Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
File: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft (raw, json)
Hash identifier: GIQmihWuJu4DzxzUiUky2sRYCRlxl46N2PzD3z78R/Y=
Subject key identifier: 97:AB:2B:AD:3F:C8:61:40:B3:EA:74:CF:CC:8B:7E:A8:2F:D5:20:08
Authority key identifier: EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
Certificate issuer: /CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Certificate serial: 019A725C9675F8FCEAE259FECE3A5FC9DE53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
Manifest number: 14C2
Signing time: Tue 11 Nov 2025 10:01:01 +0000
Manifest this update: Tue 11 Nov 2025 10:01:01 +0000
Manifest next update: Wed 12 Nov 2025 10:01:01 +0000
Files and hashes: 1: 7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl (hash: r+dSPyHCTBto6caqoblJ21YI9E/BtHuWp6BhsmK2+1c=)
2: sefujDMF5lf6VBPRf5yt9NZgCbo.roa (hash: zo4oUB09XXtgt5XFY9ZeQdpiK9/oMzcXXR9HJAvXlt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:96:75:f8:fc:ea:e2:59:fe:ce:3a:5f:c9:de:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee8a95327187c30880f5bbf3c37289ee311c5920
Validity
Not Before: Nov 11 10:01:01 2025 GMT
Not After : Nov 12 10:01:01 2025 GMT
Subject: CN=97ab2bad3fc86140b3ea74cfcc8b7ea82fd52008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:06:a7:1a:6b:78:f7:82:a9:96:5c:cf:f9:2d:
07:a4:3a:26:e1:84:58:fc:23:a8:5b:26:b5:04:a2:
d9:5a:6f:e9:e4:12:03:0e:08:f6:2a:5f:09:5f:e0:
00:72:84:db:4f:af:24:a2:b5:86:22:0f:21:9c:18:
b9:ed:5c:a5:b0:a7:fc:3a:68:ae:e6:73:24:a7:ca:
80:27:ef:1c:06:23:cd:3b:7b:db:d3:68:3f:1d:36:
bd:c9:17:ef:87:95:de:c0:c5:47:c6:25:7a:65:75:
3d:30:7f:fc:f0:66:6c:1b:b2:04:95:63:99:7c:8c:
a5:f8:31:dc:b2:c0:d8:83:0f:ff:52:f1:63:01:12:
db:31:d0:a9:13:16:dd:9b:4b:53:9f:63:6c:27:06:
72:d7:8f:e8:f0:de:7f:a9:d1:51:80:6a:f5:4a:4b:
11:14:6d:19:9b:2d:60:80:38:8b:8d:7a:4f:fb:92:
7c:50:3e:e9:d5:33:1d:ca:0c:8a:f3:b6:4a:1c:6c:
cb:31:d9:f4:6b:9e:83:b4:9a:af:d8:c5:04:1e:e6:
50:b3:00:cc:f4:16:44:65:52:6c:47:d1:f6:9a:39:
d5:09:af:07:0f:8e:22:54:02:2a:fe:52:a4:7a:df:
5e:c7:d7:64:dc:8c:3a:83:d1:9e:45:16:ef:6d:1b:
dd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AB:2B:AD:3F:C8:61:40:B3:EA:74:CF:CC:8B:7E:A8:2F:D5:20:08
X509v3 Authority Key Identifier:
keyid:EE:8A:95:32:71:87:C3:08:80:F5:BB:F3:C3:72:89:EE:31:1C:59:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/bf09b7-71c4-499c-9fd6-5475135f1905/1/7oqVMnGHwwiA9bvzw3KJ7jEcWSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:41:10:52:6b:19:7c:dc:b6:d4:d4:11:d8:38:ea:5f:28:0a:
73:f7:0b:00:35:85:a9:c7:af:c2:b7:4a:b4:f1:76:ef:48:1f:
6f:bc:fe:48:e0:54:10:30:b6:43:55:54:7b:6b:31:cf:d9:d3:
40:95:ca:08:0e:af:73:fa:6a:e6:4b:a8:71:b3:da:12:d3:c4:
44:3f:c5:6b:c8:c3:5b:30:eb:f0:b1:5b:0e:2c:d0:da:95:96:
99:7e:8b:12:a5:de:fa:74:e7:f1:c1:a6:b8:86:27:61:88:81:
f9:42:3a:61:5b:a9:60:83:a0:8b:81:53:2c:5c:53:46:d0:c5:
0d:8f:85:37:d7:41:a4:38:ad:61:9f:67:c8:d2:8d:93:f4:9d:
ad:79:fa:a4:d4:5d:cc:35:1e:ab:1a:4d:ed:cc:3f:d9:c8:2e:
3d:8c:38:d6:0e:52:c5:0c:45:d6:2b:93:10:a8:e4:97:b2:f8:
31:a4:96:49:69:19:dd:7f:ae:99:29:82:68:c0:8a:39:03:8b:
a3:83:7c:33:8b:3b:c4:1a:2e:73:a7:ad:5a:20:a1:a2:2c:1a:
2b:2d:9f:b6:13:c8:ca:56:d5:b8:7e:a2:64:85:28:7c:fc:fc:
c6:00:32:4d:54:20:54:d9:34:bc:a9:b9:a5:f0:d9:57:69:84:
d5:e4:fa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:29 2025 by rpki-client