Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: 7TK4FmkJB5dptovkbIT7h0/NSFuyhfEj4chV2LWUWDg=
Subject key identifier: CF:C6:2C:37:77:00:60:7E:AD:58:C8:24:21:A9:98:5F:71:6A:02:64
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 0199FE46C8696D1BF73AFD1ECCD04AA51957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 14CC
Signing time: Sun 19 Oct 2025 21:01:15 +0000
Manifest this update: Sun 19 Oct 2025 21:01:15 +0000
Manifest next update: Mon 20 Oct 2025 21:01:15 +0000
Files and hashes: 1: 1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa (hash: P+X7bk4xVC2G2mv0GzrMdTNr5FMbR6w5BMTW58Igvfs=)
2: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: jgsTn/hPcjJXl8sX/43D1QpiPTDPsRkog++AgAES27o=)
3: _GP8StenfvBJOKnQr7M_P7qAzf4.roa (hash: kdSVEH13j0prqXPkHz8Kr5u7PPDHiQCPmIC83dYc1oc=)
4: fzev7_a9OYyMIFNofQlw5RVoFZM.roa (hash: 10wzAQdx79ulrqhu3JqofOZW6+gKOGXZaHawTm1W9iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:c8:69:6d:1b:f7:3a:fd:1e:cc:d0:4a:a5:19:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Oct 19 21:01:15 2025 GMT
Not After : Oct 20 21:01:15 2025 GMT
Subject: CN=cfc62c377700607ead58c82421a9985f716a0264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:76:28:83:e1:c7:60:93:b0:a5:9b:a4:8b:4a:
47:9b:e1:1a:f8:79:e3:f3:a5:b2:00:c9:ee:83:d9:
09:3e:0b:43:42:5d:37:13:aa:0d:7d:57:e9:4a:d9:
f9:05:7b:a2:16:4c:d4:a7:e7:04:ae:a3:0e:7d:7f:
c0:1d:1f:d1:f4:2d:fe:dc:ab:78:34:b2:3d:15:21:
25:07:00:4b:74:84:2d:e4:31:f6:78:05:13:ad:3c:
06:d9:6b:ca:fa:c6:c4:0d:b4:ef:ea:69:af:91:eb:
d4:30:79:9f:d5:f2:e1:07:f1:e4:f7:9b:be:e8:62:
6a:5a:96:99:4b:ce:0d:e5:15:24:b2:23:62:6d:5c:
58:fa:22:84:89:f4:92:b6:3d:6d:44:48:c0:fb:f8:
48:c7:81:59:cb:49:6b:b3:89:87:78:94:6a:32:d5:
63:c4:58:f6:01:1c:70:5b:89:f3:5a:49:f4:5b:07:
dd:ae:f6:0c:1b:69:11:10:fb:bb:70:6e:27:6c:35:
fb:78:a7:71:ed:6f:fd:c0:b1:65:b5:61:35:18:87:
ec:67:9b:f2:d4:b7:bd:b7:54:dd:1d:d7:3e:00:3b:
bf:b8:7a:02:94:5f:e3:98:22:80:f7:05:7e:45:76:
79:d8:4f:e7:7c:1a:af:7b:cc:55:60:0c:37:b4:2f:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C6:2C:37:77:00:60:7E:AD:58:C8:24:21:A9:98:5F:71:6A:02:64
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:21:4c:75:d6:ac:16:d6:48:55:1f:40:30:e1:83:d8:b4:18:
d0:81:ec:37:a7:e9:5e:c7:8c:56:dc:c6:25:21:60:69:11:42:
c6:ad:61:4c:9d:be:04:39:a3:a4:29:42:6d:22:42:db:68:39:
b1:b7:ab:53:06:b4:2f:1d:be:5c:b4:a2:2b:86:85:59:9c:18:
53:a0:ed:f8:e3:3c:07:29:eb:5d:31:2d:04:18:43:13:ea:7a:
2c:74:f0:36:af:9d:b8:72:05:b8:e9:69:52:ea:5a:13:d6:c1:
03:54:ee:11:9f:20:64:e5:4a:70:78:47:c6:0c:c6:7c:56:61:
89:09:0f:75:8a:cb:44:ca:48:9b:90:6b:7b:f1:4e:b8:aa:d5:
43:c0:d7:1a:7e:9d:9d:f7:bb:27:cc:57:60:6e:ae:7d:51:a6:
3f:c8:34:53:aa:38:01:3e:75:72:65:13:88:3b:23:60:6a:8a:
d2:c3:61:5b:87:e6:57:9d:52:a6:13:a1:d3:c1:7e:81:3b:6d:
30:ec:d6:67:ed:50:3a:05:82:d9:e6:28:ac:5b:fc:5a:77:66:
34:1b:14:ca:1d:ab:7c:ae:79:f1:eb:66:62:24:20:51:4d:a5:
7b:2d:be:a7:c9:52:5f:1f:d0:31:8e:49:da:95:4f:cb:3e:ee:
b3:f9:a0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:48 2025 by rpki-client