Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier: 4ig+sOYs5e6/bNVzi1D2XTdQ8fv7C2vOXf/+yhARQ8Q=
Subject key identifier: 84:33:71:8D:E6:1E:A5:A6:69:86:98:76:88:E5:44:48:DE:27:3F:91
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 019A0110C2B81B293C3DD18453DC7577B345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number: 16EF
Signing time: Mon 20 Oct 2025 10:01:06 +0000
Manifest this update: Mon 20 Oct 2025 10:01:06 +0000
Manifest next update: Tue 21 Oct 2025 10:01:06 +0000
Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: 9QIYuLVoH5FIiOzlzVv2PN4npPo0W+xscRMQeL5pKt4=)
2: JjxG5JBV-4sLSO9ydbLM49BAtzE.roa (hash: cqElNxOa+f907x34fYoberfp0CD4VgTc1FzaMtoENtc=)
3: tkrTEHat3bSdWp0mTcT7h8ohu0E.roa (hash: 9f4QW5MnJXddCGseXoiWv8iW8ue5LxII6QEIhlpZ0fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:c2:b8:1b:29:3c:3d:d1:84:53:dc:75:77:b3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Oct 20 10:01:06 2025 GMT
Not After : Oct 21 10:01:06 2025 GMT
Subject: CN=8433718de61ea5a66986987688e54448de273f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9e:93:6a:d3:c5:ea:96:2b:7d:7e:c1:aa:e2:
63:7b:02:49:a9:ad:b0:e4:52:5e:60:d3:35:8c:d5:
a1:31:0f:7d:9f:42:00:9d:e7:67:b5:ff:f8:8f:4c:
83:43:8a:c5:58:72:3f:4f:c0:95:07:5a:8b:7c:ad:
a0:31:de:f9:39:4a:f2:7b:b5:8f:c0:f5:06:ad:b3:
41:98:94:5c:6c:b1:95:d7:4a:5b:2c:8d:e8:84:cc:
90:0a:94:84:13:91:2b:83:1f:25:da:7a:06:9b:57:
8e:8f:f7:6e:85:ee:65:9d:e9:32:91:39:99:69:70:
e6:e9:4e:7e:1d:76:94:b6:54:72:e6:97:f7:26:9e:
5b:3a:71:c3:8d:7b:43:b7:fe:02:61:82:36:94:c9:
5d:ac:c2:c1:a1:47:dc:66:71:4e:1f:fc:de:46:f8:
0f:bc:12:5b:90:8e:fc:cf:a0:ee:77:54:e8:ce:f0:
6c:f8:60:59:13:bc:34:42:00:a6:e8:27:ee:f8:a4:
8a:da:dc:9d:9d:0c:b1:5c:b1:9a:18:6c:28:2e:93:
2b:fa:15:65:69:fe:fc:57:77:63:33:96:e3:ba:8b:
b2:66:4c:f3:73:82:aa:c5:ec:7d:76:31:35:e8:0b:
07:a4:bb:6b:31:25:bf:3e:ca:a7:ea:2c:a4:92:0a:
ea:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:33:71:8D:E6:1E:A5:A6:69:86:98:76:88:E5:44:48:DE:27:3F:91
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:14:0a:9a:51:03:b4:30:ba:ab:62:c8:e7:8d:17:b7:9d:39:
2e:fb:ec:82:89:41:c0:eb:b2:88:ea:d1:19:70:1b:8d:73:e4:
08:7c:e2:64:e6:dd:bf:84:16:e9:5a:49:68:3c:84:71:fc:2b:
e3:fb:1d:a0:6e:a0:77:89:d1:58:19:bb:b6:7e:6e:c5:f0:1e:
ed:b3:a3:a6:b7:25:aa:be:0c:ba:a0:ce:f4:83:79:6c:78:30:
80:86:72:9e:f0:d9:df:be:e2:e8:f5:3a:a3:5c:7b:d1:f6:bd:
b0:2a:7b:a4:c6:c8:54:f2:c0:c5:6b:42:9f:43:6a:66:42:9d:
77:e7:b8:14:dd:95:ca:1b:6c:49:99:89:3d:81:a4:fe:29:a5:
eb:20:d8:2d:58:fc:cd:85:69:84:77:34:87:54:48:74:b6:e6:
0f:6a:9d:99:8f:ab:49:1e:bc:ad:cb:6e:4a:38:71:b2:54:1c:
88:ca:30:e5:62:de:83:6e:26:88:79:15:0e:56:d0:c8:b6:00:
98:67:ad:01:9f:76:36:9b:b1:e3:e0:4b:91:49:3b:f2:7a:e3:
67:41:70:73:75:aa:fa:df:ba:5e:2e:b2:54:58:8f:bd:4c:28:
dc:c8:3f:dd:15:98:8e:10:74:13:cf:43:84:94:64:54:f6:e3:
ce:9b:4a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:12:07 2025 by rpki-client