
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
File: 7WRpHDGJLMmRrU6alnEUd1nkF6s.mft (raw, json)
Hash identifier: uQLLNZjj/LNqF8C0I3W9Lp1PEnCfQ/K/eFVpTIfE7AI=
Subject key identifier: 42:B3:82:52:67:37:91:C1:5C:A1:C8:DB:00:AF:2A:B4:F2:B5:5D:9D
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Certificate issuer: /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial: 019A003599F71BC091E692045B1BDEC20490
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
Manifest number: 09A5
Signing time: Mon 20 Oct 2025 06:01:43 +0000
Manifest this update: Mon 20 Oct 2025 06:01:43 +0000
Manifest next update: Tue 21 Oct 2025 06:01:43 +0000
Files and hashes: 1: 7WRpHDGJLMmRrU6alnEUd1nkF6s.crl (hash: nmxEnxijbJ+f9jjwPskFa6zoRhFEVV6WPpMUL76m0uU=)
2: dV2OtRjSyQPY4YCyr9lFdLU27E8.roa (hash: eomTnqbffaVsgF38WkF2EttPiM+DiZupJiWYxVCsPt8=)
3: xHYGSG6pMx6mBw-U4QLCbexieKg.roa (hash: Dbi0ykNqwAdlzwO51Tx8PIe+eNIEvO7D6Pgb6XNhKuw=)
4: xx8xA0JnzBykNL-Z7GzXL0j5bD0.roa (hash: 476qF8QW7rlffGimT6vIV2UtU8yiqDsBP0tdI7yQI0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:99:f7:1b:c0:91:e6:92:04:5b:1b:de:c2:04:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
Validity
Not Before: Oct 20 06:01:43 2025 GMT
Not After : Oct 21 06:01:43 2025 GMT
Subject: CN=42b38252673791c15ca1c8db00af2ab4f2b55d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:76:1f:b9:a7:03:10:0e:47:6c:62:a4:d0:bf:
e4:71:c8:19:05:e2:c3:c3:29:a2:03:7b:57:bf:d4:
1b:a3:f5:b2:74:79:ca:27:93:cf:b4:68:c4:f4:c5:
a9:75:4f:46:d2:b4:57:67:57:05:1d:f7:d9:bd:65:
ab:45:86:59:05:72:65:0e:b8:25:60:55:a9:92:e4:
93:fc:b4:66:ac:db:6d:b3:3c:db:1b:66:dd:78:2f:
c3:9a:be:5e:5f:c6:44:fe:ed:ca:06:47:82:80:d6:
12:f2:ef:84:5c:ee:be:79:7a:e9:8a:bd:ec:84:46:
29:19:5c:ee:d1:21:a8:6a:13:f9:b9:2d:ef:65:f2:
de:b7:35:87:86:43:d1:45:14:9e:a2:50:22:02:9b:
e0:4f:97:09:10:62:e2:98:95:e4:43:6c:c2:98:71:
8f:c6:70:f5:12:ff:3c:18:c0:48:43:56:79:b6:4b:
92:a9:e9:64:54:06:c0:34:93:50:c5:14:80:39:48:
24:24:1a:67:b9:fa:63:38:97:1a:62:fa:65:6f:59:
42:63:15:bb:14:8c:d0:a1:29:f0:aa:f3:7a:32:10:
60:29:b2:4b:d0:6d:5f:0e:b7:ad:bf:0b:5e:52:e7:
d1:47:60:7c:34:1e:79:aa:93:16:68:56:b7:5e:b1:
d1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B3:82:52:67:37:91:C1:5C:A1:C8:DB:00:AF:2A:B4:F2:B5:5D:9D
X509v3 Authority Key Identifier:
keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b5:c8:de:a2:09:bd:23:fb:77:f4:30:30:63:9c:6d:d2:cc:
7e:08:b1:c1:f1:f0:7d:e3:c0:7c:79:ee:be:11:9c:e6:57:dd:
0a:a8:15:90:eb:44:00:91:44:b5:88:78:9e:e3:79:ff:fd:5b:
23:29:40:77:eb:c6:79:81:11:96:85:ed:00:e6:4c:21:84:70:
e6:65:22:b0:f8:96:41:e4:11:71:56:34:b7:4e:eb:14:50:63:
35:a3:04:e9:5b:ca:4e:41:49:66:e0:6b:b9:b9:4b:e2:10:5c:
1f:c0:24:52:dc:a5:d9:70:e0:8b:41:bb:b3:a1:26:4d:d1:ff:
32:5f:59:10:27:a7:86:ea:91:47:3a:a3:ec:9c:fd:06:7d:ad:
9c:a2:7e:33:6f:cb:b0:79:91:3d:22:f5:a5:a3:b7:2c:bd:de:
e7:c5:f4:62:3a:79:41:c9:27:2d:f5:b1:52:3f:35:3a:58:e9:
37:4a:a4:20:fe:da:52:ce:8f:cc:0f:7c:fa:ca:00:2f:8a:b7:
16:c2:c1:f8:72:80:c9:6f:d5:9f:fb:77:ce:b6:93:83:39:68:
4e:4c:42:44:cd:d6:70:38:73:cd:04:3c:9c:d3:c0:40:f2:cb:
61:1d:56:d3:09:1d:44:97:14:07:76:3d:52:c9:8d:91:33:ea:
94:d7:18:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:21 2025 by rpki-client