Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: 4MmHQSojxJO8DSXFhLRlGN3LncVWhb/fEDhDqrY7EN0=
Subject key identifier: 42:96:DB:44:03:B8:A0:F6:A5:CC:95:89:99:37:B2:FF:90:FA:84:DC
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 0199FBEB708530A2169FDF1173BCAFDCEF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 1598
Signing time: Sun 19 Oct 2025 10:02:14 +0000
Manifest this update: Sun 19 Oct 2025 10:02:14 +0000
Manifest next update: Mon 20 Oct 2025 10:02:14 +0000
Files and hashes: 1: 0gLTYHFKjg375hsnlvJFz59V6iA.roa (hash: llgY0FMidtstSH+ZglQ3pmXrL20fdwyExaunpMoHzJU=)
2: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: ahhHqzPG10/S/Sv2wC1JY41z8BlqznBzcpJmPi4j4Nc=)
3: hzOaBQqeJ1MZ-KZ4P7SZyCz4SP8.roa (hash: DRgkBXK2IQa5GIAmZXZtCYy6nVN5G7CPCGzy+FvJU0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:70:85:30:a2:16:9f:df:11:73:bc:af:dc:ef:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: Oct 19 10:02:14 2025 GMT
Not After : Oct 20 10:02:14 2025 GMT
Subject: CN=4296db4403b8a0f6a5cc95899937b2ff90fa84dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:25:62:59:7a:42:c7:a9:2c:82:ca:dc:c3:fd:
ef:47:53:98:3c:27:3a:d0:4f:77:56:80:d9:e0:ee:
09:27:0c:5e:d4:71:6a:ba:3d:b6:58:17:5f:7b:c5:
65:8f:94:c8:e7:4e:56:5f:59:e1:81:9b:4d:8e:6f:
fc:ac:19:86:a5:0f:f0:7e:be:c9:a3:8e:20:a9:10:
30:32:56:07:6b:15:78:56:99:87:6b:51:71:4a:c3:
10:c1:58:2e:a2:b1:6c:50:d3:ba:76:16:35:c5:87:
e2:50:13:8f:66:2e:d2:15:31:2e:44:bb:2a:d4:97:
d1:0f:b0:d9:88:60:e9:3c:a4:78:f2:3c:76:bb:50:
5d:1c:50:59:13:e6:af:ff:7b:82:ac:72:7c:ff:30:
ea:78:b8:7a:a4:66:2a:7b:58:21:a5:f9:95:fd:7b:
fd:6d:7d:f2:60:05:db:a2:67:fd:26:d8:19:04:71:
11:cc:3f:6b:dc:13:5d:65:ae:fb:a0:0d:ad:9b:0b:
93:c8:28:c8:07:d1:22:16:54:4b:73:c6:39:2b:c2:
1b:51:81:87:78:cb:98:c2:49:86:9a:00:7e:08:a0:
3e:2d:44:9f:b1:44:85:e8:c2:da:32:62:76:55:a7:
97:f0:5b:b1:15:b7:45:32:e4:46:ef:00:f0:a9:a7:
75:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:96:DB:44:03:B8:A0:F6:A5:CC:95:89:99:37:B2:FF:90:FA:84:DC
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:31:90:54:e3:b7:6c:bc:99:20:56:73:90:c9:68:2b:33:78:
0b:c6:b0:5c:23:35:67:1a:fe:a9:20:f2:ab:02:0a:50:a4:15:
ff:20:1a:f7:59:0c:c6:00:51:5b:92:d2:af:5c:85:68:35:83:
8e:fe:fb:1a:bf:40:84:8a:5c:c6:66:c9:76:7c:c5:c5:2c:4c:
62:4a:1e:2c:44:88:5e:a6:79:d8:5f:27:93:c4:26:b1:ed:c7:
3e:18:bb:56:69:0f:b6:fc:ac:71:e6:dc:d1:bf:7a:6d:31:4a:
86:51:2e:41:53:09:b0:b3:c0:c3:a7:ab:91:97:84:ec:c4:64:
ac:0f:30:19:dd:f0:bd:1e:09:d7:db:20:44:d5:1d:c8:b7:ca:
de:dc:37:eb:e4:d7:b8:ca:74:a8:92:0d:d5:b0:34:88:1d:2f:
8f:c2:14:2a:7c:ac:2b:55:e0:ab:1e:26:a4:d6:04:43:02:6b:
2b:b5:4b:89:09:1a:f6:19:a3:3a:a0:51:d5:f8:e5:d0:5c:0d:
ee:16:13:91:99:36:7f:9f:16:b3:ae:8c:6e:0b:11:a6:5f:a7:
4e:85:1d:5b:00:7c:e9:13:28:83:2f:22:56:3e:f3:50:6e:20:
e9:0b:7a:29:4c:b4:df:43:16:8d:d6:70:a8:64:26:d7:66:23:
b6:c8:2b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:10 2025 by rpki-client