Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
File: 7uQWWQWFpdNR27yh8LPKn2KreF0.mft (raw, json)
Hash identifier: nbAQTPLLpx9UeULWNF71yR7IFrVRYB6yc9qSb15/voI=
Subject key identifier: 62:40:F0:1D:C2:40:EB:65:2F:7D:12:B4:72:64:8B:3E:EC:64:9D:AA
Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
Certificate issuer: /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Certificate serial: 019A72CA743223F75ACD7D80BE2AC19FFFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
Manifest number: 1679
Signing time: Tue 11 Nov 2025 12:01:01 +0000
Manifest this update: Tue 11 Nov 2025 12:01:01 +0000
Manifest next update: Wed 12 Nov 2025 12:01:01 +0000
Files and hashes: 1: 7uQWWQWFpdNR27yh8LPKn2KreF0.crl (hash: B65TO3vEMGXyj17J3BJvGwaMRSYtv1IJ+VOXBMDpoKQ=)
2: p5y8NQAzzfGGrlu-v-vNfVyVrb0.roa (hash: kc/WazVc1v12QWHIn2ON5G/S24+0++IA58aa0ys1ptw=)
3: rlceh0z0qi4FxUGYf1S5hv84tmY.roa (hash: YCNm2JKiZX4EgTQdbPRuaICefNmNsS+Ht6wjs3LlOwQ=)
4: teWsxLl9UxMj2Kg2LV885UEXtBs.roa (hash: ZwKl0NAlGw0kpVRl3+bmWBFp/xFATu8jsyEj+n7/Y6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:74:32:23:f7:5a:cd:7d:80:be:2a:c1:9f:ff:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Validity
Not Before: Nov 11 12:01:01 2025 GMT
Not After : Nov 12 12:01:01 2025 GMT
Subject: CN=6240f01dc240eb652f7d12b472648b3eec649daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:89:ea:b5:2e:7d:0a:e1:75:f0:89:3f:29:f4:
a3:d9:bf:49:43:6e:df:c8:27:62:64:d9:4f:12:1b:
fa:5e:36:5b:8b:73:18:75:0b:ba:c3:89:ac:70:b4:
fe:99:0f:f3:c2:cd:19:b1:38:00:2b:04:25:6d:5c:
de:c7:a0:9f:60:4d:5d:03:be:00:0c:77:4d:6d:75:
06:bd:3a:bc:7e:a0:ae:4e:be:9b:e7:15:62:8d:e8:
b0:7b:31:1a:52:a0:6c:7b:2d:7c:04:93:9e:9b:04:
e6:9a:da:fe:40:9a:38:ad:49:f2:26:65:e5:f7:90:
33:39:60:63:c7:8e:29:c1:1c:57:dd:3a:54:23:d1:
33:2c:b0:a5:c9:cd:2e:4f:de:c2:fe:05:cc:52:1b:
a9:ee:90:db:57:57:73:14:45:cf:b5:a6:2d:bb:80:
43:f5:41:45:aa:22:f9:66:24:b4:78:0d:a0:98:a7:
20:3e:47:94:a4:64:81:e8:e8:3a:ab:d2:5b:b8:2d:
f0:73:81:ae:7f:cd:20:3b:3c:f6:e5:57:50:03:45:
3d:be:de:f9:bc:b9:f5:a8:a1:6a:85:74:1f:ba:7d:
62:91:02:a8:12:7b:3a:63:51:a7:57:3c:87:b7:3d:
63:ea:25:46:fa:7a:f9:15:28:16:eb:44:2c:6c:95:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:40:F0:1D:C2:40:EB:65:2F:7D:12:B4:72:64:8B:3E:EC:64:9D:AA
X509v3 Authority Key Identifier:
keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:41:ed:72:4a:d5:1f:66:cd:7b:20:38:7a:f7:61:86:c0:37:
bf:dc:46:31:32:22:4c:c8:a6:82:10:32:f1:99:a9:0b:fb:cf:
3b:36:04:55:cb:c7:8c:91:7d:28:39:7b:01:1e:74:7b:5d:c5:
57:70:93:e2:74:2f:5c:d7:32:ed:b2:95:a0:41:a5:5f:cb:49:
56:d3:50:13:e8:ad:4d:86:2c:28:6d:86:d3:e8:78:45:8f:c7:
9e:e5:ba:ef:7d:3f:bc:c7:0c:08:aa:5b:87:bb:6b:7b:82:35:
ba:b7:ef:02:31:e4:33:87:6f:5a:e8:97:6c:53:fc:0e:31:d5:
f2:11:99:49:2a:ac:8a:96:e7:56:47:74:22:23:6c:6c:12:60:
eb:12:3b:5d:a5:4c:dc:ab:31:a3:9c:eb:43:eb:a1:87:a8:00:
44:d4:a3:0c:42:80:17:6f:71:d5:c4:21:e3:1e:7a:79:fc:c8:
28:a8:e9:ec:7a:02:8d:04:73:53:86:98:05:0c:b7:4a:39:15:
4e:15:cc:1a:9a:af:ec:78:fd:59:ee:b1:0f:50:27:75:77:4b:
8d:81:f7:b0:52:e1:8e:55:01:d7:79:7a:9c:a9:ee:e6:d7:5e:
9b:40:06:90:bb:47:64:18:80:97:09:77:cc:30:03:9a:a3:dc:
72:f2:75:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:37 2025 by rpki-client