Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
File: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft (raw, json)
Hash identifier: 54pNg8ywoXGi0WF7pg/vXN0pk+9v1Bz9Mt8h91GwGFc=
Subject key identifier: A6:F4:D7:36:D6:4C:E6:E1:CB:01:A5:3F:72:A6:63:76:9C:96:2D:0C
Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
Certificate issuer: /CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Certificate serial: 0199FB45D6CBC1A0A480417704C6E747C023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
Manifest number: 0DC9
Signing time: Sun 19 Oct 2025 07:01:22 +0000
Manifest this update: Sun 19 Oct 2025 07:01:22 +0000
Manifest next update: Mon 20 Oct 2025 07:01:22 +0000
Files and hashes: 1: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl (hash: aXIKWNI3xRbvEgSNSxGYlPqwJVj6xBbEQIMx5LI1Mh0=)
2: pHwUDvw0Qa6FCMDxKYzOWGmXJqA.roa (hash: t43FxbHkEwauKOd1tgnKpZSOOT0Im/fP5LgjaAezi/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d6:cb:c1:a0:a4:80:41:77:04:c6:e7:47:c0:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Validity
Not Before: Oct 19 07:01:22 2025 GMT
Not After : Oct 20 07:01:22 2025 GMT
Subject: CN=a6f4d736d64ce6e1cb01a53f72a663769c962d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:5f:1c:32:bb:5c:d9:c0:f8:6b:1d:bf:da:
f2:db:a5:88:21:f0:86:38:62:cb:84:ae:c6:a4:72:
97:60:23:50:45:18:3b:da:72:3d:52:ee:7e:54:d5:
10:bb:fc:8f:c8:46:84:26:54:12:43:94:d7:62:ba:
d9:96:7c:bd:67:97:e3:47:3d:5a:a9:45:3a:5d:ef:
36:93:1a:e5:9f:cd:da:c8:62:b1:fb:8e:34:a4:a4:
ab:8c:42:9d:33:54:34:51:83:c8:ec:1f:7e:85:26:
ff:16:d2:23:50:94:c9:43:db:aa:22:75:3f:82:ac:
50:23:0e:3a:ef:f5:67:ab:4e:cf:1f:65:ab:d6:96:
29:bf:83:ca:35:0b:eb:9c:ff:d4:93:4b:b1:0e:a5:
38:7e:ba:a7:ad:cc:dd:d9:55:60:de:3c:85:09:7a:
a1:36:01:a7:81:2c:f3:ff:de:cf:7c:ad:71:a5:ce:
0c:dc:30:5b:97:79:aa:50:a3:38:0b:81:cc:c5:62:
65:1b:7d:0e:95:9d:17:5a:81:7f:eb:56:1b:99:60:
2c:9c:ae:2d:2b:4b:42:7d:0f:c3:55:98:1b:10:15:
15:a1:4a:b5:db:d1:3f:4a:17:e0:70:17:66:05:3e:
03:5f:c0:8e:1a:c8:c6:67:e8:aa:96:c1:8d:b4:fd:
39:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F4:D7:36:D6:4C:E6:E1:CB:01:A5:3F:72:A6:63:76:9C:96:2D:0C
X509v3 Authority Key Identifier:
keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bf:8d:9b:42:e4:60:0c:0d:20:9e:88:85:24:af:21:a0:5c:
5e:86:a4:a5:c2:4d:03:ec:14:8a:d3:5b:7a:52:25:4c:95:75:
eb:45:07:68:34:8d:b6:5a:28:06:36:78:23:da:56:b5:6f:c1:
08:9b:66:59:c3:5f:21:e4:b5:71:a3:70:0d:2c:6b:18:b4:5d:
fe:11:9c:7e:ca:c4:5c:2a:eb:eb:69:3f:d4:f0:4b:23:71:d4:
6b:30:9b:df:95:a0:2c:b4:60:83:4f:67:4a:ae:72:b2:40:fa:
0c:07:1f:07:0e:67:e0:e4:bc:a2:3f:55:23:4e:1a:c0:68:67:
4a:8d:9c:ac:3a:34:7b:a4:d5:38:b9:96:a3:77:74:25:ab:37:
b5:28:cd:b6:99:9a:41:a0:0c:d0:6d:e2:62:3b:6d:a2:3f:5f:
a2:a8:c5:95:80:ee:87:9e:70:6c:3f:cb:1c:58:e3:39:88:46:
0f:83:61:29:c7:45:fa:ce:30:04:d1:15:19:1e:76:d5:37:4d:
b5:54:a2:24:a4:ab:8c:c6:fe:fe:a0:92:ae:e2:52:f7:37:9a:
1a:f8:c8:07:26:b2:d9:de:2d:b3:86:89:e3:a9:07:c6:cd:35:
a7:5a:e4:2b:ad:5d:d9:51:b4:a5:1c:8e:88:7f:15:e1:cf:e1:
64:09:6f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:14 2025 by rpki-client