Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
File: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft (raw, json)
Hash identifier: fhq3wTLAInOwWKWe/c4lLkb6OIuXbfiRZnU8aAA8kEs=
Subject key identifier: BB:29:09:45:EE:E9:94:F5:74:EB:D7:E8:C2:1B:81:E3:1D:9A:C6:8D
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 0199FC216227AAEA48319CEC1597D49AC24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
Manifest number: 0633
Signing time: Sun 19 Oct 2025 11:01:09 +0000
Manifest this update: Sun 19 Oct 2025 11:01:09 +0000
Manifest next update: Mon 20 Oct 2025 11:01:09 +0000
Files and hashes: 1: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl (hash: cp4X/jWHLOfWx35c11qx0TFv2++0ShjkQtLNkfIJsTs=)
2: V8rwHt-KBtkyfMDcY6GbBS5O3lg.roa (hash: VKRjbMp2cA/7F+gIKAoYPT0t4kmN1vcNg+P5YqdMBPI=)
3: vLkg6vsM00eiYmKWC5SDs25Gs0o.roa (hash: laQ0wIfMQs3t8Q/rYbMaQJvlRI3pM205xGMs2yoH4OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:62:27:aa:ea:48:31:9c:ec:15:97:d4:9a:c2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Oct 19 11:01:09 2025 GMT
Not After : Oct 20 11:01:09 2025 GMT
Subject: CN=bb290945eee994f574ebd7e8c21b81e31d9ac68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:58:dc:81:5b:9c:35:4f:7c:6d:f1:3c:ae:
4d:74:e9:6c:58:5e:98:90:14:93:4f:8c:50:70:e1:
46:b6:7d:6b:02:83:76:fa:1d:c9:b5:0a:e3:87:40:
41:aa:cd:5e:7e:c3:71:1e:b3:4f:d4:05:22:bd:6a:
71:98:ca:ef:e0:8f:fa:7e:bb:87:31:74:5f:71:35:
5f:b8:ff:04:9d:1a:ab:e8:12:a2:4a:49:94:af:4c:
f5:3a:22:68:e9:3c:80:3b:8c:08:36:97:e2:9d:8f:
9a:5d:32:c3:13:81:92:6d:8a:8d:9e:c3:29:87:ab:
72:be:68:1a:b6:56:f7:d9:1b:dd:51:42:66:cc:ff:
12:cc:16:ba:b5:99:8e:6a:9b:93:8a:7f:c5:9a:d4:
05:b0:d1:5c:d2:dc:11:b9:21:e5:f0:39:35:18:84:
62:55:dd:a6:5a:1c:6f:1d:75:a9:ab:9e:09:f9:89:
d1:bc:a1:b3:ae:d0:95:41:76:a9:48:35:71:7d:f6:
74:9b:5b:ba:bb:36:b4:d2:51:ab:a2:c6:fd:ef:9a:
cc:d0:ba:72:d4:3a:af:f4:ca:48:45:b6:03:24:3a:
22:53:c2:2b:7f:22:e7:dd:c8:60:3e:64:34:a2:e7:
c7:d1:b9:c2:07:96:3b:1e:14:fe:e3:be:52:72:68:
72:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:29:09:45:EE:E9:94:F5:74:EB:D7:E8:C2:1B:81:E3:1D:9A:C6:8D
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:6a:a7:df:2d:6e:af:e0:83:64:d6:34:d8:b9:f0:b3:6c:19:
1b:e4:42:0f:c7:e0:84:74:61:4d:cb:43:88:ec:2b:60:05:df:
b3:96:bb:b7:ea:ea:d1:5b:57:cb:34:1f:8c:84:64:f8:b7:5c:
b8:a5:89:ea:ac:14:1c:60:d7:7b:4d:ab:84:99:e9:a2:5f:44:
22:60:5d:dd:b3:57:6e:a7:25:4e:a2:ad:de:0d:68:49:56:ca:
ed:27:1b:6d:e7:e6:55:15:d8:80:45:a7:28:99:2e:46:2a:fb:
9a:ee:0a:03:6a:ea:d3:d6:eb:89:ff:c7:cf:80:cc:87:d1:00:
ba:72:aa:5c:39:fe:a0:1e:01:1a:71:b0:86:6c:b5:be:b6:77:
d2:55:5f:f5:81:8a:4a:e7:15:91:89:c9:d6:1c:f4:87:f4:f7:
a3:ec:61:49:6c:2e:f7:5c:9c:11:78:09:96:f8:21:5b:a0:86:
29:db:2e:4b:72:d0:2d:9e:4e:7d:a3:72:b5:70:9a:c8:ec:ea:
d2:36:75:ea:f1:d1:45:ce:35:b8:ac:4e:18:00:bb:6e:2d:6d:
44:20:81:17:5a:bf:75:bb:bf:62:4e:e8:b6:12:51:e8:58:2b:
22:9d:e9:85:03:a7:63:b6:9c:71:55:df:da:07:81:0e:ef:4c:
20:f0:47:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:13 2025 by rpki-client