Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
File: h7PLLW-2jm7bhEL-sKv8la61sVc.mft (raw, json)
Hash identifier: nPfz6Vcm8KBFN9Gt4WOiao9Ve2n8WaYsB7CpVv+uTYE=
Subject key identifier: 39:B8:A7:0C:24:6D:8B:A5:EE:E4:C7:4F:0F:D3:E2:53:CD:ED:ED:2A
Authority key identifier: 87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
Certificate issuer: /CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Certificate serial: 019A71EEE382DB1A5A0A8391CE4694E7BE01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
Manifest number: 0647
Signing time: Tue 11 Nov 2025 08:01:12 +0000
Manifest this update: Tue 11 Nov 2025 08:01:12 +0000
Manifest next update: Wed 12 Nov 2025 08:01:12 +0000
Files and hashes: 1: h7PLLW-2jm7bhEL-sKv8la61sVc.crl (hash: c//OcHQAyCaTPhss7vp88ZyhJ3I22WVUQNPRWIQTGzA=)
2: qK0r22fc4dStcfs-iJMEOqc-e8I.roa (hash: szAPsZBmBxrbRZJWId/rghs7S63YVBb1wXhPcGatKBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e3:82:db:1a:5a:0a:83:91:ce:46:94:e7:be:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b3cb2d6fb68e6edb8442feb0abfc95aeb5b157
Validity
Not Before: Nov 11 08:01:12 2025 GMT
Not After : Nov 12 08:01:12 2025 GMT
Subject: CN=39b8a70c246d8ba5eee4c74f0fd3e253cdeded2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5a:48:1d:ab:71:df:11:12:27:cb:44:08:a5:
82:4a:a4:98:28:e2:92:f9:dd:d0:52:c1:1a:be:4b:
69:31:a8:e3:74:e5:e2:cf:74:8e:31:23:f4:59:08:
db:b9:00:57:45:36:ea:f4:94:c8:23:be:2f:fb:1b:
cf:a2:44:c6:92:66:52:d0:96:ad:cc:2a:21:59:0e:
44:ce:a1:a4:89:17:36:81:e4:c2:0c:c1:e8:3c:0d:
23:54:49:a9:71:ed:4d:cb:b9:13:95:35:98:9c:d2:
bc:a6:9b:9e:59:1f:a9:21:3f:3f:00:c2:f0:3e:a0:
99:08:c1:9e:08:94:4e:b5:ac:09:32:6d:0c:23:b7:
68:f0:c2:e7:c8:38:c6:0a:00:63:7d:db:0a:b5:85:
33:00:90:17:b1:4c:e9:59:bd:13:98:66:f4:f3:79:
41:f5:34:de:13:d2:1b:5f:d8:2f:2d:40:0d:00:15:
28:99:b9:7f:80:81:97:93:dc:77:43:e0:b2:05:a8:
ec:25:be:54:7a:dd:ca:9c:51:cf:05:bb:5e:b9:27:
98:59:32:0d:d5:6b:8a:d8:d2:56:ce:38:50:cb:21:
b3:0e:0a:1d:0d:80:42:be:93:45:6c:ec:43:b8:a8:
7c:27:90:60:8d:c2:94:52:a1:8d:ab:c8:57:87:a3:
ad:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B8:A7:0C:24:6D:8B:A5:EE:E4:C7:4F:0F:D3:E2:53:CD:ED:ED:2A
X509v3 Authority Key Identifier:
keyid:87:B3:CB:2D:6F:B6:8E:6E:DB:84:42:FE:B0:AB:FC:95:AE:B5:B1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7PLLW-2jm7bhEL-sKv8la61sVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/99d9a6-13be-40ab-be53-b42a4c3e916b/1/h7PLLW-2jm7bhEL-sKv8la61sVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fa:c2:ec:2d:2b:20:e9:97:ba:2c:06:5c:9c:0d:ce:3a:d6:
27:49:46:4f:79:ca:74:3e:13:de:f7:11:69:49:85:b8:0a:e5:
a2:46:06:f8:ee:30:4f:1d:49:42:f4:e6:ec:bf:10:05:ed:37:
9d:2f:2c:e1:0f:8a:e8:aa:d5:37:36:c0:d6:d2:f9:01:e2:71:
46:76:09:3b:d2:6e:3c:3a:1b:3e:65:fb:fb:ec:fd:6b:7b:2f:
15:0b:8b:ab:15:75:df:bf:68:51:53:6f:15:17:27:8b:c6:c2:
4b:ab:28:c2:08:9b:da:51:cd:f5:45:b2:31:03:de:b3:3e:60:
97:21:79:41:fd:7c:ff:69:8a:b1:4a:39:ca:0d:f5:44:7c:78:
20:9f:0f:f6:0d:96:c7:e0:fc:9c:05:e5:d5:8d:54:89:8d:f1:
72:ae:4f:4f:b0:47:12:95:5b:64:b9:e6:37:fb:5f:3a:92:d0:
12:99:01:1a:23:46:d2:ad:76:94:2a:c8:59:f0:32:f3:ff:d0:
10:4c:08:01:be:7f:f5:92:a0:54:64:c6:1d:c6:db:df:30:66:
65:27:7b:cc:52:1e:f0:f6:1c:97:41:f9:13:8e:95:eb:e3:4f:
1e:8d:1c:e5:af:96:28:91:39:ce:be:31:fa:89:b7:5c:b4:3d:
d7:3d:37:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:54:03 2025 by rpki-client