Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: jAyD2h9UqLrDByRv4gIFY5oWyYSexMKEHdNXLQt5hoI=
Subject key identifier: 70:7E:1B:5F:2C:A2:A3:F6:5E:E6:E9:91:0F:05:AC:47:E7:44:28:92
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 0199FCC6B0FCEBA6A87CFE5C431EDDB4E8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 0A4F
Signing time: Sun 19 Oct 2025 14:01:43 +0000
Manifest this update: Sun 19 Oct 2025 14:01:43 +0000
Manifest next update: Mon 20 Oct 2025 14:01:43 +0000
Files and hashes: 1: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: Hd45S2FvPYqX9ICeIfeFtoWKoeqaOS+DA6IaU5Kam/A=)
2: oYXpqhTt3GbQvZqNdYr3EWQ5ung.roa (hash: UPRTIlRixS9CM22oBbc4c5Z63dIGJf+vJONZ8V2i0x0=)
3: pcs_PEHDTdXvP_iINnpW2AcXpTo.roa (hash: bWlTVPyUsWBnzuOtIjYtj485am3ZoH6EessaELskjTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b0:fc:eb:a6:a8:7c:fe:5c:43:1e:dd:b4:e8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Oct 19 14:01:43 2025 GMT
Not After : Oct 20 14:01:43 2025 GMT
Subject: CN=707e1b5f2ca2a3f65ee6e9910f05ac47e7442892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9a:9d:ba:fd:85:fb:72:b2:7e:85:f2:cd:88:
ad:5e:5b:0c:14:9e:60:2e:8b:ac:47:de:ed:69:88:
d7:64:e1:bc:59:f3:0f:38:4b:2e:b3:4f:e7:43:4b:
d5:cc:4f:5f:07:dc:27:85:0f:6c:23:18:be:dd:09:
f6:72:d1:cb:f6:02:7d:db:cc:32:c6:1d:9d:d2:9e:
9e:33:97:4c:1c:94:7c:7d:1c:5d:09:e3:66:fa:8a:
75:50:74:d4:6a:b2:57:ce:54:46:96:03:c0:9c:50:
55:99:d6:d5:80:d7:f2:c7:74:9b:4d:6c:96:cc:88:
fe:27:e0:24:e7:fc:28:78:a5:e2:0c:ff:15:d6:f3:
00:bf:ff:a0:a2:c5:da:20:fe:d0:cb:9f:2b:85:92:
15:62:2a:b2:fb:a6:48:75:31:bf:d1:c4:40:84:d8:
7c:04:8a:66:46:43:9b:51:1b:41:38:80:b2:9d:23:
a4:dc:14:5e:e5:e0:3b:a9:1e:f1:8c:d1:de:3f:c9:
fc:93:ac:cf:a8:b9:4d:2f:17:82:7c:4c:23:15:8a:
f4:8c:33:43:4f:14:bf:f1:04:f0:0d:75:a0:ba:1f:
ef:3d:f3:d0:a7:2b:ae:41:71:24:72:c7:ce:66:6b:
2c:7c:6e:b0:d2:65:ee:78:6f:13:0c:c4:bd:d4:e2:
7f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7E:1B:5F:2C:A2:A3:F6:5E:E6:E9:91:0F:05:AC:47:E7:44:28:92
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:39:ca:e9:24:92:33:61:b7:15:a5:93:dc:f3:4e:fb:64:43:
05:bd:76:29:f1:59:58:49:26:aa:ae:62:e6:03:eb:ba:99:0f:
13:c6:a3:5b:ab:1e:ba:ff:57:45:bc:c9:f4:4f:bf:6f:2b:0b:
df:b8:28:1f:e8:cc:62:a6:00:5d:27:8f:ba:3d:d2:5d:df:20:
56:6e:1b:6c:e8:be:cd:0e:80:ba:68:37:47:47:0f:36:07:e3:
b3:33:7c:01:0a:1b:f7:64:82:b3:9f:fe:3b:93:bc:90:7c:fe:
17:7a:45:b5:7f:7e:cb:59:0f:96:1f:bd:2f:de:9e:e6:c1:a8:
b1:41:52:b8:6a:07:90:69:0d:4f:8a:e6:48:b9:19:e7:82:19:
81:6b:9b:d1:b0:a4:80:dc:f0:d3:9e:4f:ab:14:3d:31:4c:ce:
78:39:c3:ba:ce:36:33:0a:8c:ba:d8:f1:45:52:56:76:7d:61:
67:62:f3:5d:06:ec:37:c8:87:4b:cd:11:09:15:ee:e4:b7:b8:
dd:19:6b:7e:ac:aa:d2:7e:24:0b:d7:4e:ac:b7:43:7e:30:b9:
29:b4:31:5a:9a:70:7d:1c:65:96:d3:2b:29:4d:c5:df:1c:e7:
45:3b:33:8c:90:53:e4:fc:96:18:7c:e6:0e:ad:ce:16:1f:30:
d2:84:21:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:18 2025 by rpki-client