Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File: n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier: dqywcd8P5e7iIbn13TtZBtKW6lgoSQ34TKkXfMZyUH8=
Subject key identifier: CC:DE:C8:5F:D1:04:61:25:E0:21:17:FF:25:A7:BC:84:0B:33:E6:49
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer: /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial: 019A71B7DFD0D4442F22F7DE263C6D3941B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number: 0247
Signing time: Tue 11 Nov 2025 07:01:06 +0000
Manifest this update: Tue 11 Nov 2025 07:01:06 +0000
Manifest next update: Wed 12 Nov 2025 07:01:06 +0000
Files and hashes: 1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: K4gwbLI428qiu8CWprwXj1pHbkK85KhewCVoIjoIRHs=)
2: shgH4_EQdby9FFBN3Y5GUQj4Toc.roa (hash: +F1kGaAyVQdETpR4Si2c2G3OanhyfIaqHi8fbDMWM9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:df:d0:d4:44:2f:22:f7:de:26:3c:6d:39:41:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
Validity
Not Before: Nov 11 07:01:06 2025 GMT
Not After : Nov 12 07:01:06 2025 GMT
Subject: CN=ccdec85fd1046125e02117ff25a7bc840b33e649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c5:aa:bf:27:21:f5:f3:4e:48:b6:22:29:68:
4c:37:fe:96:e5:ba:38:1a:01:f4:d5:fa:a7:17:5b:
4c:3f:d5:76:09:d6:7a:ed:0b:15:fb:df:95:76:3a:
b4:d8:fc:b1:a2:53:a3:93:39:af:ff:f6:80:93:99:
e5:25:b8:fa:79:1d:fb:03:5b:b0:65:f7:98:80:5a:
12:11:8e:af:0b:f9:58:80:a3:0d:06:e3:8f:0b:f9:
f9:bd:f0:a3:1f:a1:8e:ff:7d:34:31:ef:d5:50:ae:
da:a2:fb:13:8e:36:bd:d8:b2:3a:a2:ee:df:a0:9c:
10:8a:f6:fe:7e:63:02:a3:8c:a8:65:23:3f:1b:de:
9f:fd:66:a5:af:2e:40:69:ec:d8:bd:a5:ca:15:72:
75:ab:9e:e7:36:df:7c:a3:f2:77:6a:8d:63:00:a0:
0b:47:d3:a1:1e:4e:9a:74:76:19:6e:0c:5e:d7:fe:
73:67:6e:dd:82:19:0f:e5:05:87:0c:d3:52:3f:a7:
0c:9c:a4:74:ce:b6:12:03:82:b8:01:b8:72:a8:6f:
c2:4e:bb:21:a1:ab:ab:f6:eb:be:cb:b5:2c:8b:db:
eb:ee:45:0a:d4:e8:48:76:95:6d:bf:84:42:27:a3:
c9:05:e9:aa:01:d7:4e:77:86:03:a5:92:f9:50:b3:
5c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:DE:C8:5F:D1:04:61:25:E0:21:17:FF:25:A7:BC:84:0B:33:E6:49
X509v3 Authority Key Identifier:
keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cc:d9:d5:64:3b:12:c9:f2:ff:7e:6f:e9:78:a7:01:0f:ef:
05:b7:51:5a:2c:4e:ae:8c:1b:39:04:63:6b:37:a2:ce:1a:f4:
4a:d8:c0:22:71:f3:54:4f:b1:de:cd:88:d0:d1:45:5c:3d:86:
c5:6d:2a:36:29:46:32:10:86:c3:cd:c4:76:1b:93:f2:4d:f5:
16:ae:48:d4:94:f6:bc:ea:1b:e0:e5:3d:b3:4a:1a:00:45:d4:
b6:bf:1f:b9:63:e3:7b:86:c7:65:20:e5:7a:76:fd:3d:a5:fd:
f2:fc:cc:96:d2:43:c6:3c:1d:85:91:84:9c:ff:8e:05:a8:30:
33:dd:2f:b8:48:a9:88:1a:05:dc:fd:80:4b:26:64:7c:d3:b8:
b8:d2:e8:f0:2d:8e:17:09:d9:4b:7a:e1:0f:59:34:61:ae:98:
cf:ea:56:b6:39:9f:ee:d5:4a:48:a7:80:49:bf:9b:69:9e:52:
0f:f0:80:31:00:a8:3d:48:1f:05:49:19:7c:b8:cd:cd:0a:3e:
b7:c2:9f:4f:49:d0:bf:88:ea:05:51:a5:7e:e5:5f:a7:aa:be:
b8:0e:33:28:56:84:81:83:ec:9d:9b:d5:d8:e8:e7:e4:92:fd:
3c:57:ca:dc:6b:12:d1:23:bd:61:43:4d:c6:e2:e2:0f:07:44:
d1:f8:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:53:04 2025 by rpki-client