Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: lz+LDuOYsryAAirLgwUfQDItSUnGgELKRARbirvJiF8=
Subject key identifier: 3F:11:53:26:C9:6F:21:74:54:7C:6A:9B:8F:09:00:B3:33:B0:AF:C5
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 0199FC2168BB6B0AC3D937B59027F75786F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 11:01:11 +0000
Manifest this update: Sun 19 Oct 2025 11:01:11 +0000
Manifest next update: Mon 20 Oct 2025 11:01:11 +0000
Files and hashes: 1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: IG3yts+VJfNzb78ACxmPOE5DyuQ1MmMEksjno8QQStc=)
2: QmonITNns_8Q9qn9QpgL_m0jbZY.roa (hash: lePHGLh8RQcKhBsHHefYW0245CnYH1iaj+dz5PW9vD0=)
3: d24ICbco0VbAsWx0dcNaky51E1k.roa (hash: d1k6XX+Y5B2DmgHQo92ou+wFZc56ndYpjjXsKkYwekM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:68:bb:6b:0a:c3:d9:37:b5:90:27:f7:57:86:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Oct 19 11:01:11 2025 GMT
Not After : Oct 20 11:01:11 2025 GMT
Subject: CN=3f115326c96f2174547c6a9b8f0900b333b0afc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:51:ea:07:5b:b8:ff:59:fa:99:98:c6:1e:
4c:07:51:b1:fd:af:dc:92:0f:d7:2a:1d:d3:d5:26:
32:33:42:f8:24:31:af:1a:31:05:cf:b7:f9:f9:e6:
e9:8e:c8:61:52:cd:ed:37:bf:ee:33:46:1e:86:27:
44:6b:e5:41:90:30:ba:22:64:2c:75:4c:13:2d:ae:
e4:db:ce:64:05:f4:27:c2:11:3f:7f:b8:d1:cd:ec:
22:f0:17:9c:53:2c:31:38:60:b8:db:96:1d:7d:d2:
8a:ea:21:a0:d7:08:32:32:c8:bf:fd:3d:f1:ee:ec:
a2:3a:f6:33:67:bb:e3:df:6d:8c:19:54:83:d3:fd:
5b:dc:84:29:3c:3f:26:8a:1f:2e:27:e7:f0:ce:4b:
98:b6:b3:19:5b:df:39:64:f6:ec:80:6c:1b:da:68:
25:49:ac:88:18:eb:0f:9f:ea:9b:69:53:03:2b:bd:
75:ee:b2:42:65:dd:68:8d:b9:a0:80:1e:46:d2:9b:
38:4b:6d:49:92:62:95:5a:35:c1:e1:1f:0a:c5:79:
1d:0c:65:93:c8:f5:22:9d:da:04:ff:c2:db:25:8f:
aa:09:5c:c5:31:68:a4:f2:5a:b2:f8:25:ed:3e:50:
cb:80:58:96:43:df:c6:4b:77:63:d6:26:ad:f5:bd:
17:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:11:53:26:C9:6F:21:74:54:7C:6A:9B:8F:09:00:B3:33:B0:AF:C5
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:41:c4:91:3b:04:7c:fa:c2:b4:08:7a:a0:f7:d7:fc:2b:4b:
b2:e6:a4:fe:45:80:b8:03:cb:18:a2:2c:14:a1:51:16:58:dd:
ac:9a:59:40:55:d9:6c:bf:27:d6:c9:0f:5d:cf:03:b2:a0:82:
44:67:79:51:fe:a4:fb:60:cb:c4:9b:af:07:98:de:b4:ab:ad:
2b:f8:3c:2b:64:8e:97:5c:59:62:a6:a7:ba:5d:6c:bf:ba:49:
21:43:16:a7:8b:67:f4:31:53:c9:60:ab:f6:53:d2:d8:40:3c:
df:7e:cb:2a:db:8c:3e:a0:1b:6e:c9:70:ab:57:db:10:03:e0:
d9:07:2d:bf:f7:e9:37:dd:b9:e7:97:63:2d:73:f3:51:0f:5f:
32:04:82:08:6c:da:8e:a8:5c:58:de:52:5b:ca:07:94:18:d0:
1c:70:1f:71:7b:53:bc:8b:57:c5:80:64:b0:80:a7:95:d9:67:
a4:95:15:42:23:a6:81:e4:3c:76:c6:63:fb:a0:e0:40:be:6d:
a8:71:17:49:35:9d:52:ab:de:4b:e5:09:80:11:7c:db:a9:f7:
07:f3:7b:e9:08:b8:75:29:e4:57:68:3c:54:49:70:72:6f:85:
96:54:cc:c5:b3:5d:d3:5c:eb:f4:ed:63:f3:7f:8e:13:60:a4:
c2:0c:82:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:19 2025 by rpki-client