Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier: PM9P8h5dDPblWaiL8KryenS7fKcGJIuS0NW1zjxy/0Q=
Subject key identifier: E0:64:D3:76:C1:CA:43:0F:76:86:7E:70:BC:EA:B6:42:41:81:82:74
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 0199FF2259CBBF61D252936F65AB7B378B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number: 16EE
Signing time: Mon 20 Oct 2025 01:01:05 +0000
Manifest this update: Mon 20 Oct 2025 01:01:05 +0000
Manifest next update: Tue 21 Oct 2025 01:01:05 +0000
Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: SA4N0Si3dGSbNprQMv95BF0oepaxlwRmv2nWBKAt4qU=)
2: JjxG5JBV-4sLSO9ydbLM49BAtzE.roa (hash: cqElNxOa+f907x34fYoberfp0CD4VgTc1FzaMtoENtc=)
3: tkrTEHat3bSdWp0mTcT7h8ohu0E.roa (hash: 9f4QW5MnJXddCGseXoiWv8iW8ue5LxII6QEIhlpZ0fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:59:cb:bf:61:d2:52:93:6f:65:ab:7b:37:8b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Oct 20 01:01:05 2025 GMT
Not After : Oct 21 01:01:05 2025 GMT
Subject: CN=e064d376c1ca430f76867e70bceab64241818274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:50:e2:8f:ee:79:ee:48:7f:4a:56:0f:d8:27:
af:6d:ee:20:ae:be:e7:06:75:12:bc:39:cd:a3:b8:
77:da:47:be:dc:4c:54:e6:a1:56:d2:cd:10:d1:84:
72:20:78:e4:05:e1:9e:17:11:41:27:5f:be:b8:dd:
02:27:d5:ea:16:5a:4c:6a:25:e6:cb:fb:1a:83:9e:
47:2c:1c:52:c8:1e:03:35:a4:96:7b:91:d0:32:4e:
57:e7:d2:84:a1:4c:af:7e:55:d4:85:ee:25:6b:0e:
01:1d:98:61:35:51:11:08:c2:4d:f5:28:9e:c7:fb:
be:67:32:4d:bc:c7:da:24:c4:43:28:89:6e:eb:ff:
39:c1:53:b2:11:9c:30:14:f0:dc:d8:cb:f2:a4:a4:
ef:ff:cb:92:a4:25:23:d4:ef:f8:4d:82:ee:7d:ff:
9a:06:fe:9e:96:d4:31:7d:37:c6:17:c9:36:4b:51:
4c:a9:98:7b:b6:9c:ee:ce:fb:dd:72:84:92:55:af:
e6:6c:ef:85:28:48:a3:e4:dd:5b:ef:0a:c0:08:04:
e2:06:6e:ea:26:d6:d8:96:6a:d8:3f:7d:4c:40:a1:
bd:b5:9f:68:e8:f1:db:5b:e3:ce:b3:90:e0:7c:08:
26:47:5d:bb:79:90:2e:c4:a0:9a:bc:3c:3c:ef:de:
39:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:64:D3:76:C1:CA:43:0F:76:86:7E:70:BC:EA:B6:42:41:81:82:74
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f5:f3:fd:ec:91:b2:1c:8a:44:9f:5b:05:e7:90:9a:ac:6b:
10:7f:9d:bd:c5:65:32:0f:06:26:d3:ad:0c:13:4f:93:2c:8e:
58:bb:d2:b1:83:9b:86:fb:b9:18:f7:e1:fd:29:42:8c:32:fa:
ab:1e:d8:c6:d4:78:4b:66:a8:da:d0:c6:e8:47:3d:4e:65:1e:
d5:1d:7d:68:46:20:ca:a5:33:6d:c2:f7:1e:aa:7b:a9:49:3f:
66:5c:22:1f:3a:61:86:8c:e5:88:6c:73:1c:9e:09:0c:83:86:
cd:79:93:d0:6e:2b:8a:69:aa:39:de:2f:57:b5:53:73:28:db:
86:90:0d:d4:72:00:66:99:9f:0e:9d:e9:da:b3:23:a5:55:ac:
f8:15:dd:35:cb:11:e4:15:88:2b:fb:0e:3c:5a:70:e1:9a:9e:
4f:88:57:92:93:36:e5:f2:41:55:ef:ea:d9:09:a1:52:25:9c:
26:b8:bd:d6:5b:d6:00:f5:5d:18:26:5b:a1:fb:38:aa:b5:4f:
7a:54:98:48:d2:da:13:f4:c4:c1:5f:1e:6c:77:40:36:f1:0a:
6b:6e:da:7c:e0:fe:1e:6f:46:c4:ec:50:d1:f1:98:8c:31:7b:
4b:74:6f:04:1f:44:e9:72:be:84:de:a6:9c:ed:77:98:ce:63:
16:de:b2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:28:05 2025 by rpki-client