Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
File: 7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json)
Hash identifier: fQEPRAoT6OrIbbH6RpReccU5BvMMZJVhrS8QSAHnDuY=
Subject key identifier: CA:63:A6:EB:6B:54:89:7B:13:28:0D:A5:02:51:5E:83:FD:00:51:F2
Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
Certificate issuer: /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Certificate serial: 019A7149D6B33EF9324AC0C856038445EB94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
Manifest number: 113F
Signing time: Tue 11 Nov 2025 05:00:55 +0000
Manifest this update: Tue 11 Nov 2025 05:00:55 +0000
Manifest next update: Wed 12 Nov 2025 05:00:55 +0000
Files and hashes: 1: 0YnoXFsLC3L8LFSSyo3TEM6ihxM.roa (hash: 1mt7G/fO9VBU7/suzQGIUYMupKdv6yImTUBwyXrv1sk=)
2: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: Vz+5waaWxRUUSQw/YfuavwZ2IsUCMr7bMKwu6qOvhv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d6:b3:3e:f9:32:4a:c0:c8:56:03:84:45:eb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Validity
Not Before: Nov 11 05:00:55 2025 GMT
Not After : Nov 12 05:00:55 2025 GMT
Subject: CN=ca63a6eb6b54897b13280da502515e83fd0051f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:84:f7:97:7d:be:36:9c:b0:45:02:e0:f3:f3:
45:9f:e0:bb:51:fc:f1:7b:18:00:08:1a:84:a2:e9:
83:7c:4f:96:4a:88:6a:8f:2a:ea:ad:69:f6:03:09:
59:bc:3b:08:09:d9:d0:25:db:5d:9f:b6:f4:df:5a:
4e:b7:ea:13:eb:9f:36:06:57:18:2f:80:8f:c3:74:
9f:38:6b:7b:32:3b:e9:54:ce:6c:ba:8d:9e:9d:ec:
e4:62:45:18:fa:25:70:8d:cf:db:57:05:62:c6:d4:
bb:1a:ba:73:a7:4a:b2:52:38:68:56:46:19:68:ce:
9d:51:c4:cb:5a:d9:af:91:27:c6:ac:49:3f:5c:02:
ff:c5:79:de:95:79:3f:4e:f6:8d:0c:17:6b:14:1b:
8c:d3:c3:53:b3:f5:96:c4:e9:f1:47:66:0a:f7:59:
b1:10:dd:2f:ba:21:69:71:7f:cf:33:02:62:8d:a5:
19:2d:00:14:14:f4:d9:8d:7e:f1:64:d1:11:70:e1:
db:67:f1:15:da:b6:97:43:b1:5f:1a:33:18:0e:90:
99:66:77:40:6d:17:be:65:00:c3:d3:ce:9c:f3:6e:
4c:63:20:34:cf:85:3e:84:c1:f9:f3:80:f7:48:3b:
cd:c8:f4:4b:20:8f:a6:90:48:d7:56:88:60:cd:55:
a5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:63:A6:EB:6B:54:89:7B:13:28:0D:A5:02:51:5E:83:FD:00:51:F2
X509v3 Authority Key Identifier:
keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0e:f9:0e:fb:d6:26:19:1d:15:25:ed:db:a8:17:1c:bf:c8:
cd:a8:01:aa:f5:d8:fc:da:4d:88:41:a1:33:cb:1e:c9:cd:a0:
53:77:2b:34:58:20:07:ad:5b:00:a8:8a:4a:95:42:4b:25:95:
de:ab:ed:b1:44:bb:d9:d9:7a:f0:13:d8:80:58:7d:2f:e6:fa:
a0:5a:32:e5:00:3f:d0:58:9b:b5:88:ad:01:df:e8:b1:cc:2e:
4b:9b:86:e4:b2:d7:49:40:f9:da:2f:72:f6:84:8e:a1:fe:93:
42:1b:70:37:c3:73:a9:ab:87:08:c6:71:19:4d:04:0c:29:0e:
69:d4:55:d1:d7:86:a8:2f:87:aa:85:96:8f:33:72:72:9a:16:
37:92:0f:2f:dd:8e:a6:c7:8a:bd:41:41:dd:c0:6a:cb:35:35:
2e:19:62:c0:77:01:91:5e:0c:5f:34:b5:4d:4a:f8:83:f0:c5:
ba:a3:53:86:99:e7:cc:91:63:9a:f2:72:76:9f:6c:46:51:e5:
6e:35:fd:07:30:6f:34:42:18:c8:31:41:b0:5f:82:8f:c0:20:
60:5c:95:bb:8e:88:11:d2:1a:d0:f4:b9:ff:db:36:70:79:64:
57:c6:ef:b4:9e:8e:04:d4:10:db:4e:79:3c:d4:6f:44:83:7d:
8b:35:28:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:40 2025 by rpki-client