
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
File: t7GVtlEuyHh9maGy5OvYCIT5gLI.mft (raw, json)
Hash identifier: cSWE9x5oh6BFiHKq09r5biuFA7bUBMO9obaxfQaQeIA=
Subject key identifier: D5:1C:D7:25:4B:23:B8:F2:1A:89:E3:67:11:8E:4B:2A:EA:74:41:04
Authority key identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
Certificate issuer: /CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Certificate serial: 0199FCC650803483F859C5D45B007857B4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
Manifest number: 02BD
Signing time: Sun 19 Oct 2025 14:01:19 +0000
Manifest this update: Sun 19 Oct 2025 14:01:19 +0000
Manifest next update: Mon 20 Oct 2025 14:01:19 +0000
Files and hashes: 1: 5w_9JQX98jnIEcg67nkgGTJIRO0.roa (hash: UWly5Q/cVxLTnL0NxMmtD+E+9W1QFCDtSfYzLoDl3EA=)
2: t7GVtlEuyHh9maGy5OvYCIT5gLI.crl (hash: daJpbIDSP1mOmKEbms8wbjjlEdBefeKPmzsaicEvEk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:50:80:34:83:f8:59:c5:d4:5b:00:78:57:b4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Validity
Not Before: Oct 19 14:01:19 2025 GMT
Not After : Oct 20 14:01:19 2025 GMT
Subject: CN=d51cd7254b23b8f21a89e367118e4b2aea744104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4e:8c:8a:88:93:43:d9:b2:5f:38:1b:91:cd:
5d:a3:7f:f0:aa:97:5a:46:00:2c:b5:48:2f:68:28:
59:7d:83:70:23:d3:4f:15:d9:67:35:ea:6e:15:c7:
c9:40:e7:e9:b7:08:3b:d3:dd:f3:71:28:bd:b0:01:
72:99:bf:b5:ad:ff:e0:be:0b:75:bd:5b:8b:0c:b3:
b1:35:f1:b6:71:b0:8b:de:0a:71:a8:08:4e:cf:5f:
fe:3b:0b:5d:1f:db:a5:09:41:61:43:bc:07:bb:f4:
46:fb:e4:df:38:f2:e4:2e:69:4a:77:59:c6:fa:e8:
5f:79:5c:7b:c2:d8:40:bc:c8:b9:c2:8d:b7:68:8f:
4a:37:dd:f4:90:67:3c:eb:86:54:bf:c1:1c:28:6f:
2b:9a:98:a7:c7:d7:8d:2c:b2:17:84:01:83:11:69:
68:35:c9:37:34:a8:bb:fd:c2:29:97:66:f8:65:34:
27:27:16:46:00:09:b5:0e:85:24:76:a1:e6:3a:5d:
2f:bb:4f:53:2e:e3:b8:cb:43:09:74:ec:cf:a0:d9:
94:99:ef:44:e6:46:0e:21:c1:04:e6:67:be:b5:bf:
30:59:23:8f:b1:d0:e7:26:15:a5:0d:43:63:9e:5c:
d9:e4:31:25:e2:c3:a3:5d:9e:72:0f:3d:20:f8:f0:
4f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1C:D7:25:4B:23:B8:F2:1A:89:E3:67:11:8E:4B:2A:EA:74:41:04
X509v3 Authority Key Identifier:
keyid:B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:72:6e:07:de:64:9d:49:eb:d2:ab:23:d3:c7:b3:98:26:58:
30:10:0a:eb:a5:29:7b:32:70:e3:54:6d:cc:1f:93:e6:9e:9d:
a5:91:65:f8:e6:ec:63:58:54:f0:c8:31:d9:06:15:55:b5:f7:
72:a9:d2:fb:40:78:99:b3:bc:f9:00:d6:f7:da:26:24:db:39:
04:68:fb:b1:03:8a:63:3f:27:46:de:9d:eb:f6:0d:b6:5b:2e:
c3:d0:a6:05:79:0d:42:b4:4e:13:c8:21:b7:f9:43:66:95:72:
6e:d6:7b:6c:71:d4:3b:b4:08:35:a9:36:f6:dd:81:42:b0:a1:
0b:8f:62:52:29:8b:8f:fc:ab:80:9d:74:ae:44:3d:12:c9:11:
9c:37:01:85:34:05:5f:9a:d7:fd:88:8f:a1:fb:96:66:fc:0f:
ee:c9:e6:68:f7:9d:c5:73:e6:e4:49:24:b8:cb:70:53:99:22:
71:21:59:e4:f5:b8:b8:b2:a5:c2:42:80:de:ae:c7:59:57:a5:
5d:6a:4c:f7:89:ec:fe:80:38:fb:e8:23:38:cf:95:fe:17:a6:
9b:2b:7d:37:73:ad:8b:23:f6:b8:09:69:28:10:7a:45:c1:28:
b9:05:7e:ef:88:61:54:57:fc:3e:de:66:85:27:a8:86:34:e7:
e1:52:c1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:27 2025 by rpki-client