Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
File: 7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json)
Hash identifier: CDi0410ob7nMKjnNuL9H3QMx8xqcaymK6lX6ZH3V1hk=
Subject key identifier: 1F:4D:00:58:09:C4:17:EE:06:69:C9:45:85:9C:05:87:73:C9:BE:18
Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
Certificate issuer: /CN=eeaabca116b4e73a9944ab9702cf986657803580
Certificate serial: 019A7293E628CDE6BCC5C34A092CA16A4845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
Manifest number: 0368
Signing time: Tue 11 Nov 2025 11:01:26 +0000
Manifest this update: Tue 11 Nov 2025 11:01:26 +0000
Manifest next update: Wed 12 Nov 2025 11:01:26 +0000
Files and hashes: 1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: WXaW6+1yZW3WCvOR4cl3TGm/ntbqtKT0hbBcUDUwnCY=)
2: 87MujmzYjqiHmvGtUQfVum9xgYI.roa (hash: wh9UFynd+k4p6PBt8Z51e5f4u9WZiYuFkQCOx8EtepA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:e6:28:cd:e6:bc:c5:c3:4a:09:2c:a1:6a:48:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580
Validity
Not Before: Nov 11 11:01:26 2025 GMT
Not After : Nov 12 11:01:26 2025 GMT
Subject: CN=1f4d005809c417ee0669c945859c058773c9be18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:99:31:c5:e4:39:99:0b:94:d8:5c:36:a1:
15:cb:d4:29:32:17:a1:e3:c2:5c:43:88:05:c6:10:
f9:95:b7:1c:d0:37:43:8d:00:6a:36:3c:d8:d4:ba:
67:0e:ef:f6:f1:ff:bc:d1:30:c8:9e:c7:cd:13:67:
d4:46:c2:e4:92:a5:4b:ab:59:d7:8e:a9:87:db:d1:
ff:6d:f2:02:eb:c1:c3:04:da:7a:42:01:3a:34:a6:
a1:8f:f6:05:c1:9c:6d:ca:af:4d:d5:56:3a:de:5d:
4f:4f:21:c5:96:14:f5:0a:0c:8a:3a:cc:38:4b:0f:
b7:67:c7:f7:43:8b:0a:05:eb:9c:46:d4:ac:ce:13:
ba:85:7b:67:76:a2:a1:f3:fb:23:ae:f4:c2:35:2f:
ab:5c:fa:50:5a:da:6c:90:55:9a:b7:63:52:27:90:
72:1d:2f:85:26:4f:e2:b9:f0:02:4c:a5:88:d1:ed:
cd:1f:16:b0:51:30:09:e7:d8:f7:b7:43:b7:8d:6b:
39:3a:8e:41:41:88:6a:5f:cd:e8:41:27:90:9e:07:
76:10:3f:53:6a:5d:10:3f:a6:81:48:77:e7:85:6a:
0d:86:65:09:71:79:19:2d:8b:4e:4f:c4:af:61:56:
bb:0f:82:dd:a5:75:47:24:af:c3:f2:ee:2b:3a:55:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4D:00:58:09:C4:17:EE:06:69:C9:45:85:9C:05:87:73:C9:BE:18
X509v3 Authority Key Identifier:
keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c7:3d:29:74:6f:20:52:e6:a5:30:0d:32:b4:cc:3b:d7:92:
b2:5e:e8:2e:9f:01:51:f3:8e:9a:98:0b:b6:39:1e:27:99:0a:
49:96:88:88:65:07:86:1a:c5:8a:6f:69:2c:26:7e:7a:ea:de:
26:99:71:e7:7c:b5:df:b0:1e:0d:99:e4:07:85:d6:51:ff:9a:
3d:de:31:02:37:5b:4b:3c:5c:b9:91:2a:65:35:04:df:90:9b:
7c:52:97:d2:da:27:90:b4:a6:34:ed:cc:e1:22:06:03:fb:d8:
35:d0:c7:3c:dc:e9:bf:f4:95:5c:46:1a:2a:5b:71:4a:2d:73:
37:14:b6:a8:dd:42:b1:d8:d1:59:a4:de:d8:8b:88:6a:18:30:
ee:ea:3d:3c:77:46:24:15:d3:b8:85:2c:d7:ae:0d:bb:75:e9:
19:46:f0:06:08:2a:83:f9:9a:e8:33:d0:0b:75:57:69:b4:63:
5b:43:ec:48:47:14:a9:09:ca:ad:2e:ea:64:b0:38:f9:ea:b2:
d6:0c:bc:d9:01:43:26:86:ca:02:37:ba:53:49:a0:0e:28:c5:
a9:d6:50:46:32:3b:d8:71:16:bd:e0:0f:2e:ac:8d:fd:b5:ed:
d9:8f:77:34:8f:3f:f4:20:b1:ca:8d:11:24:54:01:99:b3:49:
a3:42:fa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:11:17 2025 by rpki-client