Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
File: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft (raw, json)
Hash identifier: GVFRrLOh6hFaobeFJ45itwUdqysv+WrxoQNplESbVsc=
Subject key identifier: EE:A5:AC:F2:3A:79:AF:CC:D9:33:2E:7B:51:83:B1:65:26:1F:67:8B
Authority key identifier: 6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
Certificate issuer: /CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Certificate serial: 0199FCFD31C5D427FDD640152F61B5E7E482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 15:01:15 +0000
Manifest this update: Sun 19 Oct 2025 15:01:15 +0000
Manifest next update: Mon 20 Oct 2025 15:01:15 +0000
Files and hashes: 1: SE867Co1dWwT9rn_iwUHdqZbJb8.roa (hash: gDn91MwxNsmg9NA7daGFqFT1lPwuLwOn38cGeI8H8VA=)
2: a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl (hash: svXHlxRcj4cftIxxEVwNmx5L3G6YCuzms6lPToox4Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:31:c5:d4:27:fd:d6:40:15:2f:61:b5:e7:e4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb9125b8a10d322348681a2d2ac7d67d2ad2535
Validity
Not Before: Oct 19 15:01:15 2025 GMT
Not After : Oct 20 15:01:15 2025 GMT
Subject: CN=eea5acf23a79afccd9332e7b5183b165261f678b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:86:f3:b7:b7:15:22:9d:f0:c3:d2:3e:ed:
e5:05:db:93:4b:83:79:5e:10:8e:ed:5a:8f:dd:01:
8c:a2:55:f5:6f:27:b5:18:88:6b:bf:b1:68:86:97:
7a:40:eb:a2:42:86:d6:50:7d:43:30:33:f2:6b:bb:
ef:ab:d7:a7:97:b9:d2:9e:d5:29:64:3b:0d:46:27:
e5:2a:a0:8b:29:7f:2e:b4:09:df:33:7c:2d:4b:64:
26:45:b8:a4:ea:8e:f7:43:7c:90:01:a2:6a:03:1d:
19:af:5f:60:33:bf:8b:66:77:9f:3d:37:c8:35:01:
4d:42:11:42:1a:11:b2:2a:ed:36:b3:a3:e3:91:5e:
15:21:a6:0f:f9:08:37:37:29:82:35:67:d2:6f:d9:
4f:d6:2f:a7:be:36:cb:ea:ac:ef:f0:0c:53:44:2c:
62:18:e8:4a:0f:02:9d:a5:80:77:63:2b:fb:29:54:
de:97:be:db:d5:cf:fc:53:ba:05:58:45:a2:16:50:
35:8e:65:61:cd:b4:0c:65:e7:00:b8:0f:46:a4:b9:
5a:5c:d9:c3:bb:d8:34:99:99:49:86:b7:41:9c:4d:
eb:d5:3a:38:d3:3e:1b:9d:29:0c:42:90:be:cb:6f:
e3:3b:dd:32:88:ba:bd:a4:c0:14:b9:05:08:ac:de:
54:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A5:AC:F2:3A:79:AF:CC:D9:33:2E:7B:51:83:B1:65:26:1F:67:8B
X509v3 Authority Key Identifier:
keyid:6B:B9:12:5B:8A:10:D3:22:34:86:81:A2:D2:AC:7D:67:D2:AD:25:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/4b28b8-77f6-46d3-b8d5-83bc413a048d/1/a7kSW4oQ0yI0hoGi0qx9Z9KtJTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d1:07:65:73:0d:70:11:e6:ea:1b:d3:e3:df:f6:f6:73:08:
8c:ce:78:a6:b3:0f:6f:05:51:e3:48:d6:73:7b:30:b2:54:d4:
9e:3f:d5:5d:de:58:59:a6:98:86:1a:4c:06:32:c0:71:5e:a0:
97:d9:d4:79:ce:c2:83:96:4e:40:9c:87:af:4d:75:2b:2b:1d:
8a:d4:af:58:0f:89:12:87:5b:6e:d6:34:bb:56:98:89:0b:04:
b1:ae:05:dd:70:90:3b:f7:82:a0:96:75:35:b8:e0:f8:d3:7e:
00:43:cc:13:92:96:68:55:f6:6c:9d:47:03:69:a5:3b:f8:1c:
25:3c:41:a4:6d:6a:7f:d3:34:74:23:69:65:bb:7c:71:a8:74:
36:cc:c1:74:30:b1:2d:c4:26:5a:f1:74:09:c0:da:bb:42:79:
b4:36:cc:45:57:c4:50:9c:11:6f:bc:af:53:dc:c4:da:c2:01:
55:d3:68:7f:2f:6b:99:27:b9:e0:9c:de:ca:e1:4a:70:41:4a:
70:17:b2:30:d6:d1:22:dc:dc:7b:88:ee:6e:7b:f0:75:9b:c4:
63:86:ec:27:6b:20:90:23:1e:b9:f8:e5:48:1b:71:94:63:27:
f9:7e:73:85:e0:af:c7:58:ae:3e:37:53:cf:8c:4f:b9:e7:6c:
c6:1f:f5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:05 2025 by rpki-client