Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
File: 7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json)
Hash identifier: 8a8YgcvtH7Xz2aaNuiGSxsS0bOFzqPDjhBG6OpfHyKo=
Subject key identifier: 06:21:9E:FC:30:95:A7:5F:EC:F8:07:1D:B1:60:39:DC:73:A3:E7:BB
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Certificate issuer: /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial: 0199FD6B373917BC75D0C3546F0CCDB030D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:26 +0000
Manifest this update: Sun 19 Oct 2025 17:01:26 +0000
Manifest next update: Mon 20 Oct 2025 17:01:26 +0000
Files and hashes: 1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: w0DU/+Gw0pyFtXO6WHfReuzWpo6Yy2OrZJQidxF4dls=)
2: 8rOJtiLxYHoU0BtAFzn-91ivD_s.roa (hash: Ru+2TW06RDS2clsfzv8MubQ+2olZEzQWBQuJZ31W9Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:37:39:17:bc:75:d0:c3:54:6f:0c:cd:b0:30:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Validity
Not Before: Oct 19 17:01:26 2025 GMT
Not After : Oct 20 17:01:26 2025 GMT
Subject: CN=06219efc3095a75fecf8071db16039dc73a3e7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3a:7b:3c:9f:9a:21:59:ad:c3:eb:01:4e:05:
63:92:83:37:49:d6:c8:6f:44:7a:b7:26:9f:80:6b:
1c:b3:3b:17:b3:b2:5a:80:55:2e:ab:0e:be:d7:5d:
ef:23:8b:71:2c:c5:0e:f9:d3:51:1b:cf:f0:7c:ce:
17:0f:ab:e8:b5:ec:4c:21:85:66:4c:77:c2:d8:21:
b6:91:d2:e9:90:c9:75:a4:1c:4e:23:ff:08:62:18:
30:0d:e7:b4:0d:ff:84:57:d7:5b:c0:ed:05:a2:39:
a1:6d:b0:eb:50:f6:cf:4b:22:66:f2:84:24:28:e2:
3c:d7:03:d3:31:b0:c7:4a:2a:b3:70:13:e3:e0:80:
9b:ea:67:2b:5b:6f:98:25:f1:72:49:3d:62:1f:22:
bc:a1:22:de:12:58:b5:68:d9:e0:b1:b8:c1:a1:66:
68:20:d9:bf:11:ff:fa:14:50:f0:55:52:57:12:76:
92:2f:1e:38:96:dc:3b:9b:db:b3:48:34:52:5f:52:
a4:fa:36:80:3f:8a:0f:eb:65:72:24:c2:e9:39:46:
83:7b:b6:8c:7c:ae:1c:31:05:be:4b:00:e0:cd:e2:
77:80:9d:78:a8:e8:53:91:39:b4:37:9b:36:cf:6b:
d1:d8:e1:09:e6:b4:fd:04:de:04:2e:cb:cc:85:8a:
14:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:21:9E:FC:30:95:A7:5F:EC:F8:07:1D:B1:60:39:DC:73:A3:E7:BB
X509v3 Authority Key Identifier:
keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:65:d4:2a:92:e3:1d:44:c5:db:2a:8d:90:67:69:ed:c6:14:
85:cf:f6:f9:31:fb:14:76:92:97:38:57:9a:64:e3:91:fc:50:
f9:d5:d0:86:42:75:03:17:80:36:ba:3c:c0:ee:fa:e8:3d:17:
ec:dd:d6:0b:33:28:66:bc:60:3b:91:9f:de:08:d4:21:cb:7d:
07:6e:1d:d9:17:07:39:5b:71:7c:67:00:db:26:f3:29:3b:11:
20:fc:e4:87:3d:3f:cd:40:ef:07:d2:f8:c6:85:e0:b2:4b:74:
d0:e7:b7:70:4e:6b:37:26:6d:a2:64:b2:7d:48:49:dd:ec:6c:
68:ee:f8:c3:37:d5:2e:01:3f:7b:03:f1:43:3a:17:f5:55:b0:
aa:11:3d:b0:8d:da:10:da:0c:76:bc:86:45:d9:d7:73:0a:b6:
21:f3:ff:6f:18:aa:75:61:03:65:37:0d:fe:a0:2e:97:09:28:
41:90:6e:ca:c8:31:a0:d3:60:c3:ec:e6:7e:14:d8:79:6b:13:
54:4c:3b:99:4c:14:96:37:32:1c:c8:c8:87:58:f9:14:f3:be:
c0:21:21:bf:06:45:08:fa:a5:c7:60:cf:7f:96:c9:45:40:64:
6c:e4:1f:c5:bd:5d:09:b7:0e:e7:c3:7c:d5:12:19:32:91:02:
16:a7:05:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:51 2025 by rpki-client