Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
File: _7up17hmEtT4fPFhcf-CsrRBNk0.mft (raw, json)
Hash identifier: g3x0AJwBDgdHjeOm0hU2pP+SEhZVLWk8Idqz8c3ThMU=
Subject key identifier: CF:75:F6:63:58:E5:6F:89:40:8D:65:F9:40:69:B5:DC:B6:7F:5F:C8
Authority key identifier: FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
Certificate issuer: /CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Certificate serial: 019A72263C8C0B6EA615C28E65971A162591
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 09:01:39 +0000
Manifest this update: Tue 11 Nov 2025 09:01:39 +0000
Manifest next update: Wed 12 Nov 2025 09:01:39 +0000
Files and hashes: 1: LYzc6OtaS8KV6QcG5hHmYjRMk0Y.roa (hash: fgjAjawvKdndlxTdQAycErp9wGnUNzrHaq3cdzUckXg=)
2: _7up17hmEtT4fPFhcf-CsrRBNk0.crl (hash: rPSHhabjyMeQpo6TGESznvwxVDjLPhtHWEvkmtp1Tgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:3c:8c:0b:6e:a6:15:c2:8e:65:97:1a:16:25:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbba9d7b86612d4f87cf16171ff82b2b441364d
Validity
Not Before: Nov 11 09:01:39 2025 GMT
Not After : Nov 12 09:01:39 2025 GMT
Subject: CN=cf75f66358e56f89408d65f94069b5dcb67f5fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:af:db:a3:0c:38:e2:7f:f3:f5:30:d4:58:
51:e5:f6:d4:b7:2a:ee:9e:7a:de:5d:60:c2:fe:5b:
ec:29:9b:df:8b:96:83:cd:4f:c0:09:3c:78:b4:0b:
a8:9a:52:7d:34:ec:32:0b:0a:ee:ac:7d:93:d8:05:
db:81:00:d5:9e:26:19:cf:75:c4:c4:24:3f:df:25:
ed:b3:7c:3e:30:c9:c9:b5:73:07:b5:06:80:fc:53:
84:11:2a:c4:68:c6:6b:00:66:13:c0:68:03:74:a4:
a4:77:c7:fc:a9:0f:e3:da:2a:37:03:09:15:c8:b4:
8b:eb:6c:98:0d:1c:26:5a:4a:84:4e:6f:5c:74:0c:
c0:f8:c2:15:6e:22:e0:42:1a:16:59:74:ae:52:92:
62:01:53:97:9f:58:18:a9:a1:46:10:a7:77:16:4d:
f1:fb:cc:61:46:c0:3e:9e:4b:0d:6a:71:4a:67:86:
51:56:a2:6d:41:27:70:9f:7c:a1:5e:6c:b6:04:fd:
0c:b9:41:6e:69:c1:81:a1:92:fd:16:a3:08:2d:26:
72:82:9b:b8:8b:61:e0:c0:5f:99:5d:35:07:af:cc:
d3:8a:1b:33:38:8e:65:c4:7f:9b:6c:fd:14:71:12:
7c:8d:75:a1:66:bf:ca:92:df:3f:1f:31:a8:9d:8c:
ec:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:75:F6:63:58:E5:6F:89:40:8D:65:F9:40:69:B5:DC:B6:7F:5F:C8
X509v3 Authority Key Identifier:
keyid:FF:BB:A9:D7:B8:66:12:D4:F8:7C:F1:61:71:FF:82:B2:B4:41:36:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7up17hmEtT4fPFhcf-CsrRBNk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4482f5-99d3-4d65-a6e5-68e813420ae6/1/_7up17hmEtT4fPFhcf-CsrRBNk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:dc:17:35:6b:f4:86:c4:c0:9b:22:2f:ca:fe:3e:51:66:d1:
28:97:43:17:07:b8:b4:42:36:16:35:74:ed:fd:09:51:d3:65:
f3:a2:20:49:a8:74:c1:ee:21:3a:e6:68:76:8d:09:02:83:a9:
fa:0b:50:e7:0f:52:ee:01:30:e7:b1:de:58:a5:2c:6d:ed:7a:
fe:a1:52:50:a4:01:cc:46:3f:ec:fd:58:44:50:03:20:48:3e:
bf:70:da:59:0c:2e:77:b1:16:2d:56:f2:98:d7:e7:a6:33:bf:
49:c2:0f:da:26:ed:f6:89:0a:b5:12:0f:52:f9:32:60:2d:75:
bc:62:37:12:27:a5:81:29:3f:77:42:dd:bd:3a:37:5f:37:2f:
e2:3d:1d:8f:64:be:e0:6f:88:2c:b4:b1:e7:b5:64:fc:cc:ea:
6e:63:f1:f4:fc:5e:9d:6d:98:1c:bb:9b:6c:c5:9d:6f:e2:a6:
c3:c3:0f:0b:73:05:25:55:29:f9:80:d3:7c:dd:ba:ed:6c:de:
99:43:4a:16:4e:70:49:39:1d:7d:bf:9c:0a:74:3d:91:79:d6:
04:39:b4:09:47:e2:84:cb:da:77:58:92:01:01:7e:fd:69:0a:
42:c2:b5:65:13:07:93:07:1c:45:ce:29:78:d8:b5:a3:9b:05:
eb:1d:d3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:17 2025 by rpki-client