Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
File: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft (raw, json)
Hash identifier: Znj+p6uCtMQCJ3BDCvQHtTj07Cm9oKvYjroQ6RLtGpo=
Subject key identifier: 0C:82:5F:9D:C2:5A:27:AC:2D:78:60:D6:F0:4E:24:0E:B1:28:27:E2
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Certificate issuer: /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial: 0199FC583FBEB59E72921DB7C20DB301DCAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
Manifest number: 1322
Signing time: Sun 19 Oct 2025 12:01:05 +0000
Manifest this update: Sun 19 Oct 2025 12:01:05 +0000
Manifest next update: Mon 20 Oct 2025 12:01:05 +0000
Files and hashes: 1: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl (hash: FaUHUV88h4mfAxY9D7ewhCeqYWpGDpzZgF775x824LA=)
2: UHZDSCwg4-DjCTw2ThSV9YMjtY8.roa (hash: yjuNgWENrQcHvxeDeJWLJxEQH/+1ANaZxCVsNSQeLLY=)
3: iXVDb19kvukiKPCGR7Xk4m4waFo.roa (hash: doLRr6Uuft22RZholuz/UG1fqLztwMyrNWgGHx261cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3f:be:b5:9e:72:92:1d:b7:c2:0d:b3:01:dc:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Validity
Not Before: Oct 19 12:01:05 2025 GMT
Not After : Oct 20 12:01:05 2025 GMT
Subject: CN=0c825f9dc25a27ac2d7860d6f04e240eb12827e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8b:b0:ff:cf:d0:cb:28:62:ee:4a:db:a5:cf:
58:dc:4f:ab:8a:d3:3f:30:af:39:e5:3a:9b:8a:d9:
d8:bc:e6:29:53:76:78:47:39:ba:88:f0:a3:2f:b3:
2f:d4:81:c1:46:04:16:5a:ae:25:28:da:7c:f7:d5:
aa:76:0f:29:ef:e2:87:57:36:87:6d:d0:de:65:10:
bd:95:7d:d0:07:51:dc:04:92:c1:5e:0b:d7:b9:9b:
54:34:fd:82:51:6c:ef:ef:26:21:9a:fc:59:6d:cd:
5d:9c:57:5b:2f:e5:18:bc:62:42:30:c3:b5:a2:7c:
8b:48:bb:c7:04:31:5f:84:c3:97:ad:57:6e:2b:9c:
ea:9d:a1:27:23:38:cd:7b:23:a2:bb:26:72:07:fa:
52:00:6b:ad:f9:f2:2d:8a:1c:78:17:29:d0:39:dd:
a9:9b:09:7d:15:0c:6f:6e:44:20:28:9a:05:57:82:
68:8d:a6:50:4e:9e:49:07:d0:cf:dd:79:49:55:2e:
36:2b:9b:41:80:b0:81:1a:30:87:eb:56:75:fc:16:
fc:93:d6:ee:10:51:71:1f:5b:4b:93:d8:a5:a3:a3:
9e:67:c8:91:e9:a7:f9:03:09:52:8c:9c:b6:36:76:
1b:c2:be:ef:51:90:7c:80:5b:76:62:d8:70:e1:9c:
57:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:82:5F:9D:C2:5A:27:AC:2D:78:60:D6:F0:4E:24:0E:B1:28:27:E2
X509v3 Authority Key Identifier:
keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:fe:bb:c0:67:16:7d:28:24:82:79:aa:a8:0b:b4:25:c6:f9:
2b:43:70:b3:c5:d2:61:1f:75:69:34:2c:4e:5f:5b:f2:4e:2c:
73:af:1c:60:24:e0:b0:ae:bc:0d:f3:ae:50:a6:5f:f7:40:d1:
81:f1:9a:04:25:89:97:da:ba:5b:5d:a2:88:53:8f:c8:fb:cc:
a3:f4:8e:00:50:ff:b2:d6:f9:bf:a2:6b:8e:6d:aa:97:88:4b:
f1:73:17:a5:d9:ba:16:62:dc:fa:cd:b4:06:07:38:34:ba:14:
8f:71:a9:b4:2f:a8:ec:e5:d1:20:23:04:4b:88:ee:dd:2c:d4:
af:12:5f:80:95:9f:ad:92:a9:df:09:04:1b:4b:55:ab:da:8b:
32:77:0d:c8:38:42:11:4b:ad:fc:55:04:cb:52:da:fe:59:d3:
4f:cc:0f:40:8e:7b:66:72:2f:e8:29:b4:c6:96:48:4a:f1:18:
d1:91:10:c6:1a:76:f0:32:80:d9:52:92:06:43:54:f7:9d:7f:
b3:d1:de:7f:c4:a3:b4:8c:79:fa:f2:b1:8a:96:b2:b2:0b:d0:
37:0c:b5:b8:4b:0f:9f:01:fc:ba:db:f8:89:1d:45:11:17:2f:
fe:dd:6e:9c:38:b2:36:52:39:9f:7f:0f:c2:34:c0:af:86:2f:
a7:ba:1e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:36 2025 by rpki-client