Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
File: 7oO8RYo2ltZS---GPl7kDwCW8Zc.mft (raw, json)
Hash identifier: oC6mDn9BJuFaOGHJPEx33oux+vrmcl0qkKZEOZRDTS0=
Subject key identifier: 2F:00:5C:BC:C9:E0:CB:15:C1:4C:FE:EE:44:26:B2:83:0C:CA:6B:0D
Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
Certificate issuer: /CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Certificate serial: 019A71B8ADB5CDBF0282799A1C3DE151D1E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:59 +0000
Manifest this update: Tue 11 Nov 2025 07:01:59 +0000
Manifest next update: Wed 12 Nov 2025 07:01:59 +0000
Files and hashes: 1: 7oO8RYo2ltZS---GPl7kDwCW8Zc.crl (hash: 8SBssSfiUUhZMm2MyApGfw7NIsOJ1Pptm3pctQxOuHc=)
2: edRcT7FMgGsyYd3xzwlL4K5C_DM.roa (hash: /Ph33995AjfxmqzcVmLLzLIpZfMtf4kmmPMMs6+m6RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ad:b5:cd:bf:02:82:79:9a:1c:3d:e1:51:d1:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Validity
Not Before: Nov 11 07:01:59 2025 GMT
Not After : Nov 12 07:01:59 2025 GMT
Subject: CN=2f005cbcc9e0cb15c14cfeee4426b2830cca6b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:2e:ed:b5:71:78:e5:bb:90:ae:d1:fa:83:
81:6d:79:f7:f7:11:64:d0:5a:d1:56:44:7b:16:bc:
b4:66:93:b2:eb:2c:5a:e7:cb:b6:9a:51:95:b9:3d:
d8:f3:0a:9d:30:07:26:02:c9:77:a9:52:6f:57:82:
db:9d:aa:af:f5:d2:2a:ce:be:e0:c4:c7:8f:29:73:
f3:0e:15:88:25:65:39:13:a6:bb:77:5d:5d:f7:93:
c1:30:26:04:ae:55:1f:c0:0d:dc:0e:40:1e:44:b7:
54:df:a5:86:cd:2a:64:57:b4:62:8f:82:89:de:2e:
43:08:db:c9:73:8d:a1:ad:cd:ee:27:42:36:d1:e2:
ca:01:15:57:f0:3d:b3:3f:9e:39:cc:44:4d:76:eb:
0e:d0:31:e8:18:a6:cf:6b:8c:3c:4f:ca:78:29:42:
71:45:8a:e1:39:90:83:af:0f:83:fe:5f:e2:2e:f8:
1f:eb:25:1e:fa:4b:81:51:96:24:1f:62:d9:76:cd:
7e:c3:9d:42:fc:d0:56:59:95:fc:31:d8:ff:a8:6b:
c7:43:9c:48:94:6b:54:4c:b2:bd:c9:b3:b8:dc:93:
66:d5:bc:8d:b1:13:63:0d:b5:88:da:27:70:81:e2:
25:7b:18:f4:8c:26:2b:b2:df:9a:bc:d0:0e:d6:e3:
28:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:00:5C:BC:C9:E0:CB:15:C1:4C:FE:EE:44:26:B2:83:0C:CA:6B:0D
X509v3 Authority Key Identifier:
keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:89:8c:01:03:c8:79:18:54:90:85:09:59:49:43:a3:67:fb:
e5:83:40:d3:3e:bc:51:11:dc:8f:c1:dd:aa:3b:77:5b:49:6e:
9e:7f:b5:44:ac:49:dc:fd:8a:66:7a:64:87:a6:46:db:24:c8:
2e:07:66:cc:51:b5:78:f7:44:94:b4:34:e3:51:f6:a2:88:1e:
cb:8b:c3:29:76:24:90:19:8c:55:82:ad:1b:4f:48:09:00:a0:
c1:9e:07:34:f8:62:4d:ef:6a:0d:2e:e3:9e:a8:90:78:f7:dc:
9e:5b:f7:f9:d6:dd:32:22:c6:95:aa:ca:d8:6d:a8:19:0a:38:
98:fd:3f:20:00:9b:52:b4:97:ea:25:ad:9b:2d:e1:3c:88:64:
96:bc:c9:0d:b5:93:68:b6:06:8e:a6:de:8e:0c:32:96:78:4f:
0c:06:d9:fb:1f:3d:b1:c0:41:81:8f:52:50:18:81:ad:ba:58:
c7:65:35:fa:e1:64:6f:9e:1a:e2:4c:c1:5a:d4:9f:f0:a0:eb:
99:6d:8a:37:7f:ec:ec:55:8b:b5:33:5f:0e:11:1a:56:62:bc:
3f:d5:bf:38:b0:14:3e:69:0f:78:f0:cc:d2:9e:f7:fa:4b:e5:
e3:c2:7b:8a:2d:d7:b0:bd:e7:a2:c0:99:6f:c7:73:92:35:21:
df:26:3c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:34 2025 by rpki-client