Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
File: c7vCE8b5C9jwBxOerm_gyvpDXs4.mft (raw, json)
Hash identifier: t28LCVBwPXXWPpop3hwiYyuJlRskQeGCss+d9CGZFWg=
Subject key identifier: B4:90:B5:C9:D5:6F:BB:5F:62:D9:1B:6E:43:54:F5:DD:0E:6A:CD:3B
Authority key identifier: 73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
Certificate issuer: /CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Certificate serial: 019A22C057E902B6A6C1C5A9BED6D30BA737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
Manifest number: 0BA9
Signing time: Sun 26 Oct 2025 23:00:21 +0000
Manifest this update: Sun 26 Oct 2025 23:00:21 +0000
Manifest next update: Mon 27 Oct 2025 23:00:21 +0000
Files and hashes: 1: a_ivjW0ZGGTiDvZcTfc91f_pyXs.roa (hash: W9scHoBGox42TFL0zLwjs6jy/UbNIHRPLGTm7dHLpDs=)
2: c7vCE8b5C9jwBxOerm_gyvpDXs4.crl (hash: tBhrgA6Q8O7OY4NWSwpqdKwnl+WxlAwkRh2zVc6CuEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:57:e9:02:b6:a6:c1:c5:a9:be:d6:d3:0b:a7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73bbc213c6f90bd8f007139eae6fe0cafa435ece
Validity
Not Before: Oct 26 23:00:21 2025 GMT
Not After : Oct 27 23:00:21 2025 GMT
Subject: CN=b490b5c9d56fbb5f62d91b6e4354f5dd0e6acd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:43:7f:56:a7:e7:71:9f:8f:a7:0a:d1:cd:58:
3f:37:fc:27:5c:42:f3:66:dd:fb:b4:37:d6:f2:00:
16:49:2a:af:cc:82:f6:ce:0d:a4:20:09:f2:f1:59:
da:52:fe:e4:dc:f5:53:96:f7:de:b8:88:0a:84:bc:
14:e4:38:07:9a:3e:3d:b9:96:10:b8:13:b3:3c:d0:
76:76:90:c7:1b:ea:07:68:33:42:b7:fa:be:2b:9d:
b2:71:b8:16:ba:f1:e4:98:57:ca:bb:62:14:a6:ec:
00:62:dc:6e:1f:7a:cf:9b:f9:2e:c4:ec:8d:7f:06:
56:38:2f:33:d3:78:c5:48:71:cb:89:6d:f6:9d:51:
af:45:5c:29:d8:3e:46:78:d0:ab:85:3d:d7:47:69:
8c:e7:6f:05:03:69:34:60:30:f6:1a:b4:08:9f:27:
23:d9:59:19:ba:a8:cb:51:f0:1c:7f:a9:c0:fc:b6:
66:21:1f:9a:54:96:d3:75:33:d5:33:33:ea:44:e5:
db:e8:31:96:d3:4f:6e:67:be:15:36:83:7c:6b:6f:
dc:14:73:38:4b:f1:fe:50:0f:98:17:99:cd:9a:52:
3e:50:60:40:82:03:fe:ad:fb:01:5c:f8:27:01:74:
18:0c:74:4b:ca:f4:25:4e:4b:47:54:27:ee:bd:cb:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:90:B5:C9:D5:6F:BB:5F:62:D9:1B:6E:43:54:F5:DD:0E:6A:CD:3B
X509v3 Authority Key Identifier:
keyid:73:BB:C2:13:C6:F9:0B:D8:F0:07:13:9E:AE:6F:E0:CA:FA:43:5E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7vCE8b5C9jwBxOerm_gyvpDXs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7a160e-a56d-41c8-8930-95817ee944ce/1/c7vCE8b5C9jwBxOerm_gyvpDXs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:02:52:6c:ec:7c:7a:8a:d1:b6:d5:f2:3b:b8:e7:ae:29:c6:
9c:b1:b8:6f:6b:41:c0:43:3a:fc:3f:74:76:bb:f0:c8:13:c2:
cc:19:44:b6:ad:46:97:15:b8:9e:82:25:8c:57:60:71:c8:1b:
18:b1:ed:16:73:ad:e7:62:87:bd:cd:6c:93:6e:0c:b0:3e:ea:
76:97:9b:fd:e3:da:4c:88:57:ed:08:cf:eb:f0:bd:0b:19:ba:
ac:f3:c6:e3:46:92:74:b6:30:67:6d:5d:11:67:74:0f:e1:e7:
a9:1e:4c:87:c5:52:4b:40:7e:5d:c2:30:1b:e6:ee:4f:97:b5:
63:9c:2e:e4:12:b7:97:74:ee:a1:21:95:49:f6:4f:49:e8:d7:
f5:48:f1:e6:95:e5:f8:4a:3f:99:d3:61:cb:1e:bb:89:25:c9:
bf:8b:ac:1f:88:4f:e3:17:a8:0f:df:f5:ae:b5:a0:bc:7c:3c:
e0:5c:53:86:10:67:e9:2b:82:72:8d:84:49:c0:c2:eb:ac:7f:
26:b3:bd:21:e4:52:d5:69:de:c3:c8:77:4b:68:09:81:23:62:
aa:90:4a:e9:ac:7c:d5:4b:69:32:5c:f2:ce:39:bf:ce:44:b4:
99:84:70:ea:1f:d0:c1:88:45:21:56:85:09:85:3b:92:1d:25:
17:81:a8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:00:03 2025 by rpki-client