Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
File: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft (raw, json)
Hash identifier: EKpVkW1bzfYL4tZxH9ZIky9f3RtiGWg/tOI8w8/yDNI=
Subject key identifier: 55:FD:65:93:82:83:83:76:73:D5:27:30:CD:0A:96:08:96:9E:8D:9D
Authority key identifier: EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
Certificate issuer: /CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Certificate serial: 019A7149B45FE3DD20251361894ACF93529C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:00:46 +0000
Manifest this update: Tue 11 Nov 2025 05:00:46 +0000
Manifest next update: Wed 12 Nov 2025 05:00:46 +0000
Files and hashes: 1: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl (hash: m6l/bq+qekvto03NKfxL8YI1uqXhCC3+sGgucMUuxjo=)
2: qrPDrPXSwyvVn-Qdl0rfUFtGg50.roa (hash: YwVpe+VwfLyswPBaEHJ3Hi4HwV3yhmlk88pkGuhRl44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b4:5f:e3:dd:20:25:13:61:89:4a:cf:93:52:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Validity
Not Before: Nov 11 05:00:46 2025 GMT
Not After : Nov 12 05:00:46 2025 GMT
Subject: CN=55fd65938283837673d52730cd0a9608969e8d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:81:8c:65:fe:4e:8a:26:53:90:0c:02:48:9c:
aa:ac:df:c0:b2:e9:a9:ad:78:1b:c7:8e:30:d8:a3:
af:e6:ce:1c:d9:82:a0:10:dc:40:f1:bb:6b:5b:72:
d4:92:4c:81:17:eb:a6:60:cb:6e:99:7a:fc:94:14:
51:c9:f6:fb:9c:1b:b0:84:c3:eb:53:ed:46:02:2e:
26:20:ee:59:09:87:4e:8e:55:a3:0c:54:bf:14:bc:
40:b2:bf:b1:9b:fc:b7:44:3b:5e:99:9b:9b:4e:bb:
24:e7:55:c8:b6:3f:8e:3c:e1:38:e7:f1:18:69:2c:
0f:34:92:e1:8a:eb:66:7c:55:48:91:e1:be:8b:81:
9f:24:fc:3f:46:2e:ca:ca:5d:a0:6f:e6:68:64:03:
b7:a3:31:21:06:66:f0:c4:78:23:95:2c:6a:7c:2c:
06:60:36:4f:8a:c0:3d:39:47:98:9b:01:20:28:11:
6c:86:ed:ec:81:ef:2a:9b:85:87:e1:74:a2:71:eb:
6a:8c:61:c2:ae:df:58:02:ec:67:58:9a:5c:1e:56:
c2:88:6d:82:5b:b2:c2:56:aa:1a:1c:62:47:69:3c:
9d:f8:53:e3:32:b6:ce:cc:d9:38:bb:c2:5d:43:88:
9d:97:c2:69:a3:0e:2b:dd:7e:b2:eb:5f:eb:cc:01:
99:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FD:65:93:82:83:83:76:73:D5:27:30:CD:0A:96:08:96:9E:8D:9D
X509v3 Authority Key Identifier:
keyid:EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:05:e2:18:13:5c:1a:a8:2e:63:f6:c9:61:92:6c:c1:ee:ae:
f9:b9:04:b5:af:4e:9e:15:e5:09:54:37:1f:f4:cc:81:bb:cd:
48:f4:75:21:24:88:29:32:70:02:6f:c3:60:b3:1d:0b:30:d9:
87:77:cf:99:8a:eb:0a:8a:a7:61:04:cd:2c:58:77:09:39:9f:
9c:a3:b3:7b:25:73:45:cb:03:10:23:ee:4d:be:c9:bb:33:36:
f3:34:6b:ff:f0:3b:86:06:e1:ad:81:44:61:20:6f:53:1d:55:
0e:1d:c5:da:74:b2:4f:cc:8a:44:07:9f:32:97:e4:00:f3:a8:
63:68:64:64:d1:61:a2:c8:0f:c6:d3:7c:5f:7d:d9:83:0f:92:
dd:81:f0:f6:74:a4:a0:b8:a3:3c:64:40:0f:a3:4c:e1:f0:64:
6b:80:4f:71:70:ae:2c:e8:94:b7:75:f8:de:f9:9b:ce:ea:c2:
34:99:8f:93:b2:84:3b:c7:df:be:2e:77:f4:45:32:b8:05:3d:
e2:71:e0:bb:e8:e4:f4:09:45:b0:13:d6:dd:91:51:50:d3:8f:
67:60:83:d7:29:63:74:d1:40:a3:77:bb:27:36:ab:50:ab:f9:
99:cb:1d:11:1d:c3:a1:55:2b:64:70:d7:ed:1f:28:56:da:50:
b9:02:9e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:23 2025 by rpki-client