Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
File: 7zGgVPyftLFH6KmL2n5xyBrwvP0.mft (raw, json)
Hash identifier: W9hmw75urHtl/ycRaBCdW3DPvM+rR4KkozI59qVyYcw=
Subject key identifier: 8D:96:CA:98:E5:3D:21:CD:36:DF:8C:56:F4:CE:DC:76:A5:21:D0:4A
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial: 0199FBEAE532A7E2050743E403E188C4F72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:01:39 +0000
Manifest this update: Sun 19 Oct 2025 10:01:39 +0000
Manifest next update: Mon 20 Oct 2025 10:01:39 +0000
Files and hashes: 1: 7zGgVPyftLFH6KmL2n5xyBrwvP0.crl (hash: 6/U3XPILRB/FDk6fboN82+I4Rp7nKpPC/e+B5fUFKG0=)
2: GCDECUA53das4KdfVgJGCGchlPM.roa (hash: Shwn+wjWeeEfwxR+SQ/E/M2IAWkZBzaDnaEJzGSP9FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:e5:32:a7:e2:05:07:43:e4:03:e1:88:c4:f7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Validity
Not Before: Oct 19 10:01:39 2025 GMT
Not After : Oct 20 10:01:39 2025 GMT
Subject: CN=8d96ca98e53d21cd36df8c56f4cedc76a521d04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:7e:08:42:7f:bb:b8:e5:a5:b0:73:a5:b9:
82:fd:7e:81:18:4d:a1:73:9b:f4:67:84:64:28:63:
01:6f:bb:dd:9a:9b:ab:fd:36:05:c5:47:e0:be:8b:
47:0d:8e:b8:2e:a9:f4:f7:77:f8:92:3d:33:de:0a:
3d:16:80:6b:ee:e3:19:83:29:16:fc:c5:42:88:13:
f5:76:ba:e9:1f:ed:cc:c1:45:6e:63:ff:95:73:cf:
47:d4:66:e6:66:a4:22:10:96:6e:ab:b6:42:94:7f:
df:9a:d8:08:c5:b2:7d:c9:ac:5b:12:af:48:0a:63:
cf:82:89:09:9a:88:fd:3c:36:bb:56:ee:81:41:d0:
46:86:ea:0f:11:02:32:9f:48:62:4e:9e:df:14:44:
a9:bc:cc:10:67:e9:c2:2a:04:83:83:b1:43:b7:1d:
40:56:c3:f6:73:e1:ca:98:c0:59:0c:3a:c9:91:d9:
8f:38:80:4c:54:e1:3e:2d:85:7f:59:cf:21:fb:92:
c9:45:2c:28:85:d5:98:a1:76:66:06:f4:1c:77:4b:
c9:aa:17:65:28:eb:dd:5a:23:b0:d5:ec:aa:53:f5:
7f:55:e0:04:bc:49:70:e4:62:7b:3c:52:05:2a:5d:
c6:15:7b:1f:13:51:b9:cf:78:66:82:de:f9:a5:58:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:96:CA:98:E5:3D:21:CD:36:DF:8C:56:F4:CE:DC:76:A5:21:D0:4A
X509v3 Authority Key Identifier:
keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f2:05:be:a5:9f:fb:c3:9e:55:84:58:a8:35:5a:30:b1:b4:
15:5a:db:b2:78:43:42:61:ee:cb:42:a7:e6:01:5b:8a:54:e2:
31:e3:49:cb:83:ab:c8:8b:3b:19:26:94:61:b1:2d:12:77:10:
de:90:77:fd:9d:fd:44:6c:70:98:e5:e7:e8:e4:b1:6a:db:60:
86:29:e0:ba:6c:cb:ce:74:de:04:e4:ce:4a:9f:81:f4:3f:de:
70:d4:f1:85:bf:16:c5:05:60:da:ce:22:7e:d6:90:34:bd:23:
6d:3a:af:84:9a:26:7b:12:d2:06:42:28:71:20:d2:4a:0f:14:
08:ab:7d:8e:13:d8:aa:69:38:96:8d:eb:6a:08:10:af:be:76:
c5:a4:60:8e:26:0e:87:b7:72:6b:6b:e9:da:f8:53:1f:0e:cf:
da:fb:46:01:21:80:ae:aa:c4:ef:1a:9f:3c:c7:d3:15:70:58:
58:2c:cc:66:2c:49:8f:56:60:5f:a3:c5:8d:ce:4d:04:72:09:
71:65:08:39:1a:42:ce:ed:37:a0:e2:ee:22:23:b3:dd:07:76:
3c:a9:ad:36:6e:b9:5c:18:cf:ae:ff:1d:fa:32:ae:b4:0d:92:
7b:19:0c:c7:78:54:d7:3d:e9:f0:aa:00:7b:bc:f7:57:a7:dc:
33:94:d3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:22 2025 by rpki-client