Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
File: 7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json)
Hash identifier: +Gkq1x4HI+NuXRYqXQ6UzZXMO6k8XZ7ZIwqtrkKLMTw=
Subject key identifier: 3F:ED:A8:6E:87:B2:76:4C:8E:7C:B9:76:AF:16:A7:F2:14:7D:B3:DB
Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
Certificate issuer: /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Certificate serial: 019A7293B801CAF5C697024301D365024B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
Manifest number: 16B3
Signing time: Tue 11 Nov 2025 11:01:14 +0000
Manifest this update: Tue 11 Nov 2025 11:01:14 +0000
Manifest next update: Wed 12 Nov 2025 11:01:14 +0000
Files and hashes: 1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: 5vxm7QndF5+FRejuqy7lQZZGYQwXrfMeEnwlR9bhWkA=)
2: M845Ruk9WEAHqWqH-UFvn2XtdEI.roa (hash: 9d5WTncP2804xxZsRBfSA7+CL58Ibq4eGoAP961Gtgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:b8:01:ca:f5:c6:97:02:43:01:d3:65:02:4b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Validity
Not Before: Nov 11 11:01:14 2025 GMT
Not After : Nov 12 11:01:14 2025 GMT
Subject: CN=3feda86e87b2764c8e7cb976af16a7f2147db3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:46:c2:f0:f2:65:34:b8:a4:9c:fd:a5:63:
af:ce:19:d7:83:53:4c:2c:0c:64:f2:17:ab:47:29:
d4:38:29:b8:36:f3:26:53:19:ba:53:38:f8:ac:db:
2c:82:92:53:14:87:ff:9e:f4:99:3a:0d:2d:e5:48:
b7:38:05:b9:c2:7c:8e:f2:fc:8c:74:43:8d:08:f4:
e7:c7:84:1c:68:f6:01:e3:93:ef:1e:72:d0:eb:5a:
12:92:d7:88:da:b0:d0:69:9f:77:d6:39:70:94:d4:
18:c8:2f:a8:f8:f4:38:d0:cf:fc:3a:46:f4:82:a8:
74:e2:ab:c5:0f:f3:41:e4:75:73:10:dd:68:14:95:
4a:aa:fa:08:e4:80:9d:1a:b3:ed:a8:a5:81:25:a5:
d2:0d:ab:96:ca:13:58:0c:8f:1c:40:3c:1a:42:68:
63:18:c9:87:5e:ab:79:ef:2e:45:9d:09:83:90:62:
29:5e:c1:4c:5b:ec:33:ee:cc:2d:8f:02:d1:f5:7d:
31:a4:19:d0:e7:f0:9c:a0:cb:01:92:01:55:88:42:
76:2b:1d:96:a1:67:66:13:b4:eb:91:e9:fc:6f:94:
c2:2b:3b:21:84:05:b8:68:de:89:82:ca:46:2c:ef:
3d:d3:8f:03:48:69:9b:5e:36:03:3a:06:84:04:23:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:ED:A8:6E:87:B2:76:4C:8E:7C:B9:76:AF:16:A7:F2:14:7D:B3:DB
X509v3 Authority Key Identifier:
keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:34:56:b9:27:70:86:44:e1:79:fa:49:78:9c:a8:c4:fe:f4:
b4:1a:1f:bf:0a:d2:1e:43:57:c7:22:87:0e:0d:c6:92:3d:68:
fb:b6:8f:5f:2c:e4:5c:94:8c:0d:4f:22:8c:97:ab:4f:fe:73:
0d:1a:d4:81:00:07:36:e3:f1:c7:9a:df:7e:10:3d:62:4b:d3:
5d:8f:05:98:3d:40:18:d8:0e:a5:c3:2e:dc:f8:ac:26:c9:0d:
87:e9:11:5c:02:6f:70:9e:fe:3b:3c:e0:95:b3:21:75:5a:69:
93:d3:85:57:55:c9:41:c1:c4:d1:30:de:03:ed:b6:a1:34:f1:
a7:5c:95:6d:c3:ba:30:cb:4c:b2:86:0f:d5:ec:aa:1d:d5:5c:
5e:5f:a7:03:06:18:23:53:f7:ca:01:ca:7a:98:43:2a:46:9b:
2f:44:13:c9:83:06:9a:6a:5a:36:96:04:32:7c:58:7c:db:18:
2f:93:10:32:6c:aa:a2:81:cd:53:d4:fe:31:ff:96:c5:18:3f:
be:ab:33:b4:50:ce:ee:42:eb:96:02:5d:47:f7:e8:a8:63:16:
a0:1f:7c:12:4f:e5:02:29:b5:d3:e7:20:64:c8:05:26:e6:5f:
b4:91:cc:50:aa:0a:bd:f8:60:e7:5e:7b:a2:38:ea:40:40:01:
54:f4:c4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:45 2025 by rpki-client