Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File: 7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier: W+qF6/DABemquL7U/X9Gfbi/eaJdp8tF3PPGlPaFo7k=
Subject key identifier: 10:81:D6:EA:F2:D8:2B:5F:DA:08:A2:7B:FE:E7:C3:41:3C:B0:30:40
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer: /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial: 0199FFC876BBBADDEF44E6EE8CFB14B44FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number: 16E2
Signing time: Mon 20 Oct 2025 04:02:31 +0000
Manifest this update: Mon 20 Oct 2025 04:02:31 +0000
Manifest next update: Tue 21 Oct 2025 04:02:31 +0000
Files and hashes: 1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: hmOB8q8otYcEQWChlfR1MNZ/siao0rBNhfnt+/pn2oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:76:bb:ba:dd:ef:44:e6:ee:8c:fb:14:b4:4f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Validity
Not Before: Oct 20 04:02:31 2025 GMT
Not After : Oct 21 04:02:31 2025 GMT
Subject: CN=1081d6eaf2d82b5fda08a27bfee7c3413cb03040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:6b:c2:18:86:9f:a2:bd:0a:a2:0d:9d:c8:
fb:20:a9:54:14:3d:06:14:8f:2b:fd:74:de:38:2b:
5b:d0:bf:26:0e:73:d2:fc:3b:3e:5a:d1:d7:85:12:
82:67:a2:0a:2b:8a:2a:e1:30:47:83:07:ba:79:96:
a9:f5:2c:fc:12:1e:54:b4:67:a0:7a:8c:31:51:e8:
ca:d1:00:e6:fd:8d:74:71:76:81:e1:4f:d1:75:82:
b9:2e:96:a4:bc:5f:fe:bc:54:9e:86:28:72:b4:65:
e3:8e:fb:1a:ac:4c:86:fa:9b:a8:22:1d:85:96:2b:
19:f2:86:ad:4f:cc:3f:c1:bd:64:ea:45:8d:6f:e3:
d8:74:4a:bc:88:a1:1d:0f:6a:b0:3b:c9:e4:66:4a:
e1:74:58:0c:fa:ac:20:3d:89:6e:0e:bf:ff:9b:81:
54:3b:6a:5c:be:2c:e1:d7:44:03:ad:18:b7:01:9d:
02:3b:e8:74:5b:20:53:6e:58:86:84:88:46:04:5e:
42:49:1f:f4:83:df:29:d3:37:4d:32:a3:3a:bf:08:
a0:40:88:32:fc:30:16:cb:e9:f1:2e:12:e8:d2:3b:
9d:6b:51:91:30:ff:e2:fe:08:1a:04:86:7a:5a:15:
99:24:c7:d9:51:d7:d6:c4:94:40:fe:f6:4c:fd:7e:
83:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:81:D6:EA:F2:D8:2B:5F:DA:08:A2:7B:FE:E7:C3:41:3C:B0:30:40
X509v3 Authority Key Identifier:
keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4a:ba:4f:05:82:4e:73:6f:c9:d3:b5:60:61:41:7f:a9:a7:
68:80:f5:1a:6d:36:d8:f5:71:38:ec:3e:38:6d:83:46:07:fd:
4d:63:81:02:23:5d:14:ab:de:5a:91:74:ee:f3:af:f4:e2:4f:
bc:3b:ac:a7:16:ec:9f:32:c8:41:79:6b:4d:30:19:fa:46:97:
0f:31:b3:70:85:bc:a1:7a:b9:a9:a5:45:e1:06:5d:25:b7:95:
14:b6:7a:02:07:c5:a2:ec:21:f2:a6:a7:ba:2d:a4:04:43:44:
e2:3e:40:39:0e:10:ac:0a:82:eb:a5:47:12:0e:f1:ab:c5:37:
cc:08:ff:95:b0:89:30:f9:3f:70:82:52:49:79:da:2e:12:0e:
0a:76:5f:76:ad:80:f7:ae:16:c2:ff:10:a7:13:d2:a3:2a:8a:
f9:a0:60:04:8a:46:a6:11:ec:61:f1:eb:68:0a:f9:3b:e1:81:
27:3c:ff:0e:c0:f5:ad:78:39:71:b4:ca:ff:8c:99:11:19:74:
42:e6:cb:a6:ec:45:50:ae:8c:11:02:e5:86:7c:ad:ad:c4:82:
b2:f1:1a:05:b4:8c:4a:ea:cc:6d:cc:77:d7:dc:8e:08:b1:23:
4a:58:7b:c6:f5:f0:20:2f:a1:8f:83:a7:8b:a9:f0:95:33:78:
1f:6f:4a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:32 2025 by rpki-client