Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: kabzd/UkEdoGRqsoWWvDWxczep92GuXPRRb/MSjczNg=
Subject key identifier: A8:DC:84:DE:B2:78:51:DC:94:CB:9C:2C:30:6E:55:11:B9:38:A7:D2
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 019A0110CD39544B9A33B947891BEFFBD059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 16E9
Signing time: Mon 20 Oct 2025 10:01:09 +0000
Manifest this update: Mon 20 Oct 2025 10:01:09 +0000
Manifest next update: Tue 21 Oct 2025 10:01:09 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: xc5qafIQf5taJdRgrqFx0hAOxye/5XWeU8mbxudLoP8=)
2: MOwk6-gNTotPX4medNv9DwpG-nY.roa (hash: 6Jb3ucO6IvrIBpfG+RtQ1ACJyD7qIWwk6gOaPXaKjcU=)
3: YTaACXpx54gDy9xvy1Yl2SVGqRU.roa (hash: LQglYAbCThbY5IKAki5TmwIb5w2DJ6WRR1u7/db90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:cd:39:54:4b:9a:33:b9:47:89:1b:ef:fb:d0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Oct 20 10:01:09 2025 GMT
Not After : Oct 21 10:01:09 2025 GMT
Subject: CN=a8dc84deb27851dc94cb9c2c306e5511b938a7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:7f:b3:69:1b:2f:68:2b:6d:81:dd:c8:46:
bc:56:df:03:4e:29:9f:6f:29:86:b8:90:4a:56:20:
41:19:3e:c2:07:58:19:47:3e:f6:73:63:af:61:e8:
5e:a7:de:37:eb:e8:f2:61:6c:5e:27:53:2e:0b:89:
74:41:16:69:74:bf:7b:b6:d4:51:df:76:e6:47:b5:
a5:70:34:c1:94:e7:62:b0:2c:54:6d:0f:76:32:78:
c4:cb:05:88:58:7e:f6:e7:06:73:f1:5b:59:f1:ae:
18:43:9c:27:f9:f0:0d:b8:86:2a:8a:79:7a:73:d3:
7a:cb:68:9d:d9:95:35:cd:61:6e:65:3a:8e:04:65:
f4:ac:e3:de:98:43:d3:c3:19:0f:88:2e:86:7c:3f:
02:5f:4f:61:bf:3d:dc:66:1d:11:5d:11:aa:f1:cf:
c8:77:10:b8:e8:c4:62:48:d1:7c:2d:3c:2c:bc:1f:
b7:4f:16:8b:d3:bc:bd:e8:70:e4:b2:4d:aa:75:58:
3d:9d:08:d3:5c:83:a3:86:29:fb:6e:ca:74:e8:6e:
0b:da:32:04:ef:89:67:35:4e:38:03:d0:66:a9:c8:
c2:c7:cf:b4:2e:95:c8:23:29:54:cf:33:1f:a5:73:
e1:0a:9c:fc:97:17:da:76:80:14:e8:34:a7:b3:9c:
e3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DC:84:DE:B2:78:51:DC:94:CB:9C:2C:30:6E:55:11:B9:38:A7:D2
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:9f:10:c0:39:b6:01:7e:62:b4:dd:73:2c:ae:cb:38:f0:cd:
58:41:23:41:6e:ba:7c:d9:da:16:0c:3f:b7:e4:ef:1f:25:b8:
90:6b:7b:b9:af:e8:f4:08:80:0b:7f:9c:1b:cb:93:8b:8e:04:
41:89:e6:ab:21:0f:4b:a0:d4:b2:d1:d9:a8:2b:c9:60:6b:b3:
51:d4:af:69:75:ce:a8:fe:de:03:31:f3:9c:1c:f9:a0:9d:74:
71:72:41:cf:bf:c7:0b:56:d6:12:5d:b1:3b:1f:c7:d5:4a:c8:
86:7d:25:91:94:00:63:85:64:fa:32:29:83:52:09:81:a6:2e:
04:31:dc:62:2c:70:9f:b6:85:bb:36:6f:7b:90:7b:1e:a7:86:
50:3c:33:14:52:89:58:e0:b9:0e:46:42:03:d6:5e:fb:75:ca:
3e:74:be:e9:82:d3:f8:f2:7e:2d:d8:7f:7d:4f:04:e5:0e:44:
b8:d7:d5:ff:6d:0b:88:23:4e:60:53:20:bf:83:29:62:20:8f:
77:85:27:f9:ee:39:df:5d:cd:ea:43:3b:9c:a7:81:54:0f:1b:
6c:01:bd:1e:be:48:9a:4e:ba:e9:cc:db:40:34:2c:80:bd:80:
2a:5b:4b:03:7d:e7:fc:b7:6f:4c:ad:0c:bb:33:8d:72:90:04:
fc:51:73:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:30 2025 by rpki-client