Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File: 7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier: I0Iqop74dqAoXMyRPEtrGohfHNMsPfoT6SI6rgw7N7g=
Subject key identifier: 12:18:AB:79:EB:11:CD:F4:CB:F8:40:24:EB:F5:0F:97:22:B0:0B:B3
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer: /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial: 0199FD340E095E95B6931AFBB628E191026F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number: 104D
Signing time: Sun 19 Oct 2025 16:01:11 +0000
Manifest this update: Sun 19 Oct 2025 16:01:11 +0000
Manifest next update: Mon 20 Oct 2025 16:01:11 +0000
Files and hashes: 1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: BL6zCVMtiYP4d71lafkjJFJkZyyDj9LcaOWab+MjgO0=)
2: ZI4Q9kO1bTra3EedEOX8SFlE0uE.roa (hash: ewlUFRb4YNwiqjWWGmDY++Dep/mg4M2HEOJdKGJhKsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:0e:09:5e:95:b6:93:1a:fb:b6:28:e1:91:02:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Validity
Not Before: Oct 19 16:01:11 2025 GMT
Not After : Oct 20 16:01:11 2025 GMT
Subject: CN=1218ab79eb11cdf4cbf84024ebf50f9722b00bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a4:d8:20:c9:05:fd:c6:cd:f0:22:c1:0b:3b:
68:01:9c:54:ff:50:c7:83:c2:2b:60:89:75:43:37:
96:f1:0a:2e:30:b8:d5:e8:c2:3d:c1:30:49:3e:f0:
eb:f8:d0:dc:c1:10:bc:29:49:c9:89:63:52:87:44:
49:1f:73:23:2c:43:68:5b:04:6f:ae:0a:2b:bc:c4:
4c:5e:24:e3:c8:ca:0a:e0:fb:7a:39:62:05:f6:58:
78:a3:01:bc:16:89:fd:6a:cc:e9:e4:22:b2:ac:94:
0b:56:14:8d:14:d9:7d:f7:5a:19:99:fa:f3:8f:b5:
74:af:53:fe:f9:62:e3:8c:0d:bc:cd:63:a6:96:62:
85:78:ee:c6:d3:1c:07:7d:37:c9:6c:19:a5:85:81:
ba:ea:dd:39:21:f0:a1:dd:18:f4:8d:de:60:a2:e0:
53:50:ec:aa:09:49:8d:8f:6c:4c:1c:b5:c1:f3:7d:
81:c0:92:46:38:01:8e:cc:e1:1e:f7:6b:83:f9:0d:
b2:24:7c:ab:1b:f0:9d:c6:fe:11:68:6f:af:6a:06:
09:88:e0:9c:11:58:1b:5c:94:d3:68:41:32:3f:4f:
c1:e9:be:ed:82:56:13:aa:70:36:52:6e:47:80:f9:
98:65:d6:e7:6d:57:2a:71:96:62:35:f2:47:40:96:
92:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:18:AB:79:EB:11:CD:F4:CB:F8:40:24:EB:F5:0F:97:22:B0:0B:B3
X509v3 Authority Key Identifier:
keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4b:99:c2:28:35:da:dc:40:55:55:de:38:aa:fe:d8:b1:4f:
a3:cc:78:ea:a0:1a:3a:07:2d:dd:02:2f:40:8f:a2:1c:88:f8:
f5:23:1f:96:47:52:9a:95:b4:0e:78:9f:33:40:66:c2:3b:88:
54:50:65:5c:fb:32:54:95:65:fb:ef:9e:f1:bf:5d:6c:28:06:
c2:1e:bb:7b:57:cc:1a:d4:65:a0:2c:11:cc:ad:76:13:69:5a:
71:82:b6:40:a5:47:37:df:38:34:5e:75:43:5f:39:21:6b:db:
b6:bb:ec:48:c9:6d:8d:84:c1:91:66:33:50:79:ab:dc:fd:b8:
13:98:ea:57:34:bf:c3:d6:be:bf:ce:47:77:33:b6:49:8a:3e:
82:f5:f3:23:ad:3b:57:9f:75:2c:72:0c:a1:1d:85:31:f1:2b:
80:cd:aa:db:26:6d:fe:37:de:00:72:c8:b2:f7:56:a5:01:2c:
1d:48:c9:93:3f:9a:f6:11:65:c4:2b:db:e5:94:f7:d0:b2:5c:
45:c7:d2:65:4b:b7:97:3b:5c:b5:f4:6d:47:df:29:d1:ac:c6:
12:25:bb:07:1b:0f:c3:6c:86:3c:73:fa:12:13:c1:9d:c0:b6:
ab:ee:b1:e6:d4:8d:e8:59:30:de:4b:0d:ef:fc:f8:b2:c0:b4:
e5:6b:2e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:28 2025 by rpki-client