Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File: 7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier: JYOAMmo2K+m+V/lCInCUvhEg2FZ1OgK0/3fgdWdJhTU=
Subject key identifier: A9:F9:DC:A5:B5:0D:57:54:CF:11:1F:90:00:95:53:AE:C1:2F:A5:C3
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer: /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial: 0199FCC6059B6A54DB6C3FD74848D32D6EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number: 16F7
Signing time: Sun 19 Oct 2025 14:00:59 +0000
Manifest this update: Sun 19 Oct 2025 14:00:59 +0000
Manifest next update: Mon 20 Oct 2025 14:00:59 +0000
Files and hashes: 1: 1-feNHEHoxAVzT15DqDBKqpRnimc.roa (hash: 9Yua0Iw095Y35K0y20x+VN7YpOWR+p0yztD1WINH47c=)
2: 3GIlAH2jmkjrzkMr8xA50guC164.roa (hash: xXO6utTVq05KsIWjlU+m3x4dft23WacAm19MsctwPAs=)
3: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: RiYGec0FKoDSAenSghRDU8oa1gvcxNQYDW9ZGz7oxXs=)
4: IL1-VfzXKjMdnRwOeHWRvCba6do.roa (hash: R10MoKh5uMX0ghVEju60HL0CXkolK6vBA+Z5a/naeA8=)
5: L4Q7WjfcKdQ8CmWw4IQl1hCLiNY.roa (hash: A23/d2PZxyO/+hmzuzhwUae+7e+2M3snpbUPx16lhIs=)
6: Nn-caKWqxDsYGYS4deITO9z5CII.roa (hash: SvP+0fiOTnKdkSN+scro3CcRKv0nhE96wmndJk4XP2E=)
7: gBTX6rtk3VmnZ3B2jpAIDYetIds.roa (hash: 9P8zTI1kLcc7GPpGKJR5mrODeo55W0eiIG9cnwU/wvE=)
8: kDyvOnLZQzeKWmaZeleSC7tsL8w.roa (hash: GbNFAnU0pItUjpzB6Y7UDRf6GIn6EyzF7Cux5iLe9bY=)
9: uH8W7wZaxW_HHCHl_MLip0UA6Og.roa (hash: VC5miMPD+f8MyskvN+/iLqKFYtg3R/WiLzahDu8sebs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:05:9b:6a:54:db:6c:3f:d7:48:48:d3:2d:6e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Validity
Not Before: Oct 19 14:00:59 2025 GMT
Not After : Oct 20 14:00:59 2025 GMT
Subject: CN=a9f9dca5b50d5754cf111f90009553aec12fa5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:2c:ab:5a:c7:52:63:4c:be:b8:5e:0c:1d:
b1:ed:64:3d:32:04:c1:dd:28:d3:55:45:0f:12:04:
df:84:6d:52:b4:5d:a8:e2:2d:64:3c:28:b2:c4:52:
2b:ce:f1:b5:51:6e:b9:ad:c7:0c:e6:70:91:42:e6:
08:0a:a7:d4:40:37:19:ff:04:9d:41:0b:9d:f8:78:
2f:fb:cf:cf:d8:f6:57:3b:c3:6f:2f:af:7c:f0:ec:
34:16:f0:41:0d:64:72:1d:58:7a:91:ce:6c:69:92:
68:91:c8:60:d4:df:a0:44:66:02:ad:57:e8:04:a0:
08:77:3f:ac:b9:28:05:37:e0:69:01:5b:30:98:2f:
6c:63:cb:6a:e2:f9:3f:3d:8e:1c:69:ec:9f:41:5b:
4c:53:89:31:09:cf:90:e6:e3:db:0c:d1:cd:4d:1b:
1f:86:e4:7b:96:0a:01:03:07:b3:d1:97:6c:1f:a4:
81:7f:8a:f4:03:cc:84:73:46:f9:b5:cb:01:99:10:
06:eb:34:c5:23:cc:7d:5f:f5:38:fe:cf:6c:5a:2b:
84:5f:b9:37:84:0c:0f:3e:e9:11:d1:d5:a8:f5:4d:
be:65:7d:52:4f:97:52:74:62:76:28:64:c9:dd:74:
e3:5f:52:eb:44:9c:1e:17:a4:1e:49:ba:fe:23:87:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F9:DC:A5:B5:0D:57:54:CF:11:1F:90:00:95:53:AE:C1:2F:A5:C3
X509v3 Authority Key Identifier:
keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b6:35:db:e0:f3:b2:41:a0:f4:b8:6f:58:28:2a:0c:a6:9d:
89:d5:44:31:aa:81:7d:62:f2:87:9f:99:e6:da:b7:46:d5:c9:
36:11:16:58:8a:48:d0:a2:a6:0c:21:fa:3a:06:36:bf:8d:00:
e8:c7:cc:3d:86:b7:99:45:4a:ee:af:6e:d4:80:92:cd:5f:98:
1a:ff:97:6e:e4:e8:f5:ca:34:b8:84:72:c2:2b:b9:82:ef:72:
86:aa:3c:2e:50:86:8f:37:23:d2:61:57:b2:18:55:8e:ff:25:
1e:62:6c:ec:57:d9:76:a1:7d:a7:63:26:61:14:24:e1:8d:78:
5c:84:86:9e:7b:3c:18:30:a8:52:3a:97:ae:4c:30:64:88:9f:
e4:68:9f:a5:8d:c3:a1:70:40:26:70:93:7e:c9:e1:d9:c2:10:
25:d8:b6:a0:1e:c3:5e:5f:12:eb:2a:fd:44:e1:ea:fc:17:be:
0e:47:d0:57:95:df:0d:dd:a2:d5:1a:0f:c7:19:48:c4:eb:c9:
d2:d8:43:64:47:7f:56:4e:ee:f5:de:c9:39:60:dd:6b:0f:ad:
f0:e5:42:10:8c:69:a3:e7:51:c9:74:a0:d3:64:3b:94:e1:5a:
62:ac:d4:af:66:28:49:af:ff:c4:98:bd:57:4c:df:f4:58:22:
06:bb:3e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:39 2025 by rpki-client