
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
File: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft (raw, json)
Hash identifier: ctf+EMtXlmFBClqQo56FsH3Js2bNt2jUq1clTwEwxE0=
Subject key identifier: 09:D7:E6:81:C2:DF:1A:7F:CB:75:DB:59:B5:F1:54:83:4C:2D:07:7A
Authority key identifier: EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
Certificate issuer: /CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Certificate serial: 0199FC2138C5AFE7FD6D7247C3276C2FE4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
Manifest number: 0A6B
Signing time: Sun 19 Oct 2025 11:00:59 +0000
Manifest this update: Sun 19 Oct 2025 11:00:59 +0000
Manifest next update: Mon 20 Oct 2025 11:00:59 +0000
Files and hashes: 1: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl (hash: d08nfb/hAt5SR+gbeT9+wIo1MKY6HZZNPmhg8mZLSZg=)
2: e64v2Sa7kZCTmVuIe0U1EA1y5UE.roa (hash: 4+uTyAtFS8DAUClwiFHwirOIVJLgQjU/10EzULT806g=)
3: hiAVbhcO1TwVpozBkcEWuw9CQcA.roa (hash: cM6xE/ZqL2V37JUXZnVYtBWEG50dOsPtinGWqXaIJmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:38:c5:af:e7:fd:6d:72:47:c3:27:6c:2f:e4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Validity
Not Before: Oct 19 11:00:59 2025 GMT
Not After : Oct 20 11:00:59 2025 GMT
Subject: CN=09d7e681c2df1a7fcb75db59b5f154834c2d077a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:56:c0:92:fd:86:2d:97:ad:70:d9:e5:9e:70:
a6:29:39:64:d8:e8:3c:a8:0c:7c:fb:03:91:ae:bf:
a8:ff:b3:50:76:d0:fb:28:c4:c3:8c:38:c5:f4:8f:
22:f8:4b:57:b7:3a:88:65:20:a7:aa:7e:38:4a:1d:
b6:80:81:cb:14:71:a0:1c:e2:f5:f4:2b:28:4f:4c:
bf:86:12:6a:a5:30:9e:c3:2f:43:88:92:99:e5:c1:
b8:6d:af:29:18:0b:4b:99:0c:b2:35:b1:b2:3f:33:
96:69:8b:74:68:43:98:7d:fe:8c:12:dc:82:13:fe:
01:10:d4:41:48:8a:05:94:01:f0:a5:d9:76:df:bd:
3f:d9:19:67:e1:34:cf:12:85:34:87:09:03:ec:b1:
2d:54:ba:c0:3e:91:31:e0:47:f0:72:01:83:ab:14:
a1:ca:bc:6c:bc:ca:f4:eb:eb:48:38:cc:7e:0a:95:
5f:0c:78:2b:bf:21:92:e7:31:9f:a7:2b:cc:76:f0:
0b:67:73:15:e6:d2:4a:98:10:94:d3:c6:d6:07:14:
70:66:dc:59:ef:94:7f:9f:b4:26:43:a2:b3:df:7f:
20:04:d0:d4:78:94:2d:72:7e:72:4a:42:9a:e5:90:
69:f6:c8:e1:ec:d8:83:67:6f:93:7c:94:cd:7b:d4:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D7:E6:81:C2:DF:1A:7F:CB:75:DB:59:B5:F1:54:83:4C:2D:07:7A
X509v3 Authority Key Identifier:
keyid:EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b3:99:81:da:39:85:65:1e:21:50:ce:71:d7:56:88:2f:20:
b1:98:b1:26:20:be:ed:a1:9b:53:b3:51:31:22:f0:33:ee:b1:
c1:5a:d5:c6:87:db:b4:06:a7:65:1f:ae:82:ab:a9:8e:92:3f:
1e:6b:ff:28:78:11:5b:0d:58:a3:be:07:b3:4d:f7:49:a5:5a:
eb:22:80:0e:9c:4a:70:3e:cb:aa:fc:e2:18:79:e8:2c:ee:1f:
b4:fc:93:08:e0:23:c6:cc:cf:86:76:8d:82:07:4e:81:cf:ae:
f4:ce:cf:22:7d:fa:8c:65:43:12:c9:32:4e:a3:28:41:5f:8a:
8d:87:75:0f:7f:00:e4:98:88:22:4c:17:31:47:72:a7:ce:87:
46:66:d8:8f:00:55:5b:4f:eb:ef:f7:f0:e7:27:3c:66:c6:de:
85:84:49:9b:c6:9b:e5:39:a4:70:80:5a:33:fc:ac:58:0c:c6:
c5:cf:72:70:ab:43:6d:f9:bc:3d:d2:bc:70:4c:85:30:94:d2:
8f:80:bc:20:a4:e9:e4:a1:af:de:ec:2c:55:c0:e1:39:ab:d1:
45:76:03:b7:2b:54:f2:66:d6:ae:45:86:00:b6:79:c3:4c:de:
3e:19:c6:87:7e:2d:ac:bb:67:61:26:f3:0c:0d:54:2a:39:61:
2f:3e:a5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:51 2025 by rpki-client