Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: GWbtTvGrEDebLr9enWt06PtZRVfOK2sq0RZFftKlkqQ=
Subject key identifier: 68:41:C5:F8:BA:FC:AF:22:D2:01:A6:7B:29:9E:5B:47:2D:7F:3E:CC
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 0199FE46B1D374EFD6B27FE1F9312140EED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 16FF
Signing time: Sun 19 Oct 2025 21:01:09 +0000
Manifest this update: Sun 19 Oct 2025 21:01:09 +0000
Manifest next update: Mon 20 Oct 2025 21:01:09 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: GVQAQBGlubh++W8LVx3EwRYHd6y+OeUhJ++SBKXKPTc=)
2: EhgF2mlZkTj1FsMim3C6v7cm_Vw.roa (hash: AvgglEwZVk2/q4AkVtm47F0tRAyngMt6ySeFX4JReQo=)
3: MiQ5lO70RTIllrRi3q-oV9hjYQY.roa (hash: bCltxRSzrKGlzGDkjY4BpBmmHNltm/4kHnZFojNlryM=)
4: USr1BZseWrfiddVmQ3oagoYeVS8.roa (hash: fHK4bL/1/KZuBDBsjanJjPnUX5OQraHpiXiVTlsikY0=)
5: YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa (hash: fh8nT5vZdM5ZHaPxQ043knM/D5f5HwhE2yBZCYzTFqQ=)
6: afEdQgqnbCftaot9zEVr5N_KEik.roa (hash: Lhf9vxXJqsESp4nJxNUJAzjKFEVMzT7S69LVaasmd6w=)
7: rELj50bmqX-dlIZz4LmRngTG7Ls.roa (hash: Dvzjy4JJ4c7OB88K3L17CIigy3BXYYRK2W4QmjOw5Z0=)
8: tzvqdjfI-5GkWfLXDw0rhlyGwjE.roa (hash: WRtCEE9bn80NcIoJC83Nzrz1w5Lqw7rz3krWgHW5q2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:b1:d3:74:ef:d6:b2:7f:e1:f9:31:21:40:ee:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Oct 19 21:01:09 2025 GMT
Not After : Oct 20 21:01:09 2025 GMT
Subject: CN=6841c5f8bafcaf22d201a67b299e5b472d7f3ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:2b:f3:23:ce:1f:98:da:ec:c1:d3:4a:45:
b7:f8:1c:fd:c5:3d:77:7a:c7:96:0f:33:62:f0:50:
21:40:0d:9d:f8:3c:99:e4:6d:d1:03:a7:e0:8c:6f:
71:1f:93:bc:3a:ee:0a:37:82:cf:c4:71:23:9d:98:
bb:35:cf:ce:80:18:cc:f6:1c:19:48:7c:b3:18:40:
24:69:b8:1b:51:a1:97:7f:33:37:e0:cf:45:10:82:
e8:7d:f3:13:9c:53:01:95:b6:54:a0:8c:bd:db:a8:
5b:d4:c9:b9:ce:2b:8c:32:47:c7:63:f7:0f:b4:ad:
ab:d8:24:1d:e3:86:67:68:9c:b4:fd:84:99:6a:a0:
9f:4e:2f:fb:ce:da:1a:88:5b:9f:bf:6a:2c:73:cb:
97:f9:55:b1:e8:1e:87:cb:fe:50:dc:6c:b4:3f:6f:
5d:fd:2a:33:f6:0d:5d:b7:fe:4e:d6:cb:93:f0:6f:
76:61:be:7c:08:db:5b:a4:c0:b3:b9:49:8f:dd:bc:
5d:90:bf:aa:fd:13:8b:5e:11:d0:a4:d8:61:7d:24:
c1:d4:69:04:8a:57:89:63:69:30:68:ac:93:c0:7a:
e9:94:c2:de:1e:ac:88:2a:fb:87:c4:4f:a3:d2:0b:
db:24:48:02:20:a3:05:e7:ff:40:f9:85:0f:91:d5:
04:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:41:C5:F8:BA:FC:AF:22:D2:01:A6:7B:29:9E:5B:47:2D:7F:3E:CC
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2d:06:77:98:c1:85:70:08:3a:ad:7f:ba:bb:e5:49:15:b5:
a9:22:87:f6:81:05:f6:80:b5:b3:8d:3b:e6:2e:6c:c0:c8:d5:
ad:1a:e0:a7:b4:b1:53:2e:d0:a0:9c:4a:aa:e9:57:b6:8d:0a:
2d:92:8f:36:54:86:0a:9e:3f:44:e9:2f:fb:ed:ad:6c:00:ba:
fa:27:e4:74:f1:cc:20:b8:1c:08:84:38:a7:92:01:ec:3b:26:
55:69:5b:69:26:06:36:a1:e2:c5:b5:a3:92:d5:55:99:6c:70:
f1:ad:6c:33:fa:9e:25:72:76:21:bb:92:8b:1c:cc:89:bb:5d:
e1:c9:37:3a:a5:83:6d:3e:11:72:b8:bc:9a:e2:04:c8:89:3d:
1f:d3:ef:de:93:7e:cf:7b:a4:86:35:11:5b:4f:ef:bf:6f:c9:
41:20:47:86:22:77:78:0a:6d:f8:f3:87:3f:28:b6:5f:c2:c4:
58:30:da:47:b7:b3:63:13:ae:33:a8:e3:88:70:2e:d2:ec:12:
70:61:c2:69:a4:f9:db:79:ec:5b:02:3a:c5:89:cd:f0:f1:26:
8b:fb:4f:6e:63:83:9e:08:36:eb:27:3d:1d:f9:0a:6a:56:04:
9a:94:8d:29:bd:33:0a:df:b2:b9:00:c9:ab:91:95:75:be:79:
d0:ae:2e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:02:30 2025 by rpki-client