Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
File: 7v5LdSmMAHIB5xyAalyMCee3dBE.mft (raw, json)
Hash identifier: YVQjnJsZslTho/Vfq3kN95SGS5p+y0VzN9/D7WDbLm4=
Subject key identifier: 20:AD:6D:BF:3A:15:3B:56:31:FD:1E:E2:6C:D8:59:2F:48:31:50:B9
Authority key identifier: EE:FE:4B:75:29:8C:00:72:01:E7:1C:80:6A:5C:8C:09:E7:B7:74:11
Certificate issuer: /CN=eefe4b75298c007201e71c806a5c8c09e7b77411
Certificate serial: 0199FBEAB900B11B0D2A2D07BABCC83A9A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
Manifest number: 0E
Signing time: Sun 19 Oct 2025 10:01:27 +0000
Manifest this update: Sun 19 Oct 2025 10:01:27 +0000
Manifest next update: Mon 20 Oct 2025 10:01:27 +0000
Files and hashes: 1: 7v5LdSmMAHIB5xyAalyMCee3dBE.crl (hash: 9B4YlstFu2913PAHMtiOcc2ppXDeVoODlpfR/PAXUxg=)
2: PefmmKkeHckF1TFIBsiHu-KGY9A.roa (hash: tPgDzgEVBJrCaqPTjl+G8vf08ZvCLU8Bf3lj6k6XGBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b9:00:b1:1b:0d:2a:2d:07:ba:bc:c8:3a:9a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefe4b75298c007201e71c806a5c8c09e7b77411
Validity
Not Before: Oct 19 10:01:27 2025 GMT
Not After : Oct 20 10:01:27 2025 GMT
Subject: CN=20ad6dbf3a153b5631fd1ee26cd8592f483150b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b3:91:06:16:5a:f3:79:ff:3d:cb:43:5d:9e:
28:70:59:0f:06:4f:fa:58:44:e5:7c:89:85:1b:2c:
c3:24:dc:b2:26:c4:c1:e2:3b:02:cc:2b:09:a1:8c:
3e:cf:57:c6:da:a2:2b:c6:de:38:20:21:8a:26:b5:
21:9d:49:fa:ef:4c:68:74:a9:26:6e:bf:82:b8:fd:
33:0b:b1:de:b3:c2:3a:1d:01:ad:cb:47:c5:af:c5:
49:b5:e6:94:6d:48:c2:ab:ad:6c:01:2d:21:95:fb:
ee:29:56:2c:29:f0:d2:ea:c8:f7:62:f8:ee:f2:4e:
d6:bc:d7:e4:fc:bd:69:46:ef:80:b6:8b:3a:f6:70:
26:a3:c6:5f:c7:96:a3:99:80:c0:50:c1:29:21:da:
07:cd:88:c1:12:50:c1:ee:e3:c2:00:92:73:4b:fb:
72:08:3c:41:dc:f4:aa:0c:73:ea:98:a2:06:a7:3d:
e2:11:1f:10:0b:fb:4f:08:1f:60:d9:73:8e:33:42:
47:0c:ec:f1:e6:2f:a2:fc:f0:28:2b:c8:26:7c:8d:
62:0c:20:76:19:df:63:7e:2c:17:da:1a:e1:f3:62:
13:9b:22:0c:cb:1a:e8:50:98:ef:b1:e2:2d:cd:e3:
cf:b1:f9:26:04:6d:79:92:38:ed:49:a2:84:5f:5f:
cf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AD:6D:BF:3A:15:3B:56:31:FD:1E:E2:6C:D8:59:2F:48:31:50:B9
X509v3 Authority Key Identifier:
keyid:EE:FE:4B:75:29:8C:00:72:01:E7:1C:80:6A:5C:8C:09:E7:B7:74:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7v5LdSmMAHIB5xyAalyMCee3dBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e0b7a-af73-4d9b-bd74-adc7551f667d/1/7v5LdSmMAHIB5xyAalyMCee3dBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:8d:81:3b:a3:30:78:46:c3:de:d3:f4:dc:da:2a:86:35:01:
d9:10:ce:7d:50:a8:5c:06:40:fb:b1:d6:89:ce:af:9b:42:ae:
2f:7f:26:f8:d6:9b:70:8e:ad:92:4a:ce:8a:1c:65:0b:33:08:
30:c3:e5:e3:23:cd:ed:ba:03:5c:78:1d:bf:ce:3d:12:27:0c:
53:ea:a4:45:19:bc:e6:b1:47:2e:6d:e8:ac:e2:b0:f2:ea:a5:
bf:3b:21:b1:0d:fd:d8:14:8e:dc:8b:a7:b6:e8:40:e8:3d:76:
92:a0:b8:fd:77:e7:bf:b6:87:ea:ba:d2:29:58:85:14:0a:8f:
07:e9:5d:07:c4:fd:7e:99:2b:c4:1a:f1:82:3f:69:b6:cf:ca:
08:36:44:65:61:46:1d:47:17:f0:dd:6c:1a:b3:fe:f8:53:0d:
f5:ce:d1:fc:db:a1:dd:47:5c:ea:d5:0e:ee:28:9b:02:e7:e3:
95:d5:5f:c9:7e:eb:cd:61:53:9e:28:bc:17:31:81:df:66:91:
bc:27:53:b7:69:be:75:c8:f5:3a:c3:c5:b2:b6:ac:01:7e:1c:
eb:46:3c:1e:bf:79:1a:63:d6:4c:2e:81:5d:49:eb:4f:39:e1:
df:65:26:04:3f:4d:5e:d4:30:0b:1b:81:d0:80:53:69:34:d0:
33:28:22:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:45 2025 by rpki-client