Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File: C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier: nk+qAvS6nzVCJp1o6V9E0wu6qNsD3kWAd38Cg7sf7yE=
Subject key identifier: D3:EB:4F:58:13:9C:F1:96:17:AD:66:74:F7:49:59:80:C0:86:BC:B6
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer: /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial: 019A0110F3C61392A3D0341BBD85B23286AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number: 0BBA
Signing time: Mon 20 Oct 2025 10:01:19 +0000
Manifest this update: Mon 20 Oct 2025 10:01:19 +0000
Manifest next update: Tue 21 Oct 2025 10:01:19 +0000
Files and hashes: 1: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: yPGFwSuafPgQp42J5xd+fEkiUIwYEoZfBz8ZX9sTt/8=)
2: GhTmp19MKGrha68k8FSg5O3MOXs.roa (hash: msOVTHZ3+no8UhxlXFgsYby23Ic3zy+iOJwGwYJ533I=)
3: Im4zxAMioTMqKC_fblhr89BdW9U.roa (hash: PwyZcrDl2J3l1qTk1V9UdAnL8AN0a6ZWTpBERNBo1l8=)
4: MumbOUHt0sHDCso0-2Ld1ziw4ko.roa (hash: Wd99B13Tv2rYBvmAX16EYI4hqMJzUtPVIMZe+9Oq6HU=)
5: aubQYKYuI6MIHGp2nchWjbFhUU4.roa (hash: 2F+ILSELYXvb+ZAKX5VNzDJvloBcFe6YEc5yS5L5tl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:f3:c6:13:92:a3:d0:34:1b:bd:85:b2:32:86:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Validity
Not Before: Oct 20 10:01:19 2025 GMT
Not After : Oct 21 10:01:19 2025 GMT
Subject: CN=d3eb4f58139cf19617ad6674f7495980c086bcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:5c:90:56:96:73:b3:8a:c8:5a:c1:b4:53:
e1:14:36:04:e5:a0:7e:1d:6a:76:15:eb:c7:34:bb:
df:8c:c1:c1:09:b9:55:f4:0d:15:2a:1f:01:32:0d:
47:a9:b7:b7:94:96:5d:e4:ce:5b:12:8f:93:71:17:
24:e8:4f:d3:d3:fb:cd:d9:95:d6:98:aa:ff:c6:b0:
46:e5:50:57:bf:2a:31:2c:37:7d:b7:07:05:a9:ac:
e4:3d:9c:74:80:ba:06:45:02:71:ab:eb:bd:0c:c6:
62:83:13:26:48:c0:6c:f5:80:d9:73:36:e3:19:e5:
71:ac:e1:6d:48:60:3d:ff:df:46:54:d2:8d:9f:7a:
47:1e:b6:96:a6:87:31:b0:20:32:60:48:ad:52:62:
d7:e6:f7:13:85:d3:bf:fc:96:8e:66:3b:53:a4:d0:
90:4a:01:12:80:24:41:e0:cb:10:c6:99:bb:22:60:
9d:22:4a:21:8e:eb:34:7b:bd:4e:f3:d8:76:d5:64:
20:09:c4:b8:ca:95:27:00:d7:d5:34:80:a2:83:a1:
86:32:c6:1d:ea:df:e2:82:80:22:d2:cd:aa:04:bc:
54:2b:62:6d:18:94:ba:fe:8c:9c:ac:c6:98:bb:81:
23:40:e0:da:fb:86:1e:0f:9f:f1:42:99:ec:be:ec:
47:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:EB:4F:58:13:9C:F1:96:17:AD:66:74:F7:49:59:80:C0:86:BC:B6
X509v3 Authority Key Identifier:
keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ac:96:5f:68:cb:12:6f:dc:ee:23:54:cc:84:c2:2d:2f:98:
16:dd:37:c9:a7:c2:89:95:ca:d6:3f:f5:98:53:2c:92:94:d9:
ce:0f:bf:7f:21:2a:e0:58:0b:41:69:40:5d:f0:ca:0f:14:18:
b8:df:0e:a8:61:2d:e0:9d:0f:b6:a3:e1:3c:27:08:73:70:f1:
ff:6e:c0:7a:c9:47:8a:a3:0f:78:2d:64:46:c1:ba:64:bb:cb:
38:04:56:57:50:2c:b1:72:4d:db:6c:7f:71:0c:25:a0:bd:21:
08:83:4d:05:d9:ea:53:1d:3b:54:fc:94:a5:0f:6d:74:c6:42:
dc:55:a7:0a:54:a7:b7:91:7a:84:0d:bc:a3:6c:ba:7e:f0:32:
a0:58:ed:38:48:11:73:d3:98:b1:e9:31:ba:7d:5f:d2:70:a5:
e6:a7:00:d0:14:bb:a6:d8:49:ea:da:c5:6a:5e:87:5a:df:6c:
ab:e5:ae:4a:a5:b3:3c:ab:35:6e:43:c6:55:a4:85:eb:0a:5d:
1f:df:a8:ba:b1:4a:e3:70:3b:de:33:1e:c7:09:8c:f8:00:17:
da:b1:50:21:1f:a1:c5:d1:40:33:c9:e1:de:e9:75:da:46:84:
16:66:3d:22:77:fc:ec:e2:a4:f5:5b:84:fe:bb:0f:0c:b4:f2:
0a:fb:11:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:01:54 2025 by rpki-client