Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.mft
File: SeUU57fWfZM3ObUWHT1iTzwjmvk.mft (raw, json)
Hash identifier: jKIL8QmxBV1yDwzTdLUMMKFInSKfNvilNJhCzY9cFWY=
Subject key identifier: EA:C6:ED:96:32:BE:4C:2E:49:18:06:D8:09:7B:86:CF:C6:A5:F3:93
Authority key identifier: 49:E5:14:E7:B7:D6:7D:93:37:39:B5:16:1D:3D:62:4F:3C:23:9A:F9
Certificate issuer: /CN=49e514e7b7d67d933739b5161d3d624f3c239af9
Certificate serial: 019A7149CF35405B745C6725BAD3946BB85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUU57fWfZM3ObUWHT1iTzwjmvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.mft
Manifest number: 7C
Signing time: Tue 11 Nov 2025 05:00:53 +0000
Manifest this update: Tue 11 Nov 2025 05:00:53 +0000
Manifest next update: Wed 12 Nov 2025 05:00:53 +0000
Files and hashes: 1: 6QyQI-UDdi5VvsW7wlBSbMul1zE.roa (hash: y5T4O4QEdcHKwszAqbm3ZgBGBRWTXgNEu9vHIrgVcwo=)
2: SeUU57fWfZM3ObUWHT1iTzwjmvk.crl (hash: zzUIJZf9k4i+0lSwfp+TjXEuNx7fVMw9aqg/aKT4af0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUU57fWfZM3ObUWHT1iTzwjmvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:cf:35:40:5b:74:5c:67:25:ba:d3:94:6b:b8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e514e7b7d67d933739b5161d3d624f3c239af9
Validity
Not Before: Nov 11 05:00:53 2025 GMT
Not After : Nov 12 05:00:53 2025 GMT
Subject: CN=eac6ed9632be4c2e491806d8097b86cfc6a5f393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:dd:c4:0a:d3:26:1b:c3:51:4b:b4:9b:18:23:
1e:a2:4c:31:5c:4e:fb:90:e2:d3:6f:4b:e2:c9:01:
d4:87:fe:66:bd:e8:8f:4a:95:7a:f7:0c:d8:83:b1:
87:e4:4c:9b:f6:2c:a3:24:89:e0:bc:ec:c0:fe:58:
f6:41:c6:f9:c5:90:a6:5e:74:72:48:f3:29:9b:83:
76:ff:78:41:eb:c0:5a:bd:96:81:23:66:22:62:9e:
05:13:22:5a:29:cf:0b:e6:ef:df:58:9c:bb:81:f8:
92:1e:fe:93:56:73:cb:0e:2e:c9:e4:dc:ab:e4:f1:
a4:89:af:40:9d:d0:ec:51:2a:43:90:4e:fb:09:e9:
2e:47:e0:5f:50:a8:9f:de:d8:b8:9e:06:d3:1f:bb:
c4:48:99:fa:82:37:65:24:0f:87:0d:5a:92:d0:9e:
84:63:03:a9:30:49:76:bd:7c:d4:b9:d3:cd:4e:6c:
2c:4e:d1:b2:54:30:00:89:0d:8d:45:f0:48:a2:ac:
38:f6:63:3c:31:0d:ca:20:23:1f:4b:a0:e4:f9:6e:
17:fa:e5:d7:d9:56:c6:eb:47:f9:2b:22:ad:ac:93:
ee:ec:fd:14:db:46:86:d3:8a:83:26:03:bc:1c:c2:
46:93:f8:36:63:fc:4c:f0:7d:06:a9:ea:c2:75:12:
a9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C6:ED:96:32:BE:4C:2E:49:18:06:D8:09:7B:86:CF:C6:A5:F3:93
X509v3 Authority Key Identifier:
keyid:49:E5:14:E7:B7:D6:7D:93:37:39:B5:16:1D:3D:62:4F:3C:23:9A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUU57fWfZM3ObUWHT1iTzwjmvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b7b72-741d-4b50-8652-27ee63ad1f9f/1/SeUU57fWfZM3ObUWHT1iTzwjmvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6c:44:40:9b:05:3a:fb:34:6e:d0:a9:37:b1:86:0d:d1:ab:
52:e3:40:89:63:ee:96:38:ad:e3:9f:e3:35:a9:20:b9:55:de:
62:60:3b:8c:80:a8:e6:b4:22:13:42:56:9d:4d:40:5f:df:08:
25:72:bf:8e:4f:2c:d7:ed:09:de:db:34:91:84:14:25:f9:ce:
81:ca:bd:59:28:08:bc:0b:75:d6:99:52:1a:50:fe:b2:55:ae:
f1:36:6e:62:71:f2:27:96:45:e7:4b:b1:06:85:13:79:ae:1e:
9f:0e:d6:3f:e8:53:39:0e:76:3e:fa:55:17:ac:0e:25:79:3f:
0f:4a:7b:bc:77:eb:d7:c9:91:18:69:a9:90:3e:29:4e:97:2e:
85:17:f4:04:ce:2f:61:ee:68:00:b6:a1:d9:b6:d7:02:aa:11:
91:5b:ed:83:e4:54:48:af:8d:d8:e3:76:1a:0f:54:88:6d:7f:
29:08:09:cf:36:23:f6:cb:77:7d:0e:41:92:63:2a:da:43:9e:
39:71:8c:d2:2c:c0:ff:8c:d7:ad:3a:fe:16:f1:d2:c7:33:e5:
d3:fc:7d:4b:31:da:6e:40:df:e6:d0:9d:fc:fb:94:6f:f8:eb:
02:70:62:9f:6b:0b:df:45:2d:7e:3a:f7:84:03:2a:c8:29:68:
4d:9b:ce:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:16 2025 by rpki-client