Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
File: 7onRezmnaEppVLl7iw-6x9SJVMo.mft (raw, json)
Hash identifier: n4gbtCSqwtwrH7nBR18XEqgD2d1Uw1nL72leEho7+QE=
Subject key identifier: 84:1D:EA:AF:DB:E5:DD:7C:D7:DD:E9:BC:4C:E9:D3:4D:57:23:E3:1C
Authority key identifier: EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
Certificate issuer: /CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Certificate serial: 0199FF903B0C9514D8D6A1EADE1AB4F8A909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 03:01:06 +0000
Manifest this update: Mon 20 Oct 2025 03:01:06 +0000
Manifest next update: Tue 21 Oct 2025 03:01:06 +0000
Files and hashes: 1: 7onRezmnaEppVLl7iw-6x9SJVMo.crl (hash: X7Lgd+XnZ1DFIlJsc2rryMUq1MMDn53eQGZXYItba/0=)
2: SWG7ULWsbdkT7YnAYLal6aiUNPU.roa (hash: 4R5oEsAspImowOjIwYW5eNE8lcSJazbh0RoaPrdVo18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:90:3b:0c:95:14:d8:d6:a1:ea:de:1a:b4:f8:a9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Validity
Not Before: Oct 20 03:01:06 2025 GMT
Not After : Oct 21 03:01:06 2025 GMT
Subject: CN=841deaafdbe5dd7cd7dde9bc4ce9d34d5723e31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c5:10:27:fe:87:1b:96:f1:d2:4d:96:02:00:
a4:84:f8:f0:12:a5:41:6e:af:f6:d5:f7:89:66:3f:
ba:a8:64:b4:2b:f3:fe:ad:22:73:83:98:0e:d2:9e:
30:e8:b7:ac:68:3d:6c:ae:e2:07:60:f3:b4:92:de:
c0:2c:10:76:95:b0:23:26:ed:87:45:99:ba:3d:2a:
55:12:2a:73:23:8a:11:13:28:70:48:f0:97:de:00:
d0:bb:62:f8:45:b1:2e:43:18:f9:86:57:f1:bc:30:
5c:ca:33:ba:ef:5a:be:96:a4:15:5d:b9:bf:4b:a0:
a8:06:12:f8:7e:a1:03:e9:a0:da:5a:37:ff:cb:b7:
97:e8:25:db:d6:e8:12:c0:31:0c:6c:5a:7d:35:89:
e6:29:17:aa:04:01:1e:37:6e:5e:6e:4b:37:8b:61:
ed:3a:ef:c3:c4:08:4d:13:25:35:76:af:9e:f0:9b:
f6:33:d2:73:ed:88:93:bb:69:02:03:f2:78:6e:73:
e3:fb:fd:84:7e:b8:bf:33:ba:8e:8d:e1:ab:bf:11:
97:36:70:ab:52:cd:95:95:d4:26:78:aa:e7:b9:3c:
f6:ba:9d:87:66:42:65:01:e6:4b:b1:91:63:4b:57:
ff:81:8e:d9:6d:69:cf:22:b8:e6:02:74:49:57:94:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1D:EA:AF:DB:E5:DD:7C:D7:DD:E9:BC:4C:E9:D3:4D:57:23:E3:1C
X509v3 Authority Key Identifier:
keyid:EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7e:97:50:10:f6:b3:fe:e1:3a:ab:06:65:f9:cc:d5:09:8a:
73:06:a7:87:55:51:fc:e7:cc:d1:8a:f1:8c:8a:49:54:c5:e4:
98:87:4e:96:00:e4:2e:74:33:b2:8c:8b:63:0b:7a:dd:7e:7b:
7f:d2:5c:05:8d:d5:cc:14:0d:e1:d2:67:9a:96:e1:ce:0a:32:
bf:5f:37:a9:f2:97:d7:8f:0c:8e:15:21:97:2b:b3:61:fd:f4:
61:4b:81:84:39:79:5a:f2:01:a2:6c:58:c1:af:3c:45:d9:09:
0c:2c:d9:99:f1:c8:e9:4b:84:78:05:ef:6f:f4:95:85:ef:5d:
02:38:58:a3:b2:3a:c5:81:f7:c8:08:67:cb:13:e2:37:31:0e:
a5:c0:4b:be:66:f9:77:12:a9:c4:2b:6c:de:b5:05:0a:43:a1:
86:e3:85:c2:99:1e:8d:e6:39:2c:6d:25:5f:8b:3e:91:c3:2c:
98:39:b3:c6:dc:f9:e8:34:c4:20:37:ce:8b:2e:12:77:c8:1c:
49:7d:6c:16:a6:9d:1f:c0:5a:7e:e3:be:66:91:43:4d:83:e6:
58:53:39:d6:7c:40:f6:ba:c7:17:9c:73:92:a1:a8:4c:f2:b1:
c9:ac:d3:d8:67:53:09:72:c2:af:22:d0:c7:c0:55:56:cf:85:
1e:39:90:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:22 2025 by rpki-client