Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File: 7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier: KsaPxLW77P4tDRwTtuX+LDIpzGeSVlicQxMro9JTev8=
Subject key identifier: 95:0E:E9:A1:39:7B:D7:3E:1D:66:D3:72:9C:11:8C:29:CC:A7:1E:F7
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer: /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial: 0199FD6B5579F9E06FDF39206455CA2B3A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 17:01:33 +0000
Manifest this update: Sun 19 Oct 2025 17:01:33 +0000
Manifest next update: Mon 20 Oct 2025 17:01:33 +0000
Files and hashes: 1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: kKzsIMINxLuivHEGoFjcGPmzhf8p1fXIJZ6Jk/wUSMM=)
2: bs5TDByPfX7v0gGiMzCGnbwDPsc.roa (hash: ZFnFhNp44GizxJZSVK1H/k8LT22geAidthOTyfRiYbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:55:79:f9:e0:6f:df:39:20:64:55:ca:2b:3a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Validity
Not Before: Oct 19 17:01:33 2025 GMT
Not After : Oct 20 17:01:33 2025 GMT
Subject: CN=950ee9a1397bd73e1d66d3729c118c29cca71ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:df:16:3f:88:22:03:51:71:16:c8:77:d6:d8:
d1:62:67:82:de:09:f7:5e:b5:7a:5f:bd:b9:46:eb:
c4:96:81:96:3f:04:7a:de:e9:5c:db:60:5b:b6:d2:
62:3c:af:f6:41:d4:8e:ea:13:06:d0:0e:47:1e:12:
93:e6:f4:1f:e0:3b:7d:6f:ca:95:58:15:7e:09:cc:
f5:95:ad:b2:e4:75:12:10:b3:ad:ae:52:83:51:dd:
34:9a:1c:94:17:98:ad:0e:8c:f7:02:61:e7:dc:f6:
35:c0:82:82:88:62:6a:3b:49:2b:d1:bd:11:cf:9c:
31:d1:75:d0:01:93:e2:e1:d5:9d:b3:dc:38:8b:18:
49:4a:38:b8:78:43:a8:bf:a2:ea:db:ce:1f:b8:f8:
54:5e:e4:e1:84:83:27:af:6e:9d:e1:d4:0b:a8:ac:
f5:d4:e7:d2:15:e5:95:8f:a1:43:a6:b1:60:86:49:
fa:af:65:c4:a7:ae:9c:e6:5a:49:a2:e4:62:42:da:
65:9d:be:a5:43:85:7e:57:55:fc:03:64:09:ff:3d:
0a:16:7c:e0:10:6d:3e:30:30:69:c0:75:a1:5e:c9:
1f:12:f7:2c:05:ee:02:3f:67:f4:62:b5:77:e8:77:
82:79:64:3d:ff:19:f2:e6:53:d0:a4:c1:b0:38:89:
6a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:0E:E9:A1:39:7B:D7:3E:1D:66:D3:72:9C:11:8C:29:CC:A7:1E:F7
X509v3 Authority Key Identifier:
keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f6:84:18:07:b6:9b:b5:a2:34:97:c9:77:97:84:b1:83:b9:
43:ef:f9:56:51:14:be:16:cd:61:c5:50:45:e2:b2:b7:ce:f6:
62:8f:22:94:c5:3e:5d:d4:51:60:68:77:00:3e:f0:2f:c1:47:
83:19:df:2c:22:a5:51:a3:31:6d:68:da:fb:c5:8f:4d:2e:0c:
42:6e:da:60:09:b2:bc:9d:d4:bf:a7:0d:fd:62:25:27:f0:dc:
7f:eb:47:40:57:c9:f1:28:78:74:3a:30:be:66:b2:af:2a:00:
1d:d1:73:5d:e3:c3:de:6f:a8:82:aa:1f:df:2f:82:e8:85:94:
46:e4:03:c7:ce:c5:05:6b:f9:84:6c:ee:9e:0e:47:a9:6f:ce:
31:12:dd:9d:eb:ed:4e:71:c5:f0:59:bb:ab:87:d0:30:48:db:
e0:d1:e3:6a:9f:14:b4:11:9a:c9:78:76:49:f6:1d:a7:e5:5c:
18:b9:b9:ba:2b:1c:10:b8:bc:77:6a:47:37:04:82:3e:dd:45:
ae:26:10:2d:7c:3d:32:07:ff:b5:d1:7a:5b:b4:a9:93:b2:c1:
3e:96:02:4c:d4:83:e5:e5:c8:95:f7:57:7b:90:14:b8:2e:eb:
02:ec:b6:a9:36:ba:c2:4a:40:5a:64:5f:f5:76:9b:fb:0e:0e:
9b:fc:65:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:09 2025 by rpki-client