
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File: C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier: 8FDzY6XkbUQEWmGVMl1/RtohCZd8KYRAMwuW5aETa+8=
Subject key identifier: 3E:EE:BE:8C:CC:B8:53:3D:49:F1:91:15:93:8E:56:FF:65:BF:81:98
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer: /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial: 019A02FE975505CAE10D162D102AD8720328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number: 0BBB
Signing time: Mon 20 Oct 2025 19:00:30 +0000
Manifest this update: Mon 20 Oct 2025 19:00:30 +0000
Manifest next update: Tue 21 Oct 2025 19:00:30 +0000
Files and hashes: 1: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: mHAYrcecGNYMU6VOvDl1An5p/IdWQX1aqgi9L7p1BC0=)
2: GhTmp19MKGrha68k8FSg5O3MOXs.roa (hash: msOVTHZ3+no8UhxlXFgsYby23Ic3zy+iOJwGwYJ533I=)
3: Im4zxAMioTMqKC_fblhr89BdW9U.roa (hash: PwyZcrDl2J3l1qTk1V9UdAnL8AN0a6ZWTpBERNBo1l8=)
4: MumbOUHt0sHDCso0-2Ld1ziw4ko.roa (hash: Wd99B13Tv2rYBvmAX16EYI4hqMJzUtPVIMZe+9Oq6HU=)
5: aubQYKYuI6MIHGp2nchWjbFhUU4.roa (hash: 2F+ILSELYXvb+ZAKX5VNzDJvloBcFe6YEc5yS5L5tl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 19:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:97:55:05:ca:e1:0d:16:2d:10:2a:d8:72:03:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Validity
Not Before: Oct 20 19:00:30 2025 GMT
Not After : Oct 21 19:00:30 2025 GMT
Subject: CN=3eeebe8cccb8533d49f19115938e56ff65bf8198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d5:42:ec:7d:9e:74:0d:d2:51:76:c4:fb:5e:
28:96:a3:c6:ec:13:3d:e6:9c:91:d6:df:84:54:c3:
9c:49:e5:a5:1a:38:2e:16:07:bf:9a:1c:29:92:91:
8b:ae:2d:b0:bb:c3:ad:62:45:c4:51:8c:b7:f7:7f:
6e:b7:ec:fc:a7:9f:f2:aa:a4:d9:db:0c:b9:68:8a:
c6:e5:a5:a1:ab:b0:da:7e:cd:33:a5:1c:04:f7:40:
1f:5a:0a:fa:68:03:4f:5b:d0:0f:c1:d6:a8:35:2f:
c1:bd:36:eb:b6:81:fd:00:e4:af:de:5e:5e:66:c6:
88:48:91:ed:24:78:8f:c4:53:e0:87:b9:c6:e0:61:
42:cf:e5:5e:f2:35:84:24:21:cf:45:8b:41:59:46:
2e:c3:a0:a4:20:9c:35:26:3f:72:38:34:54:d7:8b:
1e:88:8e:2e:81:02:c4:c3:43:99:71:3b:17:70:bf:
24:13:99:df:6a:2d:a3:c4:59:b4:16:9e:c3:70:d5:
20:f0:b2:68:4e:a3:d5:2e:ef:e2:95:2b:88:c1:a8:
77:f0:40:0d:c8:05:a9:f7:ba:37:40:ca:c3:61:74:
bb:15:e3:90:16:9a:4f:88:1a:29:a5:f7:c8:df:07:
00:92:80:55:78:67:b8:a1:43:a6:4e:bc:1a:3e:58:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:EE:BE:8C:CC:B8:53:3D:49:F1:91:15:93:8E:56:FF:65:BF:81:98
X509v3 Authority Key Identifier:
keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e9:02:96:ca:08:9e:0e:a8:1d:90:27:58:7f:62:02:bd:13:
fa:af:2a:96:16:c5:9a:89:71:f5:aa:fd:f6:22:41:81:6a:75:
4b:ec:45:41:f7:22:15:db:ba:13:12:a7:da:ba:be:a3:89:59:
1b:2c:fa:34:b3:f7:2c:74:55:11:4f:e7:0a:08:d5:2e:92:b4:
fa:b1:de:0e:7a:36:fb:75:3b:ea:d5:50:43:54:b2:bc:8e:83:
05:15:af:17:40:dd:dd:c0:1c:63:26:50:43:f5:cf:49:ac:13:
43:ac:d2:c6:d8:96:f4:20:39:93:b9:c5:4d:32:e2:3a:01:3e:
7d:0f:a0:9c:de:d0:58:c8:83:b6:f2:43:9a:e9:04:33:96:86:
b6:9c:49:25:bf:ce:a7:4b:5b:4f:2d:2b:42:ae:e5:98:ac:25:
f4:29:73:3d:a8:57:d6:34:60:19:30:0b:d8:47:f8:65:bd:7f:
e1:6a:9e:5e:56:25:fc:61:7b:85:2e:ee:83:5b:64:9f:d7:2d:
4c:9f:62:35:bf:b2:64:6d:fa:c8:8a:56:51:76:41:bf:e2:eb:
74:20:04:f3:83:b5:25:cf:47:2c:37:17:06:88:1d:27:1b:4e:
a8:55:e4:48:1a:19:d5:61:b2:da:ba:48:97:1d:59:38:46:9c:
46:7d:64:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:11:44 2025 by rpki-client