Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: ZCB5lvq2cnJyzPGx4GAtd0Awsj1dGsPOPGYZ3MTOTdY=
Subject key identifier: 3A:69:AA:E1:86:D3:A8:40:44:76:34:DE:C0:C6:F5:AF:88:AF:9F:13
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 0199FC8F9257B6D6DA42ED9601DB03970BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 13:01:31 +0000
Manifest this update: Sun 19 Oct 2025 13:01:31 +0000
Manifest next update: Mon 20 Oct 2025 13:01:31 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: YmJ1uu0iECg8Zh7tNtcDebFZSq2sK0TT5ojjJiNDflE=)
2: nigLCn7wWT0ueFZoLpA3hlPaWgA.roa (hash: q+VheV55aItc4rpRaaib9XdkzvuIJSEg9slh0BtNQXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:92:57:b6:d6:da:42:ed:96:01:db:03:97:0b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Oct 19 13:01:31 2025 GMT
Not After : Oct 20 13:01:31 2025 GMT
Subject: CN=3a69aae186d3a840447634dec0c6f5af88af9f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:df:6b:14:e2:6c:4c:c8:3f:77:47:fd:8c:52:
48:27:20:8f:46:02:9f:93:31:cf:6a:1a:88:df:5b:
ef:fb:b3:ff:c3:0c:1c:b6:2e:98:9f:7b:70:7d:2d:
5e:c4:ee:71:40:8f:a3:9a:3b:0e:6b:f8:85:4e:8a:
5b:fa:5b:0f:71:5a:b2:c6:0e:77:b4:00:de:52:d2:
70:ee:c4:8d:11:84:76:29:79:a9:ac:d8:47:e2:d4:
3f:12:2f:d0:41:c6:f8:8a:c2:35:3a:22:52:84:c9:
8f:ad:2b:cd:e7:d3:cc:b2:36:34:06:c2:c3:a2:19:
91:c0:59:69:b6:bb:25:d9:32:74:35:ec:40:d9:1e:
55:99:41:89:14:5f:fe:a1:bc:cd:e1:3f:ea:e3:2c:
0f:73:97:c5:d3:71:63:c6:eb:15:67:15:44:31:07:
7e:4d:09:32:7e:c0:91:77:c5:bd:e3:20:51:ad:50:
18:f8:ea:d5:9d:93:a2:84:d9:90:97:7f:20:1d:46:
77:68:cf:81:9d:7f:11:e2:1e:2f:95:ad:1c:cb:28:
39:b2:11:10:35:ba:0f:94:8e:c2:cb:d8:b6:83:04:
e2:6d:2b:a7:99:3d:c3:d1:90:a2:ac:7d:ef:ed:0c:
db:75:6b:29:17:aa:a2:d5:41:16:05:14:87:6c:2c:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:69:AA:E1:86:D3:A8:40:44:76:34:DE:C0:C6:F5:AF:88:AF:9F:13
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:3f:bb:50:ad:42:13:ec:3a:1f:66:22:e1:14:e1:4a:ed:18:
49:64:a0:c0:5b:38:0f:b7:0f:2c:c6:c7:be:b4:6f:b9:b9:be:
7e:b1:ff:07:67:60:53:7f:7e:0f:c8:20:62:be:12:74:d3:0b:
3a:88:f0:33:13:cd:a2:be:1c:91:3a:dd:25:84:34:e5:44:8e:
27:f3:82:0a:87:7c:71:2a:31:41:e2:48:50:cd:2b:bc:af:89:
31:a3:9f:d0:7b:42:02:c1:9d:0f:b7:d9:77:16:18:bb:18:b7:
17:67:d2:20:9b:7d:af:7d:3f:55:bc:c1:5d:69:fc:67:b4:5f:
f2:c4:d1:f6:ac:69:28:77:4d:c0:6e:b7:c8:21:6f:90:cb:2b:
9d:1c:30:3e:45:20:47:88:5d:4b:25:69:df:c7:a3:d7:fd:ae:
0c:45:11:6b:c4:a1:1d:28:4a:ed:de:b7:5d:df:dc:23:d2:d4:
de:ba:34:66:13:43:ff:20:e9:48:c9:db:60:3b:3e:fa:1c:df:
f0:f6:44:c5:a9:ea:3d:b6:49:2d:f4:e2:ac:6a:12:d1:d4:ce:
24:e2:9b:fc:29:e5:fc:60:d1:8b:33:4c:62:7b:03:30:b2:db:
dd:73:f8:5c:14:de:4c:b9:78:7f:75:fd:e8:79:62:31:37:9c:
df:bc:d0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:13 2025 by rpki-client