Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
File: 0seIZkHuEBvHspX9hvGSP8KD89A.mft (raw, json)
Hash identifier: V4BYMTVycTP/Y8KqTstPM2ZPkr7/HwR7LN2kXdweNys=
Subject key identifier: 7E:3F:A9:FE:B6:8D:91:3E:5B:BB:80:55:B6:13:06:26:38:19:63:FF
Authority key identifier: D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
Certificate issuer: /CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Certificate serial: 0199FCC6B84B5F0B23CF1D62CBCB2F1E1968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
Manifest number: 0A26
Signing time: Sun 19 Oct 2025 14:01:45 +0000
Manifest this update: Sun 19 Oct 2025 14:01:45 +0000
Manifest next update: Mon 20 Oct 2025 14:01:45 +0000
Files and hashes: 1: 0seIZkHuEBvHspX9hvGSP8KD89A.crl (hash: juH5hB525qB5/SAGZ0hvDis4KjVVd6dQUnBis11TE48=)
2: jQGsEYW9nQYMqDgRdjHs5yh307o.roa (hash: ZPgtlYS7YpDV/s/35ryF75mYWk1md56zE0UQWzxn7Gk=)
3: wBQJvFifdoJgqtUNKdp3wlo8l_8.roa (hash: 5Lsfd9g+UNfdFLBlgH3vEAe0fksX3TCnFsgxtR55Zwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b8:4b:5f:0b:23:cf:1d:62:cb:cb:2f:1e:19:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c7886641ee101bc7b295fd86f1923fc283f3d0
Validity
Not Before: Oct 19 14:01:45 2025 GMT
Not After : Oct 20 14:01:45 2025 GMT
Subject: CN=7e3fa9feb68d913e5bbb8055b6130626381963ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:66:9d:27:92:97:c9:e2:b8:a3:f7:82:63:
84:d6:27:2d:cf:12:56:66:68:73:4d:b2:46:dd:12:
cf:d8:20:7d:32:40:af:d1:be:6c:25:6e:86:34:04:
80:61:5e:d7:b0:95:1b:39:60:48:c3:36:d3:54:1a:
39:90:fd:3e:98:78:96:c9:ca:0e:55:df:30:22:91:
a5:19:00:b3:4f:ff:5f:ff:02:7e:c8:17:13:93:e6:
a8:1d:7e:0e:20:32:7d:84:5e:fc:55:d4:88:a5:38:
30:21:65:37:de:b9:9d:fc:cb:11:dd:65:ce:da:4c:
62:cf:35:8a:ec:a4:eb:71:57:d2:e6:c6:71:c6:6e:
7d:4f:3e:77:92:c6:70:43:24:b4:78:f6:69:1e:18:
d6:4e:9a:81:f7:cf:8f:0e:dc:5f:39:ac:40:77:dd:
30:33:eb:4a:d7:3e:28:a8:78:81:5e:c5:23:30:5f:
c5:f0:f1:b0:9d:31:75:50:72:6e:2d:4d:c4:60:76:
68:eb:cd:a8:96:7f:0a:2c:bb:b7:e5:37:4e:dd:01:
ed:13:39:88:6f:e0:0d:aa:50:9b:77:a0:80:98:b8:
98:71:65:00:99:e6:63:e4:b0:b4:09:d5:23:67:2f:
1e:3c:f9:1f:9e:a4:97:fa:7f:e9:b4:a6:aa:9e:ab:
3d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3F:A9:FE:B6:8D:91:3E:5B:BB:80:55:B6:13:06:26:38:19:63:FF
X509v3 Authority Key Identifier:
keyid:D2:C7:88:66:41:EE:10:1B:C7:B2:95:FD:86:F1:92:3F:C2:83:F3:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0seIZkHuEBvHspX9hvGSP8KD89A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4702d8-3eaf-4d7b-a3fe-d89758cad22a/1/0seIZkHuEBvHspX9hvGSP8KD89A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:23:14:42:4e:22:43:e3:50:a2:91:32:ce:ca:76:0f:b1:8b:
c0:b4:4a:69:c4:8d:94:50:44:16:49:6d:e9:94:2c:28:9c:69:
3f:2f:f9:0f:b1:b6:c1:4b:6f:39:56:85:66:a2:a4:e2:17:2f:
cd:ba:4e:43:32:89:7b:9c:b7:83:3f:66:70:bb:3c:f5:1b:d7:
bc:c1:35:77:ce:46:53:28:aa:08:f6:5e:48:aa:89:c2:bc:f1:
15:5c:9f:71:b1:71:5d:3e:14:20:2a:dd:82:53:a4:c6:e4:31:
eb:de:77:60:5f:c1:d1:2a:5f:0a:ee:8c:70:78:b9:4d:a2:f9:
9a:85:43:c9:bf:87:5a:cd:fb:7f:d1:1d:e8:0f:b1:b0:55:7b:
5f:41:e9:81:81:f1:13:c3:0d:a9:07:48:a8:a2:55:4c:16:69:
1e:52:0d:88:3e:ae:22:6f:aa:63:80:4f:67:a7:8a:86:2f:df:
ba:3b:d1:d0:18:e2:ee:3a:0f:50:e8:5b:26:cb:b0:70:f5:99:
1f:aa:7e:2c:94:70:5d:3e:4d:2c:3d:d3:f0:f8:a3:86:34:c2:
6a:7a:df:fe:85:c8:fe:01:33:a3:ff:21:a2:a5:2a:28:bf:2c:
b5:bc:93:91:52:f8:4c:7d:c7:e1:de:55:97:14:dc:09:25:94:
f4:44:b5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:04:50 2025 by rpki-client