Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
File: 7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft (raw, json)
Hash identifier: kfyT028mIXvNRT2TsD7FncO26ZTwt6kBhlPhveJC2cM=
Subject key identifier: 1E:42:43:2E:55:C2:CF:17:5B:B1:9A:B0:E8:EA:51:DC:67:D1:51:D7
Authority key identifier: EE:F8:E9:80:CE:1E:EB:32:74:8D:94:B1:D0:CD:42:48:9F:91:F6:E9
Certificate issuer: /CN=eef8e980ce1eeb32748d94b1d0cd42489f91f6e9
Certificate serial: 0199FC219F3BB0BD50EEE957F2344AF5CA5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
Manifest number: 0FDE
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: 7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl (hash: Otv9Z2EiPNdGZveSKLe5J28HD0jujZsia+D1dajR63I=)
2: M_6QebMR4XXc_4ZSk3fzCdN3vvQ.roa (hash: VK66PCYpiRoLnxe0rDgGTNdxCqYRv5AkRtVmGa+QNQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9f:3b:b0:bd:50:ee:e9:57:f2:34:4a:f5:ca:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eef8e980ce1eeb32748d94b1d0cd42489f91f6e9
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=1e42432e55c2cf175bb19ab0e8ea51dc67d151d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:d9:1f:48:c9:57:44:01:29:d4:eb:54:1d:
b2:24:e4:06:1e:59:e3:dc:65:19:b8:c7:2f:11:58:
1b:5e:2b:5e:5d:1e:ef:17:67:72:5d:82:5b:0c:fa:
25:76:a5:71:87:38:f3:71:1b:24:03:3e:9b:32:81:
03:31:39:5c:c4:de:89:5e:a8:3b:24:39:ee:b6:8c:
a1:8d:8e:10:9a:38:c4:a1:f0:40:81:ef:5a:0f:75:
f0:46:3e:fd:2c:a7:5c:1c:62:05:ac:c9:1e:71:97:
86:dc:96:bb:c4:f9:00:3e:d4:e5:e4:37:32:71:e7:
03:97:c9:98:34:ec:87:b8:99:5f:8a:ed:d4:01:04:
68:f3:36:57:7c:70:b2:45:b6:21:5f:f4:62:b3:04:
15:77:fc:e2:9b:b8:ba:a7:5a:b8:eb:bf:32:49:4f:
53:28:d8:35:0d:dc:ae:d9:03:a7:f4:0d:99:7d:d8:
8c:80:6b:1d:bc:fa:aa:10:f8:88:a0:d8:2a:ee:c0:
81:66:65:e5:3a:b9:81:84:e5:2a:68:ec:40:fe:fc:
c6:37:5a:1b:41:6b:9e:ec:b2:bf:67:15:b1:2a:f5:
1b:32:59:16:8b:42:b2:af:73:91:6d:07:2b:d8:9a:
31:cf:5c:3c:b4:88:0e:d6:f8:da:5c:a4:3b:05:b0:
88:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:42:43:2E:55:C2:CF:17:5B:B1:9A:B0:E8:EA:51:DC:67:D1:51:D7
X509v3 Authority Key Identifier:
keyid:EE:F8:E9:80:CE:1E:EB:32:74:8D:94:B1:D0:CD:42:48:9F:91:F6:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e8e053-ea10-4285-adaa-b495eccb09c4/1/7vjpgM4e6zJ0jZSx0M1CSJ-R9uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:04:38:2e:25:d5:c8:36:54:ab:5a:73:b2:2b:c4:a9:f1:4e:
05:12:3f:8d:bb:c0:06:f8:94:c6:2f:58:33:c8:d6:50:f1:ee:
18:9a:ad:79:ca:3d:ef:c5:fc:7e:2f:41:59:68:6c:0a:9c:29:
3b:30:7e:d3:c0:0e:8d:23:16:1a:2a:40:57:3a:a4:f8:8b:4d:
e0:e8:ca:fe:7a:04:4e:20:f1:25:02:c3:44:18:13:a0:3d:11:
58:13:4d:6f:5e:20:30:29:99:c7:8c:31:93:70:17:ab:fb:7b:
03:3d:1d:e9:9e:88:4e:09:e8:d9:0a:78:0d:b7:e6:63:33:e9:
e0:7c:fe:99:3a:46:e7:8f:41:54:74:f6:98:ef:7f:04:da:4d:
96:09:cf:d3:b9:af:ec:35:e3:5c:0e:c0:9b:c9:b6:0a:d1:f2:
37:3c:69:84:bd:f5:11:7f:a9:0a:53:ac:16:85:d8:75:61:63:
10:e2:7b:a6:64:22:66:18:89:4d:ca:93:a4:86:2c:95:ff:89:
5d:c7:a1:aa:08:89:ee:d5:91:5f:27:68:fe:9e:f4:44:d3:34:
20:56:29:e2:ac:76:72:41:a7:14:3c:5e:35:89:d7:91:e0:25:
0a:68:b5:76:ba:88:b7:8d:17:ec:9a:f6:40:7d:56:d8:e3:ef:
45:ad:b1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:41 2025 by rpki-client