Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
File: 7Y3fghIIo3DjpbfvjNR5fPxXdII.mft (raw, json)
Hash identifier: dezBDQeEsNNMm6LzHESnMEpEBJCoySBlqGKeLUqWgx4=
Subject key identifier: 1A:EC:CC:1F:DA:BB:AD:15:5E:99:2D:CB:07:F0:48:E2:1B:A0:73:AB
Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
Certificate issuer: /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Certificate serial: 0199FBEA7FE77DB462D3C6D8FFEF6016B8EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
Manifest number: 0D62
Signing time: Sun 19 Oct 2025 10:01:13 +0000
Manifest this update: Sun 19 Oct 2025 10:01:13 +0000
Manifest next update: Mon 20 Oct 2025 10:01:13 +0000
Files and hashes: 1: 7Y3fghIIo3DjpbfvjNR5fPxXdII.crl (hash: TCzRjq5kao3HmluhxAfIB9buNZanY4O1HBYWadTZOig=)
2: DurnQ3dAzPxoCUXWiroCcReHID8.roa (hash: k2ck5I6D1NKufGijk0qz5B1og8UdirayVzhgWYYPrYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7f:e7:7d:b4:62:d3:c6:d8:ff:ef:60:16:b8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Validity
Not Before: Oct 19 10:01:13 2025 GMT
Not After : Oct 20 10:01:13 2025 GMT
Subject: CN=1aeccc1fdabbad155e992dcb07f048e21ba073ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:e3:3e:5f:e6:d9:aa:22:be:d8:b9:69:d1:
c9:d9:0d:94:f2:52:af:f1:7c:8a:c1:bc:3f:4d:58:
18:c2:6f:c5:0f:c6:31:c2:81:3c:15:8b:9f:75:e2:
4d:68:35:47:ed:f7:e8:07:c8:64:8c:79:45:d1:d8:
89:b9:09:da:f6:a8:47:9d:f0:36:3f:9e:0f:2e:3b:
40:95:3e:59:25:70:99:96:75:0e:bf:95:81:e2:8d:
3c:03:2b:f9:94:b2:6e:4d:b9:ff:ab:91:0f:bd:2a:
44:31:fc:c1:1e:0b:e2:26:a1:d7:e6:70:01:93:7d:
fa:d1:a5:1e:fc:dc:b7:96:30:5f:5a:4e:ba:06:54:
4a:b3:63:30:87:9e:92:35:e0:e1:b5:19:f2:4f:0c:
ff:6c:c1:56:47:a4:46:fe:30:34:be:23:d4:25:41:
2c:d0:13:25:4f:f9:15:85:79:b0:5d:43:82:bf:3f:
b8:8b:9b:fb:85:81:1a:80:d0:eb:97:94:5a:fa:5d:
c4:ff:84:f8:97:45:57:17:af:38:20:7e:9e:36:34:
1d:0f:ae:69:99:80:fc:37:0f:53:11:66:5b:d3:1b:
c7:8e:51:7f:9e:55:80:a6:a0:94:b3:8e:01:87:03:
23:26:cd:7e:31:ea:29:84:54:e9:73:ba:af:a1:9c:
9d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EC:CC:1F:DA:BB:AD:15:5E:99:2D:CB:07:F0:48:E2:1B:A0:73:AB
X509v3 Authority Key Identifier:
keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:d9:7a:11:a7:01:37:23:c8:fb:e9:d9:45:45:5e:39:3b:eb:
9a:05:11:0b:de:a1:a3:a8:f5:e8:c6:63:85:63:13:95:a2:ca:
fb:7b:aa:41:81:04:49:bc:78:37:55:ad:6c:45:d7:54:52:76:
78:a6:32:31:25:68:d1:18:0d:30:e8:53:c6:b1:f8:f3:60:fa:
83:12:f7:46:fa:10:27:d1:dc:cb:a8:04:1f:69:ab:8d:d4:25:
e0:0f:41:de:60:a0:7b:04:d9:d4:38:9b:97:0b:81:9c:dc:ce:
08:e2:76:96:c4:c7:b7:f0:17:2b:5b:d2:88:7b:dd:43:97:78:
f1:43:a2:99:b8:df:40:fd:26:f2:c7:a4:13:d0:90:3c:32:9a:
c1:3f:61:a5:b0:5e:f2:5c:25:ae:71:59:aa:ce:51:ca:73:75:
1f:a3:0e:e1:dc:10:65:91:13:60:f3:14:b8:a6:67:8e:c2:ba:
6d:06:fc:76:f9:f6:17:af:e2:6a:0f:65:d4:fd:1a:da:a2:a1:
ff:d1:cb:71:57:f5:49:35:c6:cd:9a:88:64:5f:6a:7d:65:3e:
03:a5:a7:29:60:74:12:28:d7:6b:1b:de:27:2f:05:4d:82:81:
e6:43:e7:ed:c8:7f:8a:38:73:cc:af:8b:a5:c9:13:09:27:62:
7f:ad:b9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:50 2025 by rpki-client