Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File: 7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier: HcFD/Hfth7KX6Mv/GuT6DgM1tUZc6VXhtc/1GyEEt28=
Subject key identifier: A4:7B:7B:49:A0:EF:9B:D5:85:4B:8C:18:D3:E4:EC:15:CA:65:F2:83
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial: 0199FB7CFBE6739A21A710DBAB8A964BF5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number: 0DA2
Signing time: Sun 19 Oct 2025 08:01:36 +0000
Manifest this update: Sun 19 Oct 2025 08:01:36 +0000
Manifest next update: Mon 20 Oct 2025 08:01:36 +0000
Files and hashes: 1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: ciVXFsOlPImeQBWmnPIWE52SrbnHbN2c3TCS7tOgCcY=)
2: ki56jkg-Ht0i-AxPw2XEPPfU3mc.roa (hash: 2NDyIuvL9kHGhxL4y5SFFt1xoYZ8BtFLva+lo3l3Ky4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:fb:e6:73:9a:21:a7:10:db:ab:8a:96:4b:f5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Validity
Not Before: Oct 19 08:01:36 2025 GMT
Not After : Oct 20 08:01:36 2025 GMT
Subject: CN=a47b7b49a0ef9bd5854b8c18d3e4ec15ca65f283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:70:1c:78:cc:9e:6d:c4:ad:5a:cc:26:5a:4c:
29:e6:d3:fd:3c:68:f0:58:cb:1b:87:cf:01:ed:95:
42:51:7e:12:d8:65:be:34:df:2e:f1:c5:08:37:c2:
56:d5:72:70:80:b6:88:d0:4c:99:4e:3d:b9:96:71:
62:ea:a6:55:04:28:c3:a5:be:dc:ab:6f:b2:7a:b2:
b6:5a:72:74:8b:e5:55:9c:ec:bc:aa:63:79:9d:c8:
2e:74:01:54:1b:46:6e:24:f5:87:95:43:2d:54:9f:
8e:d1:6f:8c:b9:9e:e8:8c:bb:d3:39:d6:5a:d4:31:
bf:94:62:b9:de:00:79:38:ec:42:b8:76:c2:fd:4d:
c1:71:50:0e:a8:c1:02:76:c8:e1:54:21:a5:d8:e1:
15:6a:15:3c:91:61:6b:26:e1:e6:e6:f8:60:ca:e3:
51:ab:b9:1e:34:15:03:74:3b:d1:0f:d2:f2:2b:69:
2b:ba:47:8b:e1:18:4f:06:2f:3f:9e:79:53:bd:28:
10:89:34:68:26:f1:d3:ea:ca:0f:c2:91:4d:6a:ec:
24:13:58:23:dc:73:ab:83:f8:c2:34:c3:a9:b3:6f:
ac:ab:e9:28:ec:f4:b9:a8:fd:cd:4f:d2:3b:6e:18:
ae:ce:ad:7e:cc:5c:21:ec:39:41:51:15:4b:21:ac:
26:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7B:7B:49:A0:EF:9B:D5:85:4B:8C:18:D3:E4:EC:15:CA:65:F2:83
X509v3 Authority Key Identifier:
keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9a:4d:83:60:ac:f5:64:1e:db:9a:c3:b2:bd:0e:12:2d:64:
e5:9d:ce:bb:ab:2b:74:58:3f:82:88:5a:b6:1a:05:54:6a:87:
d5:02:95:a4:c9:bf:a4:46:fa:75:08:d5:56:e6:1a:7e:66:d3:
3b:65:11:ec:29:15:66:09:02:5b:28:f6:84:b1:7f:3c:d8:4e:
7e:d7:03:1b:9c:fe:7a:25:d2:e5:9d:f0:a4:3a:3a:9a:09:f0:
f9:24:90:88:3c:cd:c9:fe:94:87:52:95:84:6a:f6:bf:cc:b5:
2c:55:eb:39:74:1e:7c:c9:4e:64:6e:a2:a3:30:72:4a:a2:59:
36:32:39:bd:e9:17:66:e5:00:ae:22:a2:11:00:b3:35:1d:42:
1d:53:64:02:3d:28:48:8c:ba:08:11:0e:96:b9:f0:80:c1:34:
f3:fe:fe:c3:00:98:9d:68:4b:49:d3:5a:f5:c1:06:be:44:fd:
f1:15:f8:0a:86:9b:61:37:81:d9:c4:f9:9a:62:b1:cc:2d:fa:
ba:26:59:c8:95:0a:93:18:53:3a:ce:2a:9f:73:b1:25:c8:1c:
9e:3b:6f:72:a9:4d:f4:3e:6a:e6:00:ed:d8:92:e1:11:c3:3d:
bc:25:ee:0b:9a:83:98:ef:80:85:e7:61:a7:18:d1:95:d2:69:
3a:02:1c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:42:04 2025 by rpki-client