Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
File: 7jd-2foR7BmVVVl2LeBHpabrFKg.mft (raw, json)
Hash identifier: cgfKZXrbskQvi/TJWRKQkYEASx1iepUHLdMSkiTr1gE=
Subject key identifier: F0:04:5B:64:19:FA:31:08:0E:14:99:44:D9:ED:4F:BA:4F:78:2E:8D
Authority key identifier: EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
Certificate issuer: /CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Certificate serial: 019A71B78700B08D6B521F0E701D227C8275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
Manifest number: 0CB8
Signing time: Tue 11 Nov 2025 07:00:44 +0000
Manifest this update: Tue 11 Nov 2025 07:00:44 +0000
Manifest next update: Wed 12 Nov 2025 07:00:44 +0000
Files and hashes: 1: 7jd-2foR7BmVVVl2LeBHpabrFKg.crl (hash: tiFtffWtkFTRoKL4L7U+xVsYE3ZjZX/zWz1FMjjYfnM=)
2: Ypkv0Dz3MT0Yx1rzRPlqN8ybhig.roa (hash: 5FSjbaTtR9k8SDOj/2LjE1uuErnl+zHIrGSKMQg96EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:87:00:b0:8d:6b:52:1f:0e:70:1d:22:7c:82:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee377ed9fa11ec19955559762de047a5a6eb14a8
Validity
Not Before: Nov 11 07:00:44 2025 GMT
Not After : Nov 12 07:00:44 2025 GMT
Subject: CN=f0045b6419fa31080e149944d9ed4fba4f782e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4b:13:5d:d2:f9:8b:d4:0b:37:1f:05:5c:46:
f9:72:9c:b6:43:8f:94:7b:ba:07:00:26:6a:55:e8:
3f:8b:f8:3f:28:81:85:4e:17:0e:2b:59:e8:77:9c:
de:69:39:0a:a5:45:4e:2b:39:a1:7c:84:b9:d2:84:
69:9f:c7:52:1a:16:ac:9e:fc:2a:85:cd:db:be:b0:
dc:b0:42:ef:99:cd:67:ac:80:68:60:c3:44:4b:9e:
a3:14:37:18:9c:f5:53:2e:d3:8b:5e:c8:71:4a:a5:
f5:c8:9e:f8:6e:b4:e7:7a:af:15:ad:8e:04:2b:b9:
78:85:c5:3a:41:3b:6b:00:15:b4:cb:58:9e:2e:04:
d7:ec:53:08:e9:12:6d:c8:6b:b4:61:4b:45:67:f3:
4a:97:b3:e6:39:c2:fa:bd:2b:c4:4f:c8:23:2a:5a:
fc:f1:25:00:db:21:df:58:df:94:c2:e5:c1:4c:a1:
9d:79:fc:9d:02:10:2d:83:c4:69:99:89:0b:bd:c8:
a6:33:01:26:53:b0:a2:b8:45:6e:e3:de:93:2c:10:
f0:45:fe:5c:ce:b9:3e:0a:f2:8a:52:1b:76:a6:15:
b8:51:b7:28:ef:fa:fb:9d:bb:0c:f2:69:15:26:85:
d4:2d:53:9b:1c:81:45:59:e7:6d:d7:e4:0d:59:1f:
e1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:04:5B:64:19:FA:31:08:0E:14:99:44:D9:ED:4F:BA:4F:78:2E:8D
X509v3 Authority Key Identifier:
keyid:EE:37:7E:D9:FA:11:EC:19:95:55:59:76:2D:E0:47:A5:A6:EB:14:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jd-2foR7BmVVVl2LeBHpabrFKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/026896-d734-4b9a-9c33-9e71cbd4217b/1/7jd-2foR7BmVVVl2LeBHpabrFKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:60:d8:c2:d3:59:56:34:b3:65:c0:2b:01:e4:f1:10:88:d7:
f1:87:41:68:0a:02:98:7d:af:31:38:86:b2:6c:6c:7c:8b:69:
02:e3:d9:dc:90:14:e7:dd:c1:1e:67:93:65:7f:ff:9c:fd:f6:
d0:69:03:a9:6d:1c:73:2e:bc:60:59:6b:65:19:ff:0c:11:d7:
6d:01:c8:d9:37:ec:38:6e:da:49:54:78:8d:e0:5c:9e:57:b9:
53:45:e1:82:d4:15:cd:89:7b:a1:d9:27:87:57:b0:6e:7f:2c:
dd:05:dd:24:3d:da:42:03:7b:8a:cc:32:4a:bf:3d:85:18:c9:
47:3b:42:d2:67:38:b8:8d:69:ca:46:07:6c:e3:ff:86:98:79:
97:28:3f:b9:74:9d:82:a4:aa:35:a7:4f:ba:9c:dd:db:4e:95:
64:d8:84:e8:73:10:0d:5a:c2:f4:e9:78:c4:02:ab:9a:6f:08:
e3:49:d0:ab:d8:9c:ce:95:44:53:be:f5:1f:cd:f6:d1:c4:a6:
f1:a5:74:be:4b:0c:9d:e6:44:9a:2a:74:34:a4:77:3a:15:ba:
8b:16:79:5b:87:5c:a6:b3:3c:fa:c6:69:bd:37:8b:53:28:f1:
4b:35:7a:5a:15:ae:5a:68:f1:65:c7:2c:d0:2e:32:3d:52:52:
19:d0:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:47 2025 by rpki-client