Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: 4CXlpC+MkVS6LTc1UR4TlaXyd9aAHpvr92AvpE5KKC4=
Subject key identifier: 2E:6F:D6:17:EC:21:BA:0B:90:C0:EC:51:A1:7B:4E:F4:B6:80:FD:E1
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 0199FCC646C77F55E484ADA48EB33D1E1C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 116E
Signing time: Sun 19 Oct 2025 14:01:16 +0000
Manifest this update: Sun 19 Oct 2025 14:01:16 +0000
Manifest next update: Mon 20 Oct 2025 14:01:16 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: 2I+6C3JyadcmPXfgmselg2wWkZ7iGNmYTCXN6sCOrhs=)
2: 8IeUbOwS853SmApxlhlEYT9gqJU.roa (hash: rGq2PKCmYf+7DCOarfnzmeAZXnBOsSkimboD75gDmOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:46:c7:7f:55:e4:84:ad:a4:8e:b3:3d:1e:1c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Oct 19 14:01:16 2025 GMT
Not After : Oct 20 14:01:16 2025 GMT
Subject: CN=2e6fd617ec21ba0b90c0ec51a17b4ef4b680fde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:49:3b:ca:c1:62:1e:20:1f:53:85:dc:a6:48:
ec:b9:66:c2:27:11:50:4f:57:01:69:17:bc:6a:18:
0b:1e:c6:73:2d:67:72:60:38:e5:a5:f4:60:2f:31:
3c:f3:a5:17:1b:9a:91:f8:29:27:94:9c:05:15:2a:
3f:e7:ec:b1:b5:a2:b8:7e:ac:60:89:4e:65:87:98:
17:8f:9a:53:a7:92:80:1a:a8:ba:5d:43:cb:da:c6:
c8:4c:3b:2d:78:28:02:10:af:ca:a9:c3:98:b4:04:
89:81:94:37:58:86:e8:79:5e:2f:e9:f7:f5:9d:e1:
ba:d8:f1:a6:1b:2e:b6:ab:0f:ee:d2:93:f8:db:3f:
4a:f6:79:d4:88:07:2e:cb:05:28:51:a5:ad:c9:42:
94:0d:d8:04:f3:35:0b:48:3f:be:2c:ea:34:3e:1c:
dc:8a:ce:c0:cc:7f:e8:b9:63:50:8c:19:c6:52:c1:
9d:37:94:7a:e5:df:1b:96:57:01:bc:77:27:aa:e4:
dd:6a:69:78:ea:89:69:ac:49:e6:60:bc:0d:67:db:
9f:fd:ce:16:54:dd:ec:77:84:87:e1:11:8d:d7:6b:
1b:85:01:1e:1a:60:64:bb:a2:41:ce:f1:be:aa:0c:
eb:7f:d1:e1:09:99:02:25:02:1f:0e:f6:1c:d3:2d:
7c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6F:D6:17:EC:21:BA:0B:90:C0:EC:51:A1:7B:4E:F4:B6:80:FD:E1
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:da:8f:bf:f5:ff:19:7e:c1:69:af:27:0f:df:ad:22:47:52:
ce:6c:78:b2:a7:f7:5b:c6:58:e1:54:ea:bc:d8:63:75:7a:ac:
7b:03:05:18:d1:1c:7f:a0:6c:ef:d1:57:76:75:5c:d5:8d:96:
bd:2e:89:8d:26:72:1b:5c:a5:af:07:08:47:5c:ca:4c:98:20:
56:db:86:c3:2a:d9:85:68:e3:0e:60:43:4d:53:73:31:f8:d2:
25:d0:9a:2f:c8:96:df:aa:e3:33:13:53:f3:09:34:f5:76:15:
49:ff:57:1d:69:cc:9f:fa:d0:76:78:da:d3:f9:21:72:87:e6:
1f:49:34:6d:a9:4b:31:f2:77:e1:b2:a5:04:d4:1d:46:95:64:
6d:1c:d5:b8:30:a1:2f:a9:99:49:3c:62:72:b3:36:d6:09:7d:
16:10:71:98:d3:09:f3:0f:a1:16:47:17:19:0c:c9:a8:5c:78:
c6:c9:b6:e7:00:b0:7b:25:70:cd:0e:a4:d9:73:63:23:15:2f:
0d:7e:45:98:be:2e:1f:d7:54:4d:80:fe:8d:9a:39:05:08:69:
49:6c:1e:0f:93:10:80:b0:1e:8c:b3:79:70:34:a8:90:c5:df:
7e:3e:50:d1:f4:70:10:6e:19:d6:cd:38:09:95:50:84:e3:1a:
58:68:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:50 2025 by rpki-client