Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
File: i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft (raw, json)
Hash identifier: gCIhffMAf4TIjGgfASXcoq596Y5yGWU4CsYaDRvKtY0=
Subject key identifier: 57:4E:D6:CF:11:E5:04:8E:73:70:8C:6C:6C:62:3F:8C:6B:62:EC:5B
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 0199FAD7C6B4285FC62EB0FBCDA37C2AD1DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
Manifest number: 16EF
Signing time: Sun 19 Oct 2025 05:01:09 +0000
Manifest this update: Sun 19 Oct 2025 05:01:09 +0000
Manifest next update: Mon 20 Oct 2025 05:01:09 +0000
Files and hashes: 1: Z9hqFRirUe4P1_J6cnVrlFkJUwM.roa (hash: 1rB513D+oaDkVMZd5WQl+V38WfLdjvRgbt7ShIhiM3k=)
2: eldr0Gd72QMDJnfB5g3XkvXB5MA.roa (hash: TtEGiXJhnS9J3b71Jc1YsSME+mGa0e8iTuBkAI+Nugs=)
3: i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl (hash: V37ZSXTEnez7H77iWZ1ZnUHIK7JaGUNoWmZmngqxrvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:c6:b4:28:5f:c6:2e:b0:fb:cd:a3:7c:2a:d1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Oct 19 05:01:09 2025 GMT
Not After : Oct 20 05:01:09 2025 GMT
Subject: CN=574ed6cf11e5048e73708c6c6c623f8c6b62ec5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:91:21:41:b1:28:f2:06:c9:76:99:ed:26:
81:c0:5f:6b:29:4e:5d:98:22:c7:15:1d:7f:0b:cf:
4b:a3:21:9e:96:3f:e0:3f:5a:d4:7f:c9:49:fb:0e:
68:0a:5d:5f:c7:22:e8:ae:81:06:1c:ed:e4:66:fc:
6c:67:67:99:48:76:84:61:86:0a:b5:6b:c4:b5:9e:
a8:54:58:a6:01:7b:b5:f0:a1:39:44:b5:2e:0e:28:
24:66:71:d0:02:12:ea:89:4b:f6:ba:ae:40:d5:e2:
1e:f4:2d:12:df:46:7d:63:6e:c9:93:f9:52:31:27:
5b:87:33:b4:13:0d:29:6a:56:17:f6:7d:c1:8d:de:
7b:25:ee:7b:8f:7d:8d:da:6b:46:95:80:6d:6f:ae:
f6:26:6e:ea:b5:64:90:4d:a2:ee:0c:83:aa:2c:f2:
f5:2e:c7:d5:6b:d0:2e:4a:0a:05:73:55:9b:df:93:
dd:e8:ea:c3:06:95:62:d2:47:33:28:45:9e:1c:aa:
2d:19:51:72:84:cb:a8:68:94:1e:2e:f2:d5:8a:c4:
bd:a0:55:87:2d:8e:74:46:24:5d:e9:87:8d:dc:9b:
b2:96:10:1e:c9:18:9b:31:a4:da:83:ab:05:42:91:
ef:cf:da:5d:a0:f0:52:1d:0c:c5:2b:2f:38:b0:38:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4E:D6:CF:11:E5:04:8E:73:70:8C:6C:6C:62:3F:8C:6B:62:EC:5B
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f5:41:f3:90:0f:96:14:1c:e1:81:9c:36:a4:04:62:e9:34:
a9:ac:0f:77:21:04:ca:6f:fd:c8:8c:3a:01:0b:22:67:f3:0e:
3c:86:fe:61:ef:31:f2:54:6e:b6:be:54:7b:74:e7:a6:b5:ad:
18:2b:b7:af:66:c2:e9:19:3d:fc:81:15:b9:bb:ae:26:69:5f:
1c:0a:03:4a:3b:c2:33:c1:48:96:fd:23:ed:07:26:68:03:6d:
ec:ba:ba:e3:69:a4:5b:09:94:07:8d:c8:e6:a8:20:a4:42:5f:
cb:25:6b:22:d4:34:d9:ae:f0:e4:11:c7:aa:c0:60:b0:9b:4c:
f4:fb:ee:3d:e5:82:d9:19:ee:d4:34:d3:a5:80:4c:bb:3b:e0:
55:d2:87:8b:73:9a:7b:27:34:5f:6d:0f:74:1f:95:9a:4a:01:
7b:d4:17:d6:e7:40:7c:cf:25:53:cb:55:47:c4:40:3c:60:60:
d4:41:87:f4:58:63:1b:5e:e8:f6:7a:79:f1:89:0f:8e:9e:31:
34:4b:60:75:b7:cd:e6:05:39:d0:ff:74:9b:f7:b0:db:33:01:
2f:9f:0d:12:3e:e3:80:01:bf:48:49:1c:f9:30:70:f2:1a:4c:
c7:2f:cf:30:6d:64:78:c5:23:1c:d1:3f:4e:17:db:57:77:de:
98:6e:2f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:49 2025 by rpki-client