Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: zycOuNzGiS0rFoKuV9O7uNM8EoZUJwKgGW8nJmXbG4U=
Subject key identifier: 1B:DD:54:2C:9E:33:D7:70:50:5F:17:15:34:E1:66:AA:7F:2F:C0:BC
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 0199FC58A588723F48EA4ACDD0FD9C35B565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 0598
Signing time: Sun 19 Oct 2025 12:01:31 +0000
Manifest this update: Sun 19 Oct 2025 12:01:31 +0000
Manifest next update: Mon 20 Oct 2025 12:01:31 +0000
Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: 38BCGzluM3SxYBMlaXp0zM3VhUzoWbrPpHMwAWKpBMA=)
2: TaWWlaQdJDy__bPOa0_wHi28kgw.roa (hash: GmxVMkOCc40Mr9ux5EGho294LI1OMaDC/pTrag518As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a5:88:72:3f:48:ea:4a:cd:d0:fd:9c:35:b5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Oct 19 12:01:31 2025 GMT
Not After : Oct 20 12:01:31 2025 GMT
Subject: CN=1bdd542c9e33d770505f171534e166aa7f2fc0bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8d:73:4f:d8:ce:a6:50:98:85:27:28:10:92:
8c:70:80:86:ef:91:85:e6:d7:c1:3c:fe:c5:cb:f9:
41:22:5a:9a:09:04:32:3a:65:f5:2c:d8:6f:40:0b:
c0:45:c3:15:5c:1e:d8:34:47:f0:9f:b6:95:5b:d0:
41:d2:29:66:52:52:8b:44:aa:5a:2c:84:96:c9:39:
bc:95:99:c4:18:9a:df:85:e5:6d:d8:6e:bd:f1:cd:
c5:5c:60:89:52:7f:8d:eb:ef:cd:85:d0:8d:cc:47:
cd:9d:5d:56:63:f5:bc:30:72:cb:04:f8:67:7f:a6:
4d:e9:67:f8:71:f8:aa:80:c8:fe:87:f7:7c:c2:3c:
2f:1c:43:97:37:02:5c:1a:69:fe:70:82:91:b2:d5:
5c:6b:91:e5:2e:1c:75:ea:ec:27:f4:0e:97:92:5e:
14:7e:6b:fa:01:24:c0:aa:9c:20:5a:0a:e5:c3:b9:
56:4c:7d:0f:2e:0b:be:9d:8e:fa:e3:50:d6:3a:cd:
36:4c:75:20:45:4b:67:e6:f7:02:7c:d9:c8:11:15:
e4:16:f1:df:4f:24:56:f3:e4:4b:24:44:60:aa:37:
a4:25:e7:44:27:0e:e1:b5:3e:fd:1a:4e:f0:92:93:
0f:35:e2:90:5a:05:c5:b5:c1:2f:93:91:41:24:8d:
3e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DD:54:2C:9E:33:D7:70:50:5F:17:15:34:E1:66:AA:7F:2F:C0:BC
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:95:54:bc:06:da:e9:af:da:7e:c2:8c:d9:ab:a3:a8:b3:3b:
4d:9c:02:59:01:c7:80:27:62:7b:dc:12:95:df:12:dd:e0:b5:
dd:fd:ba:68:17:dd:f9:f2:40:f4:9d:03:e0:f2:42:eb:f2:95:
6b:4d:ed:98:13:76:41:03:69:15:08:91:30:8f:26:1b:d3:2e:
d4:c0:2e:a6:b1:8b:87:29:f3:4c:7b:92:b6:36:87:f4:f2:51:
4a:21:e5:60:f8:39:65:b9:c4:15:ee:85:aa:25:e4:c9:43:33:
8d:e0:73:94:b4:56:7b:63:97:e5:ff:32:ea:44:d5:a6:8f:85:
04:b1:40:0f:ca:c6:81:e2:20:3b:e2:31:ed:35:96:90:2e:64:
73:e6:88:c9:6f:44:ab:dd:8d:2c:44:84:1f:eb:b0:a7:8b:69:
c4:ab:72:6e:2e:99:99:b7:98:4a:f5:a9:5d:88:24:48:a7:f8:
65:b4:ee:55:ad:19:07:de:ba:19:fc:a0:69:6b:eb:1b:16:10:
b1:c6:29:9c:98:5a:af:58:38:6d:a0:b7:b1:eb:81:9a:ed:33:
cb:bc:16:3c:3c:80:e2:45:d5:75:39:9a:ee:4f:b1:c2:4d:b3:
9b:e9:50:a6:d5:97:c8:11:1a:d1:0e:8c:40:4a:cf:e7:74:7a:
a3:4d:34:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:25 2025 by rpki-client