Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json)
Hash identifier: seCZ+srtHGvihAcxGYN/eKC9FOC7Vw5Zi6ydvaAF1vc=
Subject key identifier: C4:E5:BC:0F:08:A3:D0:F8:6E:9E:EF:4A:8D:68:AB:FD:FB:9E:CA:F5
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 0199FC8F8BEC7E8170B9E47B9BE187884103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: 36Bb65z44MAsVTDbQRVeDeDmufQ.roa (hash: uPSc0dWD/LjqPKmpNOCLQpNBH6/TFH+CbImLmGpMPVg=)
2: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: leWRbRAQwL0a6m9dYuqZc4Sf76FwwYFtNGVjovahWNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8b:ec:7e:81:70:b9:e4:7b:9b:e1:87:88:41:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=c4e5bc0f08a3d0f86e9eef4a8d68abfdfb9ecaf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:98:e4:71:54:a0:68:4d:72:8b:a0:42:a8:
78:db:ad:9b:88:84:95:a4:16:a2:a8:77:30:50:14:
34:a1:07:d4:a7:46:fa:e4:96:c7:89:60:38:0b:fc:
c6:52:b6:16:c7:b1:c7:19:db:e1:e7:b1:1b:e8:c7:
64:f3:37:55:04:88:17:2b:86:d1:39:60:28:d4:68:
c8:2a:69:18:b4:cb:bb:1a:f5:b5:8c:53:57:36:5c:
a9:e0:a5:15:28:04:93:37:d4:20:33:a3:c1:90:d0:
e0:81:47:53:f5:23:6d:a0:d7:01:fb:93:fe:bb:9b:
5c:b1:de:69:56:1b:c7:8e:77:a8:66:67:e9:e7:a2:
87:4b:42:be:ec:67:49:17:73:d9:48:e6:80:bf:c5:
2d:b9:91:88:1c:66:89:b6:df:0e:15:00:0f:80:7f:
8f:63:fb:64:a0:ba:b7:34:45:95:94:d8:05:88:e4:
8d:1a:2c:b4:d1:68:f2:7d:1b:55:76:79:60:46:8d:
a2:be:a3:68:f4:e3:2d:b3:55:87:c7:4b:ed:e2:11:
c7:b0:17:c4:4c:77:82:d6:cf:66:9a:f7:17:c4:35:
cc:bb:29:ec:10:86:43:93:e9:f7:36:48:e3:c4:31:
31:f5:f9:97:e6:25:11:d4:84:aa:f2:73:f0:2d:b1:
29:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E5:BC:0F:08:A3:D0:F8:6E:9E:EF:4A:8D:68:AB:FD:FB:9E:CA:F5
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:93:58:56:21:e7:13:c5:83:cb:1d:56:1b:8b:a0:13:c6:d4:
57:e6:cc:0d:3f:08:b6:2e:ad:fa:0a:d0:d5:77:43:27:5a:f3:
ae:1c:9b:00:ad:7f:02:f9:27:31:fa:67:dd:32:29:e3:62:8d:
de:68:d5:f9:6c:70:6f:d3:9e:51:ee:5c:78:e1:ce:ff:c0:81:
76:d2:dd:d8:8e:d0:3f:85:31:47:30:a2:32:cc:3d:0d:77:24:
8c:fc:76:8e:d2:60:2f:47:4d:cd:81:40:16:11:45:a1:f7:0d:
0e:aa:1f:25:19:19:49:23:57:20:f7:f5:d2:12:30:b9:92:52:
7b:77:43:04:05:f8:3c:2f:15:b9:94:47:d9:5b:24:1c:00:de:
6f:ef:57:22:f5:b1:d1:74:71:00:85:27:ba:53:7e:16:00:d3:
9e:64:4d:35:54:fe:ba:fa:1e:53:0e:90:3a:30:e8:05:37:97:
16:5b:fc:36:72:3d:f0:ef:26:d0:a3:43:71:80:60:51:83:2a:
1d:00:64:0b:af:51:a3:8b:c7:07:45:6a:30:87:e7:de:42:34:
81:15:b8:f8:24:be:97:37:64:96:fb:7c:cd:e2:01:8a:a8:7b:
0b:bd:a3:88:5b:ac:4e:aa:42:79:f9:2f:2e:33:6c:5b:9e:e1:
2a:c1:4a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:17 2025 by rpki-client