Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
File: 7512O0ngJKe2oZ6vffuYkRqclMg.mft (raw, json)
Hash identifier: n/K4Z8F6B7RhN9juRLWqxKiQRp2YAqZw3ZnzTqtvLQQ=
Subject key identifier: AC:E6:CB:5C:10:14:D9:A9:4D:90:51:57:06:16:AB:04:C4:CE:1B:83
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial: 0199FDDA207A6A5EC32FBE63F810E4609BCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
Manifest number: 16ED
Signing time: Sun 19 Oct 2025 19:02:34 +0000
Manifest this update: Sun 19 Oct 2025 19:02:34 +0000
Manifest next update: Mon 20 Oct 2025 19:02:34 +0000
Files and hashes: 1: 7512O0ngJKe2oZ6vffuYkRqclMg.crl (hash: YBDHSK9+ig49FJNYHIb3+2MfZ+n5fsouHgDqBs3YmEQ=)
2: LSx9OlKUNiN9N5Lzmn4mpgYUaYM.roa (hash: SRtMriKTJRyDfQ60LOh5mHm3HAzdoYJatQZ33jFO0KY=)
3: Yzpl7dcbDV1oc45l6H78VWlDWek.roa (hash: rLWJRRPMzAUWRBDLzYpnEF8zI53ESvU9cKsYN1kvko0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:20:7a:6a:5e:c3:2f:be:63:f8:10:e4:60:9b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Validity
Not Before: Oct 19 19:02:34 2025 GMT
Not After : Oct 20 19:02:34 2025 GMT
Subject: CN=ace6cb5c1014d9a94d9051570616ab04c4ce1b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:0c:c6:a1:d1:9c:39:64:6d:c9:6d:7d:53:
55:cd:33:0a:b8:13:2b:ca:70:f1:a4:c6:47:21:ac:
7e:04:89:f7:e7:d7:f8:76:77:0f:d1:f4:89:1d:fa:
e8:d6:a7:37:ea:5d:35:1f:da:ec:46:c0:e0:e9:35:
03:aa:ae:72:72:24:91:bf:d5:c2:92:5c:d5:07:46:
f4:8e:e4:7a:92:3b:94:55:6d:17:32:47:9f:a0:b7:
34:c5:c6:16:29:5c:d8:dd:dc:58:4c:1d:f9:83:c0:
43:45:3a:e6:6d:8c:a6:bb:09:44:31:2b:75:d6:0f:
d6:5d:2d:66:40:a5:97:a3:2a:f6:5e:8c:be:c3:36:
59:ea:0a:56:28:ae:5f:e7:71:72:db:dd:d9:74:16:
14:54:64:c1:52:77:fc:79:ea:de:6e:00:12:96:ee:
32:00:95:96:42:11:a3:df:4b:a2:bb:a0:02:a0:2b:
04:41:62:ba:a7:cf:03:ae:55:a3:bf:50:7c:6d:a7:
b9:2f:55:f3:42:c6:f4:15:43:ed:2d:88:60:a5:5d:
24:9f:b9:c5:b8:80:a0:af:65:dc:46:dd:42:c1:8d:
0c:60:cf:d2:dd:4b:e8:fa:d6:5e:75:d5:68:f2:3a:
d8:fe:85:9e:3c:71:a1:eb:1f:ab:db:84:a6:9e:48:
7e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E6:CB:5C:10:14:D9:A9:4D:90:51:57:06:16:AB:04:C4:CE:1B:83
X509v3 Authority Key Identifier:
keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:79:5d:54:6f:0f:57:e3:8b:75:79:51:91:19:1f:d6:31:fb:
35:d2:d2:c3:87:97:5a:3d:6d:90:7b:f0:9d:4b:cf:85:f4:1b:
72:ce:4b:54:aa:5e:75:0c:36:cf:ae:9a:b8:f5:81:5b:41:fd:
ea:67:4b:a6:d4:d1:2e:f2:42:eb:71:ae:c6:82:d6:1c:63:b8:
46:27:46:ec:e3:b6:19:f7:aa:5a:2c:73:fe:e3:26:ff:06:e8:
0a:3a:f3:35:fa:87:b7:35:1d:f3:0a:b1:29:3e:51:67:cf:64:
91:58:4c:07:77:ba:99:43:dc:9c:33:27:35:c9:f0:13:e9:0a:
02:9b:43:40:05:48:98:d7:6f:5b:f3:14:6a:6f:5d:38:ab:84:
d1:af:1b:eb:bb:eb:bc:6d:b8:65:f0:e1:16:67:8e:98:6d:1b:
aa:3e:63:18:59:c2:83:e5:b6:e0:12:68:70:82:5e:88:2e:0c:
5c:a3:f6:5d:58:77:d8:1c:3a:54:4c:55:00:6b:a8:fa:9b:13:
7d:15:b8:8b:fe:75:74:b7:95:c6:05:e1:36:a0:91:b0:4a:bb:
55:6e:44:f2:1c:7d:a0:62:7a:db:fe:e5:69:15:d7:84:be:38:
1f:cc:8b:0c:a1:d5:31:98:f2:f8:71:89:7d:96:58:7b:0f:f7:
19:48:74:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:23:05 2025 by rpki-client