D0:92:DA:13:61:31:76:68
X509v3 Authority Key Identifier:
keyid:ED:6B:53:CA:30:70:43:42:7E:F4:EA:C8:9C:77:C1:BA:13:F6:F0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WtTyjBwQ0J-9OrInHfBuhP28C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a28dde-8ed6-4d3d-9ba0-6d615f3e14f5/1/7WtTyjBwQ0J-9OrInHfBuhP28C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:65:0a:3c:e1:9d:c4:3c:5f:f2:c2:f5:9f:5c:a2:71:5d:7b:
d9:f6:e2:e7:e9:be:ba:e6:0f:9b:84:79:05:b8:56:96:af:4c:
7e:4c:2b:5f:9d:9b:c9:fc:49:d2:d0:6c:0e:7c:5b:a2:99:c0:
92:6e:41:dd:b2:df:75:f8:e7:48:6a:a5:15:81:83:f2:98:83:
4d:f4:7e:10:a9:17:20:98:e9:89:57:55:f4:50:f9:bb:13:58:
e8:7e:23:a7:5b:f3:14:c3:8a:e1:1a:cd:38:d9:e6:c7:62:31:
c4:7f:ee:2d:b3:0b:c9:1a:48:cc:4c:ee:2c:d9:06:8e:fb:9e:
ed:80:38:d2:a5:3c:38:a1:d8:3a:3d:7d:05:06:38:4a:5e:af:
10:7a:37:9c:b6:34:b9:7f:e0:f7:29:e2:f9:db:25:f9:e1:7d:
d6:21:61:9f:0d:a7:54:ee:e9:86:6d:67:33:49:3c:d9:38:f5:
ca:99:93:d6:2a:7c:32:dd:f4:d6:45:33:63:82:5f:e7:82:59:
69:d8:ec:6b:a0:e1:34:bb:b2:6e:88:4d:37:37:fc:ab:aa:e0:
f4:77:20:ec:89:03:aa:ff:ef:48:fc:2b:bc:e2:62:a8:04:46:
ba:79:81:65:a2:61:59:ea:fb:ca:ec:a8:ca:62:76:a4:c3:31:
9e:27:a5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:50 2025 by rpki-client