Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft
File: x7cn_mQvVCkYabzx8pF-D1O-vSI.mft (raw, json)
Hash identifier: kb8IDuqZFcDIE/h6MTGPFz2Q3aRKj+jusQUa4hDycKk=
Subject key identifier: 9B:24:0A:52:A3:76:7F:DF:67:39:7B:14:F5:C8:C2:D8:CB:7B:8D:F2
Authority key identifier: C7:B7:27:FE:64:2F:54:29:18:69:BC:F1:F2:91:7E:0F:53:BE:BD:22
Certificate issuer: /CN=c7b727fe642f54291869bcf1f2917e0f53bebd22
Certificate serial: 019A7113299AEAB6809C117CBFADB1A8FA10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7cn_mQvVCkYabzx8pF-D1O-vSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft
Manifest number: 0137
Signing time: Tue 11 Nov 2025 04:01:12 +0000
Manifest this update: Tue 11 Nov 2025 04:01:12 +0000
Manifest next update: Wed 12 Nov 2025 04:01:12 +0000
Files and hashes: 1: wsRqdf6ProVsQH4skwc-uG0lzUw.roa (hash: FHzK5LDeYtvIBQbuDHKUrWWn8X5KgE2aJxYpJ0xsPOc=)
2: x7cn_mQvVCkYabzx8pF-D1O-vSI.crl (hash: D7BKhp4FPf0KcH2Pxav1kcXqxxuzsDx0JMtxu2apXqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/x7cn_mQvVCkYabzx8pF-D1O-vSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:29:9a:ea:b6:80:9c:11:7c:bf:ad:b1:a8:fa:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7b727fe642f54291869bcf1f2917e0f53bebd22
Validity
Not Before: Nov 11 04:01:12 2025 GMT
Not After : Nov 12 04:01:12 2025 GMT
Subject: CN=9b240a52a3767fdf67397b14f5c8c2d8cb7b8df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:31:d1:5d:1d:f6:ca:d8:9b:5a:57:2d:87:
85:d5:9b:ae:4c:bf:66:d6:82:ab:6c:9c:3d:03:23:
ad:7a:d5:33:36:3e:08:87:e8:39:b2:24:a7:f0:0a:
b5:1a:ec:ca:68:b8:e9:5e:4f:98:0e:ee:25:d3:89:
e7:10:c1:28:de:04:43:f7:a2:6d:40:ab:2f:f2:11:
cd:e0:c3:e4:58:26:2f:e5:1d:99:61:87:b3:b2:a2:
37:4e:f8:cf:eb:d1:7c:9b:eb:46:c1:7d:6a:79:ce:
f3:d2:4c:5b:83:bb:ed:2a:76:78:a1:ad:28:eb:b7:
95:b1:45:51:71:18:45:dc:39:55:e9:ef:51:fa:6d:
13:40:7c:e2:89:9c:63:e6:51:7e:5e:ea:62:fa:90:
10:8b:65:1f:1d:0b:c1:b5:2f:fb:36:a5:6f:59:42:
f4:ec:1f:da:ff:a8:5b:b8:e6:82:80:65:81:02:1e:
58:3c:fb:68:3d:95:a3:30:57:41:06:e2:f4:f8:50:
08:3b:fe:7a:2c:53:8f:d5:2d:4f:41:2f:57:45:01:
c4:07:ba:e8:5c:da:58:ca:fa:3f:d7:31:af:4b:d2:
aa:d0:64:38:8e:93:06:c4:17:8b:4c:da:ed:16:f1:
29:0c:74:6b:64:11:69:eb:ff:55:f3:43:78:cc:aa:
e1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:24:0A:52:A3:76:7F:DF:67:39:7B:14:F5:C8:C2:D8:CB:7B:8D:F2
X509v3 Authority Key Identifier:
keyid:C7:B7:27:FE:64:2F:54:29:18:69:BC:F1:F2:91:7E:0F:53:BE:BD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7cn_mQvVCkYabzx8pF-D1O-vSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/980bfb-c9b4-4433-8927-b667e18fd818/1/x7cn_mQvVCkYabzx8pF-D1O-vSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b0:f3:30:ba:fb:3f:02:d6:0c:c2:77:58:c6:3e:25:4a:29:
5f:9e:bd:52:5f:ea:fb:cf:03:de:fd:29:7b:9f:22:5b:b0:62:
fe:f3:a7:b7:71:cb:a8:23:87:69:d4:1c:c3:6d:42:bf:5f:b0:
15:f3:42:18:13:c3:71:e5:db:b0:2f:41:8a:af:90:13:59:64:
11:ba:e4:63:de:28:0d:80:9b:2a:83:3d:c4:48:e3:8d:6b:78:
81:29:1b:24:b7:cc:04:55:4e:3c:f9:eb:ed:0e:ef:ee:a0:e2:
65:0b:3e:a9:00:f8:c4:59:f9:bd:af:c0:f4:de:0a:a7:66:6a:
5d:6e:2e:0d:80:c0:2e:8e:95:b0:e3:88:e9:8f:a6:e0:bf:94:
b3:09:8d:7f:2e:9c:c1:71:e3:68:e6:24:70:ea:76:b2:58:74:
9d:9f:8d:19:05:de:57:99:8c:32:18:05:62:21:28:10:44:df:
c7:47:9c:d3:6c:28:56:19:55:d7:82:8f:f4:b6:93:8e:18:b3:
28:b5:9e:4c:95:4e:11:c2:1f:4e:48:7e:ea:97:da:d9:27:f2:
63:57:74:4d:c1:f4:be:d1:fd:dd:ab:7d:48:cc:75:ee:9c:0b:
fb:73:0f:81:5b:9d:86:4d:fb:de:38:3d:9a:39:01:a9:c9:8e:
08:21:fb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:53 2025 by rpki-client