Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
File: 7aJsQI_Ge3UnNMyZfzYw269vYG8.mft (raw, json)
Hash identifier: Ze5S0p1VIafIZylAjyBpbcJSL3XML3s26iJ7O2+El/s=
Subject key identifier: 18:0D:7B:7B:E2:2C:79:7D:53:08:00:4D:31:95:DB:3D:E5:2A:19:FC
Authority key identifier: ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
Certificate issuer: /CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Certificate serial: 0199FC5902C0CD5051F94242BDD4372EFC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
Manifest number: 0B5A
Signing time: Sun 19 Oct 2025 12:01:55 +0000
Manifest this update: Sun 19 Oct 2025 12:01:55 +0000
Manifest next update: Mon 20 Oct 2025 12:01:55 +0000
Files and hashes: 1: 7aJsQI_Ge3UnNMyZfzYw269vYG8.crl (hash: JYBe7QH3N/miCzeGRy6c+vU8ERVtMs9w7Aq6oJ2PdaU=)
2: JN4F6grFlB3Dj8-hg1uFDcOXCEE.roa (hash: K8bXo6vEOSPG5pKmJ8Ir19tJNgI9+I5+FHzJIbxUZek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:02:c0:cd:50:51:f9:42:42:bd:d4:37:2e:fc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eda26c408fc67b752734cc997f3630dbaf6f606f
Validity
Not Before: Oct 19 12:01:55 2025 GMT
Not After : Oct 20 12:01:55 2025 GMT
Subject: CN=180d7b7be22c797d5308004d3195db3de52a19fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:05:31:f5:de:fc:24:bc:9b:f4:ad:04:a6:c5:
ce:6e:1f:ec:35:18:97:b2:48:e0:b9:cf:0d:85:5e:
b1:33:c1:0a:82:2c:8e:fd:61:25:c2:44:c8:96:17:
d2:da:ac:54:51:c7:24:db:41:94:24:52:88:a0:99:
11:c0:de:34:d8:66:11:c3:13:d5:dd:ca:b1:bc:65:
d8:15:bb:ea:0c:5f:af:2e:83:b9:d7:c0:a2:00:58:
74:a4:82:fa:7d:30:1d:75:0e:48:23:4b:09:b2:9d:
57:d8:e3:bd:76:20:a1:3a:cd:2e:08:ec:9a:19:d6:
99:46:61:45:98:54:78:c6:63:c1:d3:39:9f:10:28:
22:08:fb:b7:10:c5:30:c2:b1:6a:3a:2c:f3:73:99:
51:68:00:5e:33:8e:fe:db:c8:67:d0:05:60:2a:46:
7d:67:c1:cc:01:c4:a7:25:0c:6b:0e:76:d8:28:8d:
22:59:df:d1:20:e1:10:41:a2:84:fd:63:26:e4:7f:
c2:5d:e5:38:af:35:a5:b9:4b:61:15:de:72:28:79:
a5:3a:a8:33:a9:27:fb:21:f8:3e:82:f4:0d:28:f1:
6d:1c:b2:fb:5e:f1:2e:74:d2:1d:31:b8:8b:c3:5e:
5d:47:cb:e6:e5:d4:0b:3e:dc:ba:7e:ed:a7:c3:44:
5e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0D:7B:7B:E2:2C:79:7D:53:08:00:4D:31:95:DB:3D:E5:2A:19:FC
X509v3 Authority Key Identifier:
keyid:ED:A2:6C:40:8F:C6:7B:75:27:34:CC:99:7F:36:30:DB:AF:6F:60:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7aJsQI_Ge3UnNMyZfzYw269vYG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6919ad-33a5-43c0-8ca2-9d4a66ab3ff2/1/7aJsQI_Ge3UnNMyZfzYw269vYG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dc:47:5c:cb:5c:f4:68:45:0d:ee:ef:18:f2:e9:e7:d6:3e:
6e:ee:9a:07:73:01:66:a7:51:f0:ad:71:87:31:db:50:88:db:
e6:73:a2:9f:22:da:f4:c8:ca:f5:05:bd:53:12:f0:3a:72:38:
fe:94:ea:60:e1:4d:75:ff:8e:a4:7c:a9:18:fd:c7:86:8d:43:
74:ae:9a:9a:f0:ae:35:53:7d:82:54:0c:ee:c2:64:c4:6c:eb:
a3:bf:4a:84:a2:58:bf:ba:da:f2:38:58:f9:3e:2a:db:dc:64:
4c:9d:fb:2f:37:fe:3b:77:08:77:78:7e:41:6b:98:70:72:4b:
a7:b8:b7:17:80:4c:ff:f9:1a:ad:8b:b2:26:e6:49:31:f1:1c:
92:75:da:ee:08:3e:11:9e:20:16:cb:be:ac:0c:25:dc:78:fd:
45:36:f7:c7:df:7d:c5:81:b5:69:e7:d0:95:fe:ae:b5:07:c9:
e1:cf:e1:9d:80:9f:a6:58:02:05:9b:c5:e5:43:61:3e:c9:d0:
13:b4:c0:b1:32:be:8c:3e:6c:54:9b:f4:1c:f0:a0:54:49:c7:
69:1c:8a:92:05:33:6c:d2:d0:2a:59:9d:64:78:87:9b:d3:7f:
b6:e1:f1:5c:d0:84:4f:6a:c9:8f:f6:bf:30:80:49:f5:a4:27:
0b:f4:13:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:39 2025 by rpki-client