Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
File: 7nRQsjAXLj6K01KIEQ74q9JP-S0.mft (raw, json)
Hash identifier: AIiHV/p34+jQrUYeEny5UKA9fdMjmMC98kbo24pERq4=
Subject key identifier: 81:D7:8D:60:F3:4C:1B:A8:28:2C:08:C5:D8:77:AC:2D:09:D7:24:70
Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
Certificate issuer: /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Certificate serial: 0199FC8F6ACB16152450389682704373C286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
Manifest number: 09AE
Signing time: Sun 19 Oct 2025 13:01:21 +0000
Manifest this update: Sun 19 Oct 2025 13:01:21 +0000
Manifest next update: Mon 20 Oct 2025 13:01:21 +0000
Files and hashes: 1: 7nRQsjAXLj6K01KIEQ74q9JP-S0.crl (hash: GbUJOPnFU75YsNIsTVrbvdDmtKAb4paRPbE7rjXC4o4=)
2: Ryemd1TDuIeUGlHSxQ4yYf0bI78.roa (hash: TuiESkEb7Uapb4uz5EJqoKRBNlBEi1zqIu4KTer9R60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6a:cb:16:15:24:50:38:96:82:70:43:73:c2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Validity
Not Before: Oct 19 13:01:21 2025 GMT
Not After : Oct 20 13:01:21 2025 GMT
Subject: CN=81d78d60f34c1ba8282c08c5d877ac2d09d72470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:61:d7:60:d5:ce:57:c8:6e:04:37:0b:8e:
d1:a9:06:f3:33:70:1c:4f:c5:18:d4:f2:d8:de:31:
5b:bb:2f:56:83:67:98:89:cb:bc:64:01:84:6b:37:
d3:1f:e4:93:61:cd:4a:99:3e:16:76:f9:f2:aa:4c:
15:b8:51:f5:46:fb:ee:b2:63:a3:e9:1e:ed:5a:4c:
5c:7c:67:74:c6:65:01:a4:47:32:d6:ad:b4:e8:45:
ee:d2:5d:71:5c:a0:ab:b8:9f:12:43:b3:f2:ae:c1:
fd:a5:d5:be:cc:00:35:46:39:ab:d3:18:c2:6f:fc:
63:81:3c:b2:7f:cb:70:f6:7a:a7:5d:79:24:34:b5:
61:aa:aa:5c:29:c1:cd:cf:6c:7b:38:ae:0d:e3:19:
df:b3:2f:e9:13:74:92:ce:13:5d:21:d8:0f:c1:c7:
c4:2f:0c:69:49:35:ad:c6:68:b0:06:d1:90:73:62:
97:c1:2e:94:c3:fe:95:60:e7:0c:d7:98:64:ae:1b:
b9:bd:11:cb:a6:59:51:bf:1f:f9:44:f1:a6:7d:41:
85:7e:f5:d1:6d:90:b8:e3:0b:eb:1a:15:40:3b:93:
6b:4b:b0:d7:94:af:ec:bb:1a:50:5e:58:96:72:cb:
45:7f:3b:41:aa:19:3d:bb:cd:2a:9a:8f:14:2d:58:
b3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D7:8D:60:F3:4C:1B:A8:28:2C:08:C5:D8:77:AC:2D:09:D7:24:70
X509v3 Authority Key Identifier:
keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:bd:09:22:94:a6:c5:50:c2:c6:77:1c:b8:f4:5a:eb:77:97:
0b:bc:09:0f:a4:48:2a:1a:e9:97:fc:d0:21:76:01:c9:1b:eb:
5f:2f:04:6c:8f:09:53:2a:87:c8:b0:a1:2a:8f:39:92:1f:3f:
2b:8a:6a:68:0f:81:95:b7:fb:af:c9:90:91:93:3a:31:a5:46:
99:2b:2b:41:46:7e:f6:80:d4:ec:93:e7:05:4b:29:c5:b1:d9:
ab:a9:23:b4:69:31:c1:4d:16:64:e4:7f:c8:17:1f:fc:de:93:
14:fe:2b:28:4f:e9:a3:db:e8:c1:cc:60:59:11:0c:aa:69:dc:
25:b3:6c:f1:c1:94:76:64:18:a1:0e:0e:f3:c4:6b:c4:b7:33:
a4:33:2a:29:05:ba:65:b1:ad:12:c1:83:b2:fd:48:d6:35:d7:
79:6f:de:c6:6e:b8:ca:5d:78:c2:d0:29:16:53:55:16:aa:c1:
fc:60:db:90:01:71:d9:65:b5:41:b6:8e:a1:9c:b2:04:8e:6f:
86:37:50:10:38:5e:1d:22:d8:46:e1:43:f5:6b:38:30:23:ec:
10:60:36:c4:e9:e6:8e:d8:a3:fb:fa:20:95:8f:a0:aa:7d:22:
99:a0:79:bd:86:0c:30:d4:e1:40:6d:0e:c8:7c:5f:51:87:e7:
b3:dd:9f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:05 2025 by rpki-client