Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
File: 7We7dYi4LXDYy3PU5FF39n7O8hM.mft (raw, json)
Hash identifier: cyeuFJ7R/tg3Pp0C7HIF8G+BO1As9BKrmzvT87Jh1Mw=
Subject key identifier: 01:42:61:BC:62:A1:2B:BC:D0:00:73:83:49:BD:31:7B:D3:69:E3:D0
Authority key identifier: ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
Certificate issuer: /CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Certificate serial: 0199FAD849DD5D720ABAE6C9B75A4D5BF126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
Manifest number: 0424
Signing time: Sun 19 Oct 2025 05:01:42 +0000
Manifest this update: Sun 19 Oct 2025 05:01:42 +0000
Manifest next update: Mon 20 Oct 2025 05:01:42 +0000
Files and hashes: 1: 7We7dYi4LXDYy3PU5FF39n7O8hM.crl (hash: XRLOWeW+5aqKmw1OqWtWADe0C3iESCkoLUm9hjFXIbg=)
2: c1FFC3CfJTkPpEjudAaQ1kdwfPA.roa (hash: uMTQqmI3sSIjieWva+ZS3Ufjj39UcALTDCZiZLmxyic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:49:dd:5d:72:0a:ba:e6:c9:b7:5a:4d:5b:f1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed67bb7588b82d70d8cb73d4e45177f67ecef213
Validity
Not Before: Oct 19 05:01:42 2025 GMT
Not After : Oct 20 05:01:42 2025 GMT
Subject: CN=014261bc62a12bbcd000738349bd317bd369e3d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:77:93:59:13:3b:51:33:9e:ff:cc:35:20:
de:30:b3:ec:15:d9:55:0b:8b:f8:9d:e1:19:cf:0d:
fb:5c:e0:a8:54:0a:f0:68:45:57:e6:2e:34:84:ac:
b4:b9:8b:09:e5:a2:33:d3:5c:df:71:7e:75:79:e9:
50:a4:34:0f:b3:b3:7f:fa:29:c4:0b:65:e9:95:e0:
e2:76:22:6d:8f:9f:3d:7c:34:47:68:8f:52:13:c6:
21:78:bb:84:64:8c:9d:83:03:76:8d:9d:df:8a:9a:
18:b2:ec:58:e3:86:12:1c:30:4c:b3:8a:3a:73:d6:
8d:fa:3f:11:95:78:64:43:4b:29:03:1e:f2:dd:0e:
16:b3:9b:4e:8d:9d:a1:78:8c:de:56:64:94:c0:3e:
d2:ff:d0:99:22:10:01:cb:12:b4:b0:66:83:d0:58:
f6:e9:16:cb:a3:ea:90:eb:e2:00:3b:9c:d2:e7:9e:
3c:9d:bc:5b:25:02:d2:b0:1c:8c:70:fe:4d:af:17:
5d:b6:f1:8c:31:92:87:f7:2f:c7:c3:2d:70:a8:d0:
19:08:a3:a9:fc:b1:8c:6d:9f:d9:a2:10:c6:ac:eb:
47:74:d6:6a:97:72:98:06:a2:6a:0a:c7:af:7d:db:
76:65:31:72:81:36:46:ca:6c:3e:70:d5:5d:f4:47:
2f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:42:61:BC:62:A1:2B:BC:D0:00:73:83:49:BD:31:7B:D3:69:E3:D0
X509v3 Authority Key Identifier:
keyid:ED:67:BB:75:88:B8:2D:70:D8:CB:73:D4:E4:51:77:F6:7E:CE:F2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7We7dYi4LXDYy3PU5FF39n7O8hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7957bb-61e0-4e11-89b9-1b60df252ca7/1/7We7dYi4LXDYy3PU5FF39n7O8hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:59:b2:76:f6:b7:da:32:61:40:21:6a:0b:62:86:0e:e2:6a:
38:a5:fa:7b:db:6a:35:c7:41:85:8a:73:c1:de:42:4c:12:ea:
d9:7e:18:25:d6:cd:a8:bb:33:99:66:21:ae:c3:ba:24:f0:39:
eb:d3:25:4f:b7:50:fd:a3:d7:37:91:33:7e:35:20:e4:d8:9b:
b1:c6:f7:d9:92:90:75:81:ce:46:b8:df:55:02:5e:f3:ed:84:
cb:fe:67:b6:5d:e0:4e:51:c4:27:53:0c:70:87:ee:70:2c:43:
48:52:b5:9c:a4:97:c7:b6:e4:1b:b1:a4:a3:2a:4e:7c:23:21:
8d:f8:3b:0b:f0:4a:42:d7:af:99:c5:4b:32:a3:76:fc:49:3f:
14:06:cd:9f:b5:31:e9:bc:8d:83:45:a0:87:ac:65:c0:26:24:
77:78:8e:9f:71:46:79:eb:8e:1a:95:4e:f4:40:21:67:d3:4a:
c7:09:ef:ce:ab:fa:77:eb:30:7a:2f:68:de:04:31:02:2e:c0:
df:6a:4e:07:58:c7:8c:00:85:c3:0d:42:ce:f5:b8:55:e7:6b:
50:0c:56:35:45:11:aa:7a:aa:ef:06:4a:28:e5:5d:53:d9:10:
bd:85:f4:4b:6e:50:78:1c:10:9c:a4:b1:d1:e1:ad:05:3d:c7:
f9:b8:d4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:20 2025 by rpki-client