Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
File: 7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft (raw, json)
Hash identifier: AnxKbLwwbb0g+yEvj59SuNbA51gENsf84kZy3NT77v8=
Subject key identifier: 47:FF:7D:4E:D7:70:FF:DB:0F:E5:CD:13:30:00:B4:F1:A9:E0:2D:C3
Authority key identifier: ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
Certificate issuer: /CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Certificate serial: 0199FDD978C508EBAFDEA755264B9D31CE7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
Manifest number: 1227
Signing time: Sun 19 Oct 2025 19:01:51 +0000
Manifest this update: Sun 19 Oct 2025 19:01:51 +0000
Manifest next update: Mon 20 Oct 2025 19:01:51 +0000
Files and hashes: 1: 7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl (hash: 6bjE39N7QxfOqbFtT5seIBj2V0DJGB7j4baFKITRKFI=)
2: DYtZ-mqw6oNlIGZ4UJkyBpBrIuQ.roa (hash: hy9DSVfaehQXQmBRqqc5gZr2CYEFnu9h17oPiFVHPic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:78:c5:08:eb:af:de:a7:55:26:4b:9d:31:ce:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Validity
Not Before: Oct 19 19:01:51 2025 GMT
Not After : Oct 20 19:01:51 2025 GMT
Subject: CN=47ff7d4ed770ffdb0fe5cd133000b4f1a9e02dc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:8c:1a:3b:1c:9f:0e:11:04:13:bc:4f:b1:
f0:e3:f5:7c:39:08:6e:3e:10:7f:67:b3:ce:89:4c:
43:16:64:cf:e0:c1:cc:03:5d:bb:38:0a:50:d3:87:
11:3c:34:23:77:99:6d:b7:5c:ef:fd:16:b0:fb:f0:
f1:26:67:ce:ba:14:6f:09:fc:29:bd:75:eb:7d:a4:
bc:bf:15:e3:be:15:06:c5:39:3a:32:88:a5:f1:1f:
36:fa:30:7e:42:5a:d9:5c:f5:29:d2:f5:5c:b7:64:
33:e6:41:dc:25:f4:ae:ed:ec:5a:08:ff:19:10:e5:
ea:57:8a:10:ce:fc:ee:db:7e:64:f8:35:8c:27:a7:
3c:7f:01:a6:b2:d0:6d:cf:54:ae:8c:f8:c6:e3:e9:
3a:60:f9:20:34:9d:ed:c6:a0:4b:1f:5c:a7:61:13:
12:68:69:06:72:da:d2:81:16:5f:6f:dd:9c:a4:d8:
ce:c4:39:2c:47:80:4d:5b:6e:89:86:e8:6b:94:92:
47:7c:45:6e:9b:da:28:ea:b0:6a:87:11:98:78:eb:
8f:67:05:fe:74:bb:ff:b3:fb:c4:df:99:8c:db:f2:
ed:45:e1:6d:ab:6f:cc:24:dd:60:57:76:73:00:be:
32:14:f1:75:4a:6e:32:23:e2:bc:55:0c:32:d9:a8:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FF:7D:4E:D7:70:FF:DB:0F:E5:CD:13:30:00:B4:F1:A9:E0:2D:C3
X509v3 Authority Key Identifier:
keyid:ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:83:00:1c:b5:ee:bf:c9:4b:04:98:7d:6c:a9:2f:c8:c0:ab:
7c:a9:ba:b4:47:20:1d:c0:3c:59:d5:71:b9:36:de:1c:df:39:
a7:70:7c:73:b6:55:ba:9b:54:c4:00:a6:6f:8b:f9:04:61:e1:
a0:1a:c5:74:a2:44:39:20:08:c7:f0:57:28:f1:0a:bc:8c:22:
c7:76:a5:99:23:03:10:d0:7f:3f:64:d3:6a:21:02:b0:83:f0:
9e:27:f8:8c:8c:cb:43:8e:36:26:99:af:83:43:1e:f3:de:74:
c0:be:0e:da:22:cb:72:79:d1:16:50:96:fe:e4:4d:1c:e6:3b:
23:eb:bf:7a:53:86:93:13:a3:23:1c:39:26:b1:9b:49:d5:02:
5e:6b:b5:68:23:13:3c:48:49:f3:b5:32:7a:68:2c:3b:4a:6b:
a4:11:87:ac:4d:90:68:bc:24:07:9f:2a:28:74:b1:74:a4:a5:
3b:92:fe:32:0c:a4:5b:de:4e:e4:80:ec:2e:f9:83:5c:36:11:
c5:dd:bf:86:db:0d:a0:5f:c6:67:57:64:88:f4:c8:6d:ba:69:
71:49:bb:23:49:ba:39:98:16:44:b0:96:8f:3e:13:8a:cc:02:
d9:99:f2:14:ac:2c:98:61:17:67:0b:de:a7:72:e3:8a:d8:64:
70:b1:f4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:39 2025 by rpki-client