Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
File: 7-oXe8wrDvZMq2BObmQnsa3gv2k.mft (raw, json)
Hash identifier: KftcBHZTHd2JtA2axwy2piYxOaCNFFiuQPAcJej+tWE=
Subject key identifier: 14:73:F9:8F:B1:52:DF:8E:B8:E0:34:1C:D5:89:4E:47:17:8B:BD:6A
Authority key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
Certificate issuer: /CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Certificate serial: 019A72934EC20D773DC0EF7278B3B83E4AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
Manifest number: 0F85
Signing time: Tue 11 Nov 2025 11:00:47 +0000
Manifest this update: Tue 11 Nov 2025 11:00:47 +0000
Manifest next update: Wed 12 Nov 2025 11:00:47 +0000
Files and hashes: 1: 7-oXe8wrDvZMq2BObmQnsa3gv2k.crl (hash: UsV+JfOFck+sM0oOw2jVxOr3MS82VnHJOxrToAn4j2E=)
2: BfBzjofHcSu4a3jygqfPxr7xm38.roa (hash: WZsJkNeqT7b0+zK6F4CNPynL3I93rxtNrXgK5qWCEEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4e:c2:0d:77:3d:c0:ef:72:78:b3:b8:3e:4a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Validity
Not Before: Nov 11 11:00:47 2025 GMT
Not After : Nov 12 11:00:47 2025 GMT
Subject: CN=1473f98fb152df8eb8e0341cd5894e47178bbd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d7:0c:4d:b3:a9:8f:e7:fd:09:e9:78:b3:5d:
c7:2b:22:38:7f:10:3e:fb:df:d1:39:9c:71:6e:7f:
92:a7:02:32:25:2f:88:43:6e:41:e9:06:7e:c0:78:
dc:08:eb:c2:52:69:93:f2:ab:a8:14:a4:9e:70:bc:
da:f8:fe:61:ca:5d:34:ab:18:e6:e9:62:6c:1c:df:
19:19:e4:f7:a0:f5:2e:6f:c5:d7:60:ff:6b:00:56:
ca:b6:c8:2b:25:98:6b:ab:17:80:ca:3e:87:f8:4d:
cc:a9:af:d6:61:3b:fa:dc:de:84:ca:b1:78:51:7a:
00:2b:fe:0c:0e:a6:be:9f:b8:c4:0e:0b:b0:92:55:
50:36:7e:98:9e:d8:65:5d:f1:f5:fd:be:75:f3:05:
d9:c6:e7:9b:d6:fc:6c:70:a0:3d:2b:d2:fe:1d:78:
68:76:6b:bd:1f:ba:e5:35:49:87:fb:41:cd:92:62:
e5:ce:96:c1:bf:a7:07:eb:84:29:3f:fc:14:b1:38:
b6:1d:6a:76:dc:da:d1:8a:34:fa:3c:c7:81:46:93:
ce:49:8f:d3:3c:93:07:03:ce:ff:b8:9f:8e:f9:07:
00:43:2d:ff:f1:71:33:46:71:55:ca:78:2c:52:ba:
a6:f9:6e:64:a5:a4:35:fd:b8:7c:80:9a:e2:27:20:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:73:F9:8F:B1:52:DF:8E:B8:E0:34:1C:D5:89:4E:47:17:8B:BD:6A
X509v3 Authority Key Identifier:
keyid:EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:b1:4f:1c:c4:e4:b0:86:29:67:27:45:85:aa:6b:84:ae:17:
60:c9:89:73:f4:2d:99:cc:53:76:54:ff:80:31:11:b0:8b:6b:
37:16:08:11:e3:b3:71:d8:26:3d:93:0f:11:4a:78:c9:3f:cd:
c2:aa:2f:54:a2:9f:67:5e:cb:41:d6:b0:9e:34:88:bd:de:8a:
69:da:0d:23:3d:0b:89:27:d5:c8:dd:d2:2c:f7:a9:e8:5e:08:
91:fe:c3:db:7d:11:11:37:fd:ea:2a:34:8e:0b:45:3c:5e:17:
3e:33:38:08:7e:b3:85:e2:cc:31:66:06:23:b6:b4:55:b0:ca:
5e:3e:ad:e1:e9:fe:44:64:40:03:c1:b1:7b:a2:e7:45:6d:c1:
23:b0:92:ad:35:60:f6:ee:aa:72:37:73:b5:50:b7:ee:af:f4:
84:c7:4f:e4:74:09:5d:32:f5:64:56:81:65:6f:43:56:e3:da:
9d:ea:a7:2f:67:ab:40:a0:6e:78:73:77:04:ef:e1:c3:76:ff:
c6:2e:45:14:57:10:32:a8:8b:77:ec:d9:f8:77:25:e6:02:16:
50:d7:42:da:f7:b7:b3:3f:c3:ad:5d:69:4b:c5:f6:dc:fd:a2:
b0:4e:2f:b1:4e:05:dc:6e:97:5c:03:95:f1:20:c1:a7:52:7d:
a7:3b:82:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:51 2025 by rpki-client