Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: ACciN7gdfdtZE4iN6EgjeQ6/vdNGLD/ih//bRFR94TQ=
Subject key identifier: 6C:46:00:FF:F9:05:30:17:F5:E6:50:71:CD:0E:19:B8:33:68:BE:CC
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 019A70A50F67618E6E6855CA38C771FA68D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 0EF3
Signing time: Tue 11 Nov 2025 02:00:56 +0000
Manifest this update: Tue 11 Nov 2025 02:00:56 +0000
Manifest next update: Wed 12 Nov 2025 02:00:56 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: Zlx/gEt/4Rw7LL4Xn8cXpNzR19ixnLg2jlCu9PssUP0=)
2: LW4-Oe35V5eJKzg68ztfFqGhSFg.roa (hash: D73s/rG3IJUbtI4RHRwuGNv/eWQmd3ddtUaorKL1EVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:0f:67:61:8e:6e:68:55:ca:38:c7:71:fa:68:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Nov 11 02:00:56 2025 GMT
Not After : Nov 12 02:00:56 2025 GMT
Subject: CN=6c4600fff9053017f5e65071cd0e19b83368becc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:76:8b:2c:ec:dc:79:29:50:dc:c7:86:34:6c:
7e:cb:c4:b6:39:bd:2f:06:78:8d:5a:6a:f5:9e:29:
c6:47:31:04:ec:4e:63:d5:87:63:df:28:e8:f2:25:
08:56:d6:f6:db:c8:26:cf:3d:76:30:a3:89:b5:77:
c9:b1:23:d2:f4:64:d8:8d:5b:5d:f4:e8:74:0d:3d:
fb:26:cc:5c:5d:20:66:18:1c:50:d7:bc:57:21:00:
8d:ff:d0:a6:ff:50:8c:55:9d:ba:7b:9e:cc:75:29:
59:ad:f5:d8:e0:f9:0a:bd:c4:24:5d:8c:45:06:4e:
f2:dc:b6:c8:98:76:52:b8:2e:b9:d9:6f:1b:2e:a1:
20:e5:b7:09:9e:97:4f:2c:3f:43:cb:88:1f:f4:e3:
e4:b4:d6:08:9c:80:5f:d0:67:ae:f7:f2:06:bf:bd:
46:28:5b:72:54:2f:1b:db:62:0d:d4:62:09:57:70:
fa:9a:70:ad:b4:78:19:c9:ae:7d:73:e6:14:a4:fd:
11:db:bd:90:a7:ad:29:48:f8:41:f8:0e:a6:b5:00:
51:c7:fd:41:1b:3e:55:29:e1:9a:eb:7b:c7:c0:7d:
d8:78:7f:dc:3b:56:15:44:27:53:79:65:c9:d0:fb:
ad:98:80:58:6a:3a:1c:ac:3f:ab:85:21:d3:af:f4:
ec:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:46:00:FF:F9:05:30:17:F5:E6:50:71:CD:0E:19:B8:33:68:BE:CC
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4c:2b:a0:8a:7a:77:b1:a9:31:b9:9d:0d:90:21:8a:30:10:
99:79:2e:a6:8a:db:db:4b:6a:3e:51:40:5d:ef:9e:9d:40:f5:
7d:3c:ec:33:ac:c3:c2:5a:44:ed:58:4f:8e:6c:74:8a:2c:b3:
f1:10:a3:51:53:44:64:23:37:23:2b:8a:3f:a2:51:67:91:d4:
eb:5b:14:06:ee:08:fc:f1:3c:6e:40:e2:69:e8:11:4c:2f:0a:
26:00:5b:d4:d4:7c:fa:ec:0a:bf:ce:5d:bf:a9:91:2c:10:79:
7b:0f:54:76:36:29:e5:8a:6b:8f:12:c0:09:b1:d4:e3:ba:c8:
85:e8:60:fd:6c:0e:4a:fa:f4:dc:6f:24:78:bb:59:07:b6:a7:
b6:bd:73:c9:27:78:03:21:d7:bd:c6:e6:c6:80:fe:db:2e:36:
96:75:01:e1:06:05:62:0e:8c:68:1a:ba:0f:6b:b8:66:cb:f6:
36:55:19:96:78:16:81:c7:22:52:19:b9:99:ee:aa:fd:65:5d:
53:09:60:23:c0:7b:ea:b5:24:5c:be:bc:c9:79:7d:8b:0f:b4:
6c:d1:ad:d0:00:5a:c5:e1:33:06:5e:09:dc:c7:a9:08:6d:58:
76:40:dc:65:e2:1b:0f:e4:4c:2c:2a:16:46:f6:d2:40:e0:27:
31:31:e8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:13 2025 by rpki-client