Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
File: 7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft (raw, json)
Hash identifier: xuNz8VY2KLQ5g1zoq8sBKH6nOtKTM4qIGCXPQUlYX+g=
Subject key identifier: 3A:C7:06:3F:79:D2:87:6F:43:33:75:4F:4C:1B:12:52:E2:32:1E:C7
Authority key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
Certificate issuer: /CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Certificate serial: 019A0591A3DCFEF8F2723D60BAD559BCBAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
Manifest number: 0E2D
Signing time: Tue 21 Oct 2025 07:00:21 +0000
Manifest this update: Tue 21 Oct 2025 07:00:21 +0000
Manifest next update: Wed 22 Oct 2025 07:00:21 +0000
Files and hashes: 1: 7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl (hash: ZNzCV+HDrnaEZV27GkNuRhMN3aW4v9SJNOuIiaErf3g=)
2: ZJw_Jukbo_heQPRMAmDWcBlKQaQ.roa (hash: bPVF2gLa5okAyNdgsZQT7rjoKFmL6l2YkqA4bzlxF0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:91:a3:dc:fe:f8:f2:72:3d:60:ba:d5:59:bc:ba:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Validity
Not Before: Oct 21 07:00:21 2025 GMT
Not After : Oct 22 07:00:21 2025 GMT
Subject: CN=3ac7063f79d2876f4333754f4c1b1252e2321ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:97:9f:8e:54:51:a9:58:52:12:91:05:c5:
d4:98:ef:eb:68:8b:87:b4:b6:ff:8b:68:38:46:cb:
ba:7d:91:22:cf:69:f8:04:78:ae:12:0f:45:65:da:
ff:06:c9:46:2a:c0:9c:3f:db:33:80:bb:af:72:b0:
f7:7e:4e:a3:c0:a2:59:69:fd:6e:df:3e:da:5c:cc:
46:16:a6:4a:1c:be:45:ad:4f:83:3c:6c:32:40:c5:
7e:8e:01:9e:82:3a:a6:54:4c:bf:7e:e8:d4:cf:1f:
bd:6a:1a:09:5f:8b:51:5d:06:73:49:6c:20:da:17:
33:77:03:d0:51:ed:6e:d4:4a:0a:b3:f4:6e:7f:23:
84:a0:45:f0:10:f1:4c:9e:f5:f2:45:69:b6:88:00:
94:d7:b5:8b:6f:b3:5c:b0:4e:7f:7d:02:30:41:51:
0f:e6:18:71:32:7e:f9:e4:35:d7:98:74:3c:81:14:
d3:79:3f:c4:15:4c:9a:e9:b3:a0:1d:c9:be:23:6c:
80:1b:fa:1d:2a:3e:8b:35:58:be:44:2d:63:05:da:
cf:99:88:3b:36:97:f7:90:84:81:82:d7:fc:fb:13:
42:e8:2a:ab:5f:f9:16:6a:21:98:99:f6:c1:2f:de:
af:0c:24:01:0e:7c:c0:f0:25:2e:3a:d7:77:af:24:
ab:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C7:06:3F:79:D2:87:6F:43:33:75:4F:4C:1B:12:52:E2:32:1E:C7
X509v3 Authority Key Identifier:
keyid:EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d3:23:25:e4:40:48:bc:72:4f:f8:49:03:27:0d:31:20:33:
fd:74:0e:e7:f2:34:8b:2b:98:e3:6f:52:1a:43:c3:7f:eb:48:
3b:1d:b5:08:c7:57:df:2c:2e:6d:62:e7:e1:79:7f:a2:30:c8:
af:5b:77:2d:a6:35:fc:5a:06:0e:73:7e:87:0e:c0:2c:a0:c2:
24:ef:37:66:c0:65:a1:d0:c5:19:fc:c4:73:26:8b:49:dd:e7:
37:eb:d2:2f:48:94:5b:e1:31:23:39:77:80:24:c8:b0:8e:88:
69:37:e4:fd:4c:07:b1:07:5a:4b:7d:ea:fd:5a:7b:1f:0c:75:
0e:dd:74:a3:84:dc:01:33:f1:7a:a8:fe:c1:e6:39:35:a5:77:
c0:cf:91:73:6d:40:fc:ff:7d:cd:87:fa:e3:37:81:d0:98:f7:
95:9f:59:a8:f1:a7:63:5f:40:3b:cb:46:37:a5:1b:0c:c3:be:
41:d2:ba:3e:ec:8a:03:1f:f7:75:f2:59:a5:1b:55:ee:34:03:
f0:13:71:31:d9:b2:df:fe:05:5f:95:92:97:f6:e1:86:08:47:
24:0d:58:10:77:ec:9b:a7:fd:be:54:be:ec:24:0a:cf:fb:fc:
08:c3:11:f4:72:f7:f8:12:b3:e2:0e:20:de:24:3a:9c:ff:cc:
b8:24:10:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:40:10 2025 by rpki-client