Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
File: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft (raw, json)
Hash identifier: IgAxmTNa42JupXxkcJAanKbOveIfDCpT5jts1uncpiI=
Subject key identifier: A9:F8:84:63:C6:0A:FD:7C:B5:C9:C4:5A:2B:97:FB:3B:FE:E5:7D:75
Authority key identifier: EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
Certificate issuer: /CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Certificate serial: 019A71B8E4856F5FE61ACF7A7D0260338E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
Manifest number: 1469
Signing time: Tue 11 Nov 2025 07:02:13 +0000
Manifest this update: Tue 11 Nov 2025 07:02:13 +0000
Manifest next update: Wed 12 Nov 2025 07:02:13 +0000
Files and hashes: 1: 7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl (hash: 3pNbYPJuxCcdi1hT4miuuKG8REdWxYzT7HgxPQwnXYk=)
2: RFaAPpt9TXRuZiSBVJ4x95FnZpg.roa (hash: r/BjBoSYQEd6zQy913IAV7pMwCR1j9bdd+qgN4vkxf4=)
3: mw-NfFERPD2qaYVgEjUcNQ0zcPs.roa (hash: AZitnGA9oKjnHTuxpFFMdyJwJocQCVTArIP5ASVi2R0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e4:85:6f:5f:e6:1a:cf:7a:7d:02:60:33:8e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec757603b171af34e1c6231e5e82e77f2d589db9
Validity
Not Before: Nov 11 07:02:13 2025 GMT
Not After : Nov 12 07:02:13 2025 GMT
Subject: CN=a9f88463c60afd7cb5c9c45a2b97fb3bfee57d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:c6:38:78:cd:a3:07:e9:76:41:99:75:14:
12:63:6a:4f:b8:75:c3:85:df:13:2d:e1:11:af:18:
4d:99:e6:02:9d:9f:71:fa:1c:a7:10:6c:c4:2f:d7:
fd:cf:60:d6:1b:05:fa:ca:b5:1e:18:5c:3c:8e:07:
a0:30:d0:72:ae:26:26:3c:69:67:a9:db:e6:e6:95:
59:13:f3:4a:b6:f3:2d:64:37:b3:f4:b1:12:0a:05:
38:f7:b1:15:1b:10:ff:a4:74:2d:48:40:00:84:63:
d9:8b:7b:d8:db:4c:0b:bd:3d:0e:be:54:f8:24:f6:
1d:59:87:08:86:d7:d8:1f:18:37:e3:7d:69:8f:94:
75:a5:3c:a0:5b:ed:a8:79:9b:e2:3a:35:60:58:95:
6c:09:00:ac:f8:d7:0f:af:fd:45:b0:61:ef:d8:14:
10:88:45:1f:35:64:4d:5a:ad:0e:12:c4:0d:c3:45:
02:3d:73:b4:4f:01:67:3c:50:2b:f5:a7:d9:b5:36:
39:e8:7e:64:19:04:d4:8c:16:9c:8a:36:2a:1e:ba:
7d:b2:08:d0:fd:e5:52:81:1b:22:49:ad:4f:5f:55:
ea:1d:30:51:b1:5d:73:40:cb:f5:7b:ce:ec:0f:58:
2a:57:26:3e:21:d3:59:59:3f:80:3b:92:dd:32:83:
58:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F8:84:63:C6:0A:FD:7C:B5:C9:C4:5A:2B:97:FB:3B:FE:E5:7D:75
X509v3 Authority Key Identifier:
keyid:EC:75:76:03:B1:71:AF:34:E1:C6:23:1E:5E:82:E7:7F:2D:58:9D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HV2A7FxrzThxiMeXoLnfy1Ynbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8c37f0-af3a-4024-8043-d30cef9114b7/1/7HV2A7FxrzThxiMeXoLnfy1Ynbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:6f:96:33:38:4f:58:f8:8f:55:92:e0:07:33:36:11:39:fc:
65:4a:a3:ba:d3:2c:67:c2:0f:6c:a7:c7:7d:8a:83:ce:d9:d5:
6c:ad:e1:3c:f4:9e:49:91:e7:38:e4:93:da:6c:ee:13:6b:26:
4f:aa:a2:30:18:82:1c:82:53:9a:3e:e8:bc:89:32:ae:97:46:
38:06:44:3d:36:f3:a1:a6:64:86:f6:e5:5a:13:ea:f7:e6:a0:
0f:d8:36:e4:84:3e:78:f8:91:b0:67:33:c5:f9:b2:41:9f:b2:
11:81:98:e8:d4:96:33:74:77:7e:0e:7d:d2:b4:09:20:92:b4:
6c:6a:31:be:07:ec:00:e4:56:8e:43:19:09:65:ed:12:47:52:
84:5d:91:e0:89:68:ed:ff:f3:1d:1e:e1:02:43:ee:44:e5:dd:
4c:25:33:e4:08:78:4a:68:c2:99:10:2a:1a:cf:cf:76:cc:53:
4b:2f:09:e1:33:26:54:b5:3d:63:12:e2:36:12:71:3b:1c:73:
20:73:d0:74:2a:2a:8e:90:78:43:3f:53:a7:23:6c:d3:3e:71:
12:98:fb:92:65:2c:d3:e2:ac:23:80:79:48:42:d5:97:64:66:
0a:51:b8:c2:58:96:e0:d2:ab:97:89:97:9b:c0:9a:a2:50:b0:
33:c5:cb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:14 2025 by rpki-client