Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: WRnDBxzsEKF+GArm4fQOOmq2WLRMXOTI+Nzbu9yqcYE=
Subject key identifier: 2E:E2:B8:E7:BB:0D:4E:CB:04:0E:4F:6D:32:79:BC:28:F3:B9:41:07
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 0199FFC8D080E0E820B0DD225E1DE062F83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 04:02:54 +0000
Manifest this update: Mon 20 Oct 2025 04:02:54 +0000
Manifest next update: Tue 21 Oct 2025 04:02:54 +0000
Files and hashes: 1: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: rxvoQrWNzk7NUAzuEVFhEZV/BSLbnvyXkl0tSLD7FRM=)
2: fwhTjjRIhEdJ6uOffHkJ9IbiBcc.roa (hash: uAg9kNvS0wjEdBKrNfsh4Pl1caTWWUTWPoPoJJEyRFk=)
3: tmBvyCU9dS1RGbck9AhZ77ixbZ4.roa (hash: LYRTheb+KiohViLX8r9l59ZvW37F3uyl1qPERmyYOaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:d0:80:e0:e8:20:b0:dd:22:5e:1d:e0:62:f8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Oct 20 04:02:54 2025 GMT
Not After : Oct 21 04:02:54 2025 GMT
Subject: CN=2ee2b8e7bb0d4ecb040e4f6d3279bc28f3b94107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:21:7b:7b:b6:df:71:a7:86:2f:61:cd:ae:
02:57:df:8d:62:7f:46:c8:58:3a:36:74:c0:6a:e2:
94:d4:8b:6b:ff:be:b3:39:83:00:31:5e:bf:36:a7:
91:c3:53:b2:5c:9b:e0:fb:e7:0e:e1:a9:6a:e7:2b:
c3:15:e6:e4:ff:0d:21:34:4d:50:09:8e:6e:85:15:
43:3f:64:85:09:cc:9f:67:50:2e:a1:72:61:1c:7d:
8f:12:c4:cd:a1:28:12:07:a9:12:03:c3:08:06:1a:
68:5a:27:43:79:54:03:a1:ca:d1:04:15:7f:14:98:
c9:f8:5c:e6:b0:f9:cb:05:47:e0:5d:cc:88:75:20:
e2:36:4f:e0:36:95:d1:82:80:12:60:61:87:04:2a:
ee:65:4b:7c:9c:98:2f:56:65:2f:a4:bf:b0:5e:d0:
f9:c0:c9:81:d6:69:fe:88:eb:07:fc:20:cc:65:af:
1a:26:10:40:d1:f3:49:c1:3d:d7:7a:bb:88:20:47:
4a:11:b8:94:fa:dd:2a:b1:6d:75:7c:b2:96:d0:cc:
f4:10:a8:3e:98:7f:94:44:2b:1b:36:b2:cd:66:96:
5b:2c:0a:14:de:17:a3:96:ec:23:e6:0a:83:51:24:
cf:42:9b:c4:05:99:cc:21:68:6d:05:d8:22:6a:97:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E2:B8:E7:BB:0D:4E:CB:04:0E:4F:6D:32:79:BC:28:F3:B9:41:07
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:42:4e:fb:e2:37:63:b6:7f:57:ab:0e:05:4b:5b:83:7a:3a:
34:1d:f8:1f:73:50:ad:42:b7:d0:66:4f:b3:eb:a3:be:64:f6:
31:ca:de:66:c8:be:96:b3:1c:7b:58:f9:4d:c8:f9:95:66:87:
7b:7f:a1:c6:d2:5f:86:92:a8:59:79:e5:73:3c:12:7a:73:15:
30:e9:bf:03:13:78:d0:d0:79:c9:ee:57:90:19:11:d2:2a:64:
b2:f5:6f:8c:e9:10:56:8a:ad:3b:20:19:ee:00:54:f3:5c:fb:
e8:27:75:87:aa:7a:36:5b:42:76:4c:87:62:79:55:df:a9:08:
76:a4:9c:9f:71:1a:d3:38:45:78:a9:30:68:c6:d3:c8:7f:4b:
7f:75:ae:f6:dc:da:ed:d7:82:7f:fc:12:c9:14:e1:e5:47:08:
16:30:5f:02:3c:1a:83:44:3b:1c:cb:88:94:4c:75:89:1d:ef:
37:90:00:9e:8d:05:77:24:4d:8e:5f:b7:51:53:67:4b:8b:af:
e6:ba:7e:97:81:84:6a:51:a0:cb:34:0d:40:93:77:1e:3e:8d:
49:f4:14:32:24:7e:e2:74:09:f1:71:b7:41:16:e9:a4:d7:19:
9b:00:a3:93:8b:d4:21:d3:00:9c:6e:0e:45:35:7d:d3:27:fb:
a6:1a:c8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:34:17 2025 by rpki-client