Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
File: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft (raw, json)
Hash identifier: 32sWrsYcu0fiJoPpQwxOCxUauXPNjr+cMuwKaYdDRXc=
Subject key identifier: A2:DF:47:EF:1B:5B:63:AF:EA:E0:23:0D:7A:16:DF:7B:12:12:D1:D7
Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Certificate serial: 0199FDD91AD856B71F1587003ED3646B3201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 19:01:27 +0000
Manifest this update: Sun 19 Oct 2025 19:01:27 +0000
Manifest next update: Mon 20 Oct 2025 19:01:27 +0000
Files and hashes: 1: 3pE7ngeyN1HHpk0KHj4fUNdQvUM.roa (hash: mNG9h0i2ooRim+EzKgj5oXfWKRS+vfBHN7OSNoR8nx0=)
2: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl (hash: BtvCGqyh2NbPWn2ALo+2oykbELUy3pY96Tj2ykwEEcU=)
3: NtkJ9XnrruhKtg-qQfEiGBcXIF8.roa (hash: Jv+k94qXBgLa6tQsUzrVhcRNbmkihG2wPv1tzN8y6Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:1a:d8:56:b7:1f:15:87:00:3e:d3:64:6b:32:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Validity
Not Before: Oct 19 19:01:27 2025 GMT
Not After : Oct 20 19:01:27 2025 GMT
Subject: CN=a2df47ef1b5b63afeae0230d7a16df7b1212d1d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ea:ba:44:53:6d:72:2d:04:97:25:f9:c1:27:
07:36:fa:d0:90:ad:90:cb:c1:4f:e0:c7:69:d4:9d:
ad:35:5a:d4:ab:86:05:67:f7:ff:c3:c4:5b:22:32:
51:4e:bf:ca:cd:77:95:d0:22:bb:14:dc:e7:1a:53:
60:b1:ef:6d:67:c9:56:c8:54:ce:51:35:12:11:31:
e0:e2:6d:bc:b8:f2:6e:33:ec:f6:fe:cb:4d:1a:3a:
c3:f5:74:ea:0c:c7:83:8a:0d:15:29:e8:55:63:aa:
25:9e:d2:5b:67:ac:d1:54:de:48:d0:7f:2c:15:89:
c2:6e:66:4c:38:64:c6:ce:6a:4e:08:77:83:31:23:
fc:03:0b:ac:2b:b3:05:9d:0d:9c:80:81:4a:fb:9f:
0c:7b:09:29:b0:85:09:22:6b:52:91:6d:e6:cb:89:
37:85:29:7b:84:eb:63:99:90:44:ce:e9:31:d4:08:
51:8d:b8:75:1b:4a:fb:73:7a:78:de:fc:33:83:c0:
4f:ee:57:bc:3d:7a:4c:e7:00:b5:e4:3e:0c:79:7b:
72:9d:22:25:b4:d5:49:8f:40:b6:c9:b0:84:45:8b:
81:9f:55:16:b1:51:8a:be:68:61:70:47:57:ef:04:
1c:27:68:b0:95:01:93:19:e8:39:6f:9f:c3:5a:63:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DF:47:EF:1B:5B:63:AF:EA:E0:23:0D:7A:16:DF:7B:12:12:D1:D7
X509v3 Authority Key Identifier:
keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7a:0c:48:0b:d7:b8:66:d2:24:31:4a:5b:ea:59:05:cd:de:
8b:f7:6f:63:9f:5b:2b:63:5b:47:81:5a:1e:e5:dc:40:6e:51:
76:42:68:c7:bc:0c:03:50:05:d5:91:5f:15:09:b6:0d:64:6a:
60:68:bf:ed:36:fc:72:c7:de:ea:90:54:f2:b5:04:c8:62:de:
28:26:3a:73:f1:46:a8:b4:8c:b1:33:28:70:4a:00:f0:ab:a7:
9c:43:cc:2e:74:1e:c4:da:50:96:d1:31:4b:15:61:7d:69:88:
c2:94:7e:25:e1:68:7d:07:a1:75:be:95:34:13:c5:ed:42:76:
a3:a7:16:61:ae:e1:9e:5b:b7:c7:1b:c8:9d:3e:68:de:4a:79:
04:c6:12:ff:45:9c:16:ef:90:30:db:be:bd:80:df:48:d5:48:
18:33:2b:58:e8:f9:63:b2:95:8c:a1:f9:6f:62:27:b2:8a:79:
55:41:ce:dd:e2:38:7a:88:7b:54:e6:a4:5d:5e:66:55:4c:53:
a5:bf:03:dc:45:52:e7:ca:71:e1:9e:3d:97:c9:ca:78:ba:ee:
41:e2:0d:70:ac:f9:69:40:dd:46:d3:e6:24:29:57:80:4b:fb:
8e:a5:18:fa:44:be:04:54:17:d1:b4:f4:a3:67:46:dc:6e:87:
a8:d3:34:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:35 2025 by rpki-client