Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier: cS1annqu+2ZzDMPffoiHimCe1INGtv+SUKfyqMZvhTM=
Subject key identifier: 9D:64:7A:7D:DA:4A:8F:33:29:6F:79:A0:F5:17:5A:7F:B0:CE:EE:B5
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial: 019A71EE746BE302BEEC9BABEA8C3A8689B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number: 1146
Signing time: Tue 11 Nov 2025 08:00:44 +0000
Manifest this update: Tue 11 Nov 2025 08:00:44 +0000
Manifest next update: Wed 12 Nov 2025 08:00:44 +0000
Files and hashes: 1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: cYBghGZCOc5kBRKC+ip403moh+1sqE0aPe4Bq55lxJs=)
2: KrFqFiDpj3KTLxxAsjJyiKgAjFA.roa (hash: 1PmMv3UcI9fAXjZSi6jxq86mVNekWxeQeV4OVG0h5eY=)
3: QEP4j9JVsbgw6u0dNGwjp_dEBOM.roa (hash: cfwWMXWNZBAAjCKALqzpLbct9a8WBHygXbGOplIqMXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:74:6b:e3:02:be:ec:9b:ab:ea:8c:3a:86:89:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Validity
Not Before: Nov 11 08:00:44 2025 GMT
Not After : Nov 12 08:00:44 2025 GMT
Subject: CN=9d647a7dda4a8f33296f79a0f5175a7fb0ceeeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1e:ec:a5:18:ab:79:64:34:77:75:8b:91:af:
89:91:2a:4c:5c:dc:f4:c9:21:bf:36:33:bc:15:0a:
ce:d3:b1:bd:10:70:cb:99:d4:8e:a6:5e:6e:35:19:
c8:5d:aa:96:69:8c:18:0c:da:e3:57:17:92:ac:5a:
d8:7b:75:5f:f3:20:ff:dd:ba:5e:a9:04:81:75:95:
00:7b:a2:30:3c:4b:65:33:a2:60:96:43:e7:0b:2b:
f4:99:af:7e:0f:4d:46:ef:6d:6a:0b:3e:af:d9:01:
03:ef:a1:b3:0b:1c:25:30:d1:5f:53:d1:06:cb:45:
70:57:d2:f8:04:d3:91:a9:ed:a2:d5:2c:3f:66:e9:
62:d6:a6:82:0a:d0:2a:18:60:03:8c:3b:2c:11:14:
95:aa:5f:fb:8b:a0:aa:01:0d:db:54:f1:13:cc:4d:
61:eb:14:0a:55:09:d1:7c:29:e2:ff:a1:d3:40:ab:
b7:2d:2b:4d:f6:90:61:90:c0:40:5b:df:b1:3a:8d:
e0:ff:ae:d8:01:f9:52:45:be:ea:59:97:68:8e:ed:
d1:d5:e7:5e:06:aa:44:ef:1c:ac:b6:2f:71:ee:bc:
6b:38:ce:22:95:33:97:f4:e9:16:d4:a4:d5:5c:79:
2e:38:77:fe:03:c8:af:f8:74:27:74:2a:a7:63:ef:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:64:7A:7D:DA:4A:8F:33:29:6F:79:A0:F5:17:5A:7F:B0:CE:EE:B5
X509v3 Authority Key Identifier:
keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:0e:63:e1:11:18:26:1d:7b:73:4d:22:e8:3f:72:10:6a:2a:
77:18:90:72:e8:83:96:e3:7c:48:fd:70:7b:7e:a2:a4:a7:b0:
57:30:d8:6e:0f:1c:8c:91:a6:31:57:7c:97:3c:ab:8d:34:cc:
1c:7b:de:c4:b7:3f:2b:44:90:f3:87:bd:7c:ca:8b:1c:60:a0:
da:1a:48:fb:1f:a1:34:42:7d:38:78:60:65:01:74:37:40:6e:
5d:64:13:ff:38:26:5a:07:dd:64:4e:35:77:86:e6:2a:dd:9c:
ee:78:7f:6a:64:bc:54:6e:7a:e6:f6:22:f6:d0:13:3c:e8:d8:
a5:4d:0f:a3:62:0c:32:26:e0:45:f7:f4:66:46:8e:2c:92:f5:
52:f4:b6:19:b8:c9:07:4b:4d:66:88:45:2d:20:01:35:22:08:
49:c4:17:55:26:f7:83:06:8c:fd:6d:d1:2e:f1:03:fe:2d:a1:
32:a3:4b:65:cb:c2:82:73:ef:57:3e:32:e7:16:be:60:32:e9:
a9:4b:e0:11:ef:f4:38:1a:99:ef:e2:1c:4a:4b:b7:3f:a3:80:
a6:88:09:fc:a8:76:d9:d8:bc:5a:de:62:02:80:0b:30:ac:e9:
4f:06:25:6d:c4:31:00:8f:70:8a:ec:39:50:71:f9:c4:25:9f:
be:56:92:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:15 2025 by rpki-client