Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File: 7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier: 0nLdS7can+5JQrZZpEpPkFKZpaZ4N/Jl35XTDt27PCI=
Subject key identifier: 3E:24:D5:CF:24:95:4F:DB:CC:FE:0D:8A:85:20:D4:00:80:6F:F3:FF
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial: 019A7225F588067B2435CF4BBDF353C6971E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: JdRPM/kAEgab3tEWOE73YVooMwGGHarp2jWJ3Cf27+8=)
2: DJI5pA0yQdHfWf9YZsCq7SLW83k.roa (hash: aYlNDPO2QXpilHLu8WGoR0IYFB4fHF6uZQ2LQMfMdjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f5:88:06:7b:24:35:cf:4b:bd:f3:53:c6:97:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=3e24d5cf24954fdbccfe0d8a8520d400806ff3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:84:d6:d2:60:c8:e4:e7:a8:9f:ca:a8:11:
f1:4d:a2:17:ac:e8:41:65:d5:78:3f:e4:a0:d5:13:
d4:be:a8:82:79:92:64:0a:dd:a7:b8:1d:a2:fd:ff:
5d:76:9d:50:31:52:88:8b:45:07:61:b0:27:94:a0:
02:a8:d2:61:a5:a1:57:55:72:2e:a7:cb:62:55:8f:
f9:30:11:0c:4a:e0:db:01:d9:ee:83:b2:69:1d:df:
46:e2:22:4e:23:b6:91:b8:da:13:42:27:d4:2a:27:
35:91:a7:42:1b:13:f4:ad:ed:fe:ec:32:32:61:d1:
71:e4:e9:4a:f0:08:44:94:ba:25:49:fb:45:d5:8c:
09:78:08:d9:8f:19:15:e6:51:4f:7d:8d:c9:5f:a6:
d2:e3:29:af:ba:71:04:3f:ad:5c:29:df:a5:6a:8c:
33:43:38:53:92:1e:6a:65:04:47:78:76:91:0a:88:
60:34:d8:3c:50:29:9b:5c:73:24:5f:79:25:87:f6:
f9:77:61:4b:72:b1:18:40:e4:38:bd:40:56:9a:17:
ac:bd:3e:1d:c7:58:c2:9e:e9:84:65:c7:42:2e:3e:
75:0f:ed:94:46:53:d5:9d:7c:47:71:ed:15:3a:b4:
63:db:91:48:14:ef:47:54:a5:d6:44:32:bd:f8:43:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:24:D5:CF:24:95:4F:DB:CC:FE:0D:8A:85:20:D4:00:80:6F:F3:FF
X509v3 Authority Key Identifier:
keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:46:f7:10:ad:e8:23:1f:d6:f4:d6:c5:61:4f:19:c2:08:87:
09:4b:2e:cf:4f:42:8c:eb:79:ff:96:ad:29:ef:4c:57:5f:e3:
74:75:2d:4f:20:f4:57:e6:88:0f:b2:82:65:08:d2:10:7a:bc:
db:5e:6f:9b:4b:1f:4d:40:da:82:c6:bb:bb:2e:b9:24:14:52:
b2:70:57:58:09:3a:3e:4b:b6:6c:0a:c4:65:3c:2b:5b:57:98:
20:5f:0e:14:91:17:a3:cf:34:20:8a:65:e2:3a:aa:8a:2f:ae:
c4:df:8f:8d:aa:37:a3:c5:00:00:fb:30:9e:99:f2:ea:c8:a8:
5c:15:86:32:4a:3d:47:0e:f1:3f:e1:a3:9a:7e:fc:93:41:71:
b2:a0:04:39:ff:44:86:54:39:56:74:25:5f:40:37:76:89:49:
0d:40:c6:00:c8:40:6f:84:c5:bc:5a:ed:cc:cc:b4:d5:61:3b:
86:51:91:96:d4:b7:fe:9b:7c:fe:8f:ff:db:65:05:70:a0:36:
0c:02:5e:81:f4:96:4e:0e:67:b6:c2:2a:25:43:c1:1c:d4:d3:
60:e8:40:a4:99:63:9d:25:07:31:71:07:94:75:8e:78:7b:98:
6c:f5:b7:b9:92:52:c1:a3:47:a5:d9:c7:6c:6f:fe:a4:1f:74:
56:f3:a2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:20 2025 by rpki-client