Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
File: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json)
Hash identifier: oEXDKR3D7WgIfyrxT7xFbgJKnNyeCm9p1hEGch6Dxcg=
Subject key identifier: 69:16:91:23:2F:4D:30:F9:10:D8:77:EF:75:1C:82:75:90:08:17:F5
Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
Certificate issuer: /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Certificate serial: 0199FD3407994DD5F7A979036021959C50D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
Manifest number: 0F25
Signing time: Sun 19 Oct 2025 16:01:09 +0000
Manifest this update: Sun 19 Oct 2025 16:01:09 +0000
Manifest next update: Mon 20 Oct 2025 16:01:09 +0000
Files and hashes: 1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: AUOERrY0GgV5fYudnofhumT74zJ9RC0GICd1hSDKBXA=)
2: Oa1APz8Z3VqUSkn7pmEQCd0lKVI.roa (hash: QtzoauH/RzUtDgfvRpOYRMXpvVGDj4TzJKcxAck6c7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:07:99:4d:d5:f7:a9:79:03:60:21:95:9c:50:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Validity
Not Before: Oct 19 16:01:09 2025 GMT
Not After : Oct 20 16:01:09 2025 GMT
Subject: CN=691691232f4d30f910d877ef751c8275900817f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:2a:c1:d4:9c:15:54:2f:ce:02:cb:f0:67:
e8:e8:e2:46:a5:e2:3b:2d:6a:58:18:1f:cb:29:8d:
0f:65:fa:5b:e9:38:ba:58:d2:cd:ab:4d:35:4e:03:
7a:ef:5e:c5:93:22:5a:23:80:e5:d4:e6:ed:18:84:
48:1c:85:32:93:a5:7a:27:a6:85:9c:6d:34:6b:91:
ea:92:99:29:a1:e1:8d:af:a9:20:5b:0f:3b:bc:cf:
07:ff:06:42:5c:c7:e4:ce:b6:e1:0c:21:f9:1e:67:
e5:4a:1e:f2:86:40:52:61:d4:eb:ee:bb:76:ed:bf:
fc:4d:0d:22:81:05:4b:66:9a:82:fd:d7:a6:7f:39:
25:71:c0:3b:0b:f9:84:69:52:03:5c:7c:b4:ac:a1:
be:96:9b:27:cc:4f:2c:8a:45:a9:94:b2:25:db:5b:
ab:58:a8:70:21:bc:8d:35:f2:d2:2c:0a:d0:f2:e7:
6a:0d:ea:a1:bf:01:f2:90:29:c2:b3:92:f1:58:60:
82:a9:a4:12:cd:db:19:64:c9:58:a2:1b:f9:a3:10:
17:36:ec:77:d2:83:8d:e4:16:7f:88:44:38:b4:3f:
89:41:67:4a:75:9b:5f:d0:02:fe:ea:4a:27:94:c2:
57:67:8d:a9:a3:86:12:1c:0d:14:c6:d1:3e:22:32:
30:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:16:91:23:2F:4D:30:F9:10:D8:77:EF:75:1C:82:75:90:08:17:F5
X509v3 Authority Key Identifier:
keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:98:eb:d2:10:c6:cb:7a:a0:b2:41:7e:c8:70:db:fa:64:d6:
f7:64:e2:ab:45:60:67:b5:67:37:73:38:c0:b0:59:af:bc:42:
24:e4:08:00:ec:1b:ae:e1:85:4e:06:8b:2b:5f:d3:de:93:c3:
8d:26:40:38:d7:e1:50:37:72:ae:b7:93:9e:7c:00:de:85:e7:
cf:e9:da:6a:57:16:7f:f2:2e:93:43:33:44:51:1d:71:dc:06:
4c:f4:63:2e:5a:d6:65:24:83:63:2c:86:7b:14:48:a1:3c:99:
b1:40:91:78:a3:5c:4b:90:a3:6a:cf:26:74:5f:27:a0:4b:54:
3d:05:c3:1a:a5:7e:0e:60:6a:87:d1:26:fc:c0:cc:03:23:d3:
37:20:78:28:10:33:db:65:61:93:cb:1d:26:a6:e6:09:da:2e:
4f:05:48:3f:63:72:75:55:5d:60:30:be:2c:bf:7a:0d:b6:d9:
4b:b3:11:b9:53:65:f1:3f:2f:7e:9a:19:3e:50:cc:ab:78:45:
c7:c4:bd:cd:81:dd:f9:83:50:5b:4d:de:a1:00:dd:94:84:b5:
d5:a6:01:ba:41:d1:fc:dd:dd:e7:9c:2a:a7:a4:6c:ac:02:57:
bc:a8:5a:7a:e2:cf:33:39:71:6c:93:cd:c6:7d:70:31:f7:e5:
be:d8:24:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:33 2025 by rpki-client