Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
File: 7FraDckAoTyDtwrD9Yf7jC4d8DA.mft (raw, json)
Hash identifier: Hl/mm36eUvk75DN4bVsPRDXgUSwGfeAbn/3rbHidmNs=
Subject key identifier: 65:1A:8C:1F:A6:75:3D:75:05:80:FD:F6:D5:15:4F:34:3D:89:59:25
Authority key identifier: EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
Certificate issuer: /CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Certificate serial: 019A71EE8E2FC2D926D962FAF131601751D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
Manifest number: 172A
Signing time: Tue 11 Nov 2025 08:00:50 +0000
Manifest this update: Tue 11 Nov 2025 08:00:50 +0000
Manifest next update: Wed 12 Nov 2025 08:00:50 +0000
Files and hashes: 1: 7FraDckAoTyDtwrD9Yf7jC4d8DA.crl (hash: 5MKApGcZ8HNvVfI3KQydHSIM59HQV3Izqep/uBf6nwI=)
2: RH-c_C366T2N_z1aBpgE1Ll4n5E.roa (hash: hwd4T2rxr91cL7njvOW+DLOJ5xoMkW8XsS2mxk5ZIks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8e:2f:c2:d9:26:d9:62:fa:f1:31:60:17:51:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Validity
Not Before: Nov 11 08:00:50 2025 GMT
Not After : Nov 12 08:00:50 2025 GMT
Subject: CN=651a8c1fa6753d750580fdf6d5154f343d895925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:b0:1c:4a:bd:ee:bf:01:76:c2:f2:bf:db:
9a:e7:7a:51:82:4b:78:68:e2:a3:03:27:ee:96:e4:
bc:47:a1:2a:55:b5:fb:f2:05:13:d0:18:55:ce:b3:
c8:34:f8:51:ec:34:72:5d:1c:fc:04:a9:5e:4c:10:
e2:35:c0:8b:48:75:8a:67:7e:32:63:63:02:5c:07:
5c:e8:84:b8:1a:a4:a1:3b:68:17:f5:b4:9f:ff:b7:
ed:ec:c7:9a:83:6b:67:3e:59:c9:78:ee:2f:b2:56:
26:7f:1f:2d:9d:eb:f5:a3:cb:66:c3:e7:a8:f6:cf:
ea:24:61:83:f7:7d:19:50:21:e0:cc:d8:24:b8:2a:
a2:95:5f:f6:57:85:84:9e:38:40:46:cf:aa:46:68:
cd:f1:ce:b5:50:47:a2:0a:a6:b5:85:8d:37:2e:d5:
e2:99:9b:f1:c6:a0:58:96:31:f2:7d:03:2b:e6:c5:
1b:b0:09:d9:da:26:d8:2d:de:93:28:b1:f2:34:9a:
2e:a4:e4:58:4c:58:88:c3:a5:25:f3:5d:12:6e:d7:
f6:bd:4d:b1:84:5d:19:83:19:41:10:c7:59:96:ce:
3e:cd:11:ba:61:7e:1b:48:33:f2:a7:52:1c:5c:c3:
24:af:6d:46:76:79:8a:2e:72:2c:f1:ff:b3:8d:67:
3e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1A:8C:1F:A6:75:3D:75:05:80:FD:F6:D5:15:4F:34:3D:89:59:25
X509v3 Authority Key Identifier:
keyid:EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:34:b3:7c:1f:ff:34:3c:a0:2b:41:fd:55:84:b1:07:4e:70:
24:15:ca:86:6e:45:39:0d:26:fb:74:26:3e:00:53:a7:dc:fd:
a4:33:9e:c3:75:6f:66:1e:91:8d:e7:35:58:cd:97:2f:bf:e9:
00:10:fd:ec:38:d1:8e:e7:84:2c:08:51:7e:a9:70:5f:01:3b:
fd:f5:e2:51:19:77:a7:1c:35:60:c6:d1:45:01:8c:4b:2d:43:
06:a2:94:6e:a2:4e:cf:27:fe:d8:3d:63:e2:ab:fd:54:04:ad:
0e:a3:75:38:02:6f:ca:37:ad:85:b0:42:f6:2a:4f:ef:79:4e:
3a:f6:45:55:06:df:eb:23:ab:5f:87:f6:ee:b2:26:5d:62:6b:
d7:1e:ec:05:3a:95:db:f1:fd:d5:86:03:cb:79:e3:c2:7f:13:
a6:a1:ab:06:a7:b4:10:04:48:d5:e2:3d:5a:41:2d:3d:55:a2:
fd:8a:6c:75:10:af:1e:9e:ee:90:b9:64:32:c9:0b:4c:4b:cf:
3c:44:ce:dd:97:a6:15:51:e6:f2:26:7f:61:3d:e2:47:f2:df:
82:75:01:37:4f:99:d7:89:e7:a5:67:ce:5d:76:d6:ba:7c:98:
2d:94:19:c6:1f:61:7b:d9:b2:12:43:72:82:27:72:3e:5a:c8:
28:ca:6b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:49 2025 by rpki-client