Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
File: R-7_wnFGJLkjfa3lP70kQfQZKsc.mft (raw, json)
Hash identifier: aZIX01zO6WychiPvHuTijkZroLar5OMf7FEZftI6FY8=
Subject key identifier: 6E:8F:9C:88:1E:30:EF:AA:1D:21:36:F6:C0:6C:50:AF:DB:9B:3D:EE
Authority key identifier: 47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
Certificate issuer: /CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Certificate serial: 019A71EE5BC301755935D56F24785E2816A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
Manifest number: 06BC
Signing time: Tue 11 Nov 2025 08:00:37 +0000
Manifest this update: Tue 11 Nov 2025 08:00:37 +0000
Manifest next update: Wed 12 Nov 2025 08:00:37 +0000
Files and hashes: 1: R-7_wnFGJLkjfa3lP70kQfQZKsc.crl (hash: 0jFxVXVmtZd37fbSJNJ7rjh8H8cl+QvwfwgBX8Zu7mE=)
2: b0DuHL5Cx5oz0wmVPh9cLl0pYOs.roa (hash: 0vfXcmcuR2v9A+x1r5OGZhYbvc69ht+h4cnEKv+PZSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:5b:c3:01:75:59:35:d5:6f:24:78:5e:28:16:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Validity
Not Before: Nov 11 08:00:37 2025 GMT
Not After : Nov 12 08:00:37 2025 GMT
Subject: CN=6e8f9c881e30efaa1d2136f6c06c50afdb9b3dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:dd:a8:63:00:78:81:cb:0c:96:92:d5:2f:
49:cc:5b:10:28:28:1a:5b:75:6f:fa:ba:ce:35:97:
45:a1:29:f6:6e:4c:39:04:84:4c:4e:1a:3d:46:cb:
f1:29:60:c7:46:2f:70:50:3e:0c:ce:b0:dc:57:09:
65:b2:c8:ed:32:17:b9:32:23:18:ce:ae:da:13:8f:
56:c0:44:07:9d:6b:51:6d:d7:c8:b1:16:49:53:e8:
96:56:21:2f:98:9f:dc:a0:4a:02:be:b6:ed:1d:1f:
9d:45:3d:e9:a3:49:1d:61:e4:c8:6d:fb:f3:10:fe:
41:98:f4:f3:8a:75:3e:b5:48:6e:e1:41:49:c7:1c:
21:85:94:f3:56:6a:6f:3f:2c:78:38:c9:7e:99:8c:
63:4d:85:cd:49:67:95:17:a0:0d:ce:c4:f4:f8:62:
a2:f1:02:9c:d0:1f:62:ff:df:e9:df:22:cc:9b:de:
09:e5:a3:44:16:7a:e2:c7:e0:6a:1d:f9:ee:56:5b:
85:f4:3a:4d:c5:88:ee:99:3e:dd:7b:23:a2:38:5f:
b7:13:02:9e:d9:56:07:04:c5:3d:ba:c1:75:61:1c:
4c:4f:22:1f:b8:36:00:85:23:10:76:63:a3:16:bb:
26:5d:d0:32:b7:67:6a:f2:ae:91:db:90:e8:36:bd:
a4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8F:9C:88:1E:30:EF:AA:1D:21:36:F6:C0:6C:50:AF:DB:9B:3D:EE
X509v3 Authority Key Identifier:
keyid:47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:aa:7f:83:76:76:f8:76:26:f4:06:64:76:78:d1:e4:b9:b2:
37:51:1d:1a:7c:94:41:a8:9a:a7:af:b1:9f:ee:e3:d5:13:e5:
dd:9d:62:3c:8e:c9:19:e1:40:17:ab:94:6e:17:6f:c8:e9:04:
e5:e7:63:52:51:20:60:f9:25:68:8f:75:e7:88:2f:5a:ac:e3:
89:3f:80:7d:97:31:9a:ba:be:7e:65:c7:45:20:38:6e:90:e9:
59:41:aa:44:82:f5:61:cc:46:d8:21:2c:ac:58:1e:90:91:33:
c6:d0:23:5f:fe:e9:4f:cb:92:9b:ae:15:89:99:ce:70:0c:09:
3e:b3:70:b9:40:a0:50:78:9c:fa:f1:34:79:b7:c2:22:e6:44:
3b:ee:a8:d5:78:ee:80:23:b3:af:45:e7:c1:59:cb:a5:b7:b8:
81:5a:5d:b7:a3:75:5b:aa:47:1b:17:2b:b4:f7:0b:68:9d:a2:
69:39:fe:d7:51:86:79:40:d9:5f:2a:e9:b7:ee:36:23:09:b0:
38:7b:50:af:33:21:ad:ac:26:52:66:55:8c:59:19:15:97:da:
7f:d3:60:88:88:84:be:c6:f2:de:13:f5:a4:3c:75:1a:02:e9:
1d:fa:28:93:3f:69:72:ba:9c:70:14:62:f7:21:83:39:4d:00:
3d:56:df:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:58 2025 by rpki-client