Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
File: 7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json)
Hash identifier: 2EIVHDq/RBc9W8lqAzyugpj9J1EUU5RffYEdQfEgz/A=
Subject key identifier: 23:56:3E:0D:5E:3C:8C:F1:0C:AA:B5:D8:FD:C7:42:5C:97:20:B9:68
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 0199FFC8C0794CEC314332A8AD65AE338FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 04:02:50 +0000
Manifest this update: Mon 20 Oct 2025 04:02:50 +0000
Manifest next update: Tue 21 Oct 2025 04:02:50 +0000
Files and hashes: 1: 0LHXRZXlT4Z5tzVCD5n3wMEK_5I.roa (hash: I8mxC60DkZg+/Z8S1/Ta7eOakDYR4IDLK8C2wNx5/L4=)
2: 6fX3AcGq-C5YFIqBi50as54EhPA.roa (hash: 1KbqHGJ44yLkRFe9MKFCx+SDk5i4hgNCAcTBDnuKRDc=)
3: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: ZHVZMP/VaY/sLzth7EbKSgMHqWwk4744XOEPAU7Lppk=)
4: EGu7n5ptipM5eNOhCckU54k5DkQ.roa (hash: T5q/E4P5U9BLCmb7DxjfaSe8vQrSmm6xkzEcVmgP2NA=)
5: PJ3rrJoRRyeXmoPdL7qN8QsvEpA.roa (hash: GLnfA8SK+T7VmaJvhK7gTu86DZRC9gqxwVMFgNBn2ek=)
6: RxZdH8tJj14wo9lUz6xXNXqBRwA.roa (hash: 5ZzEhibv41QuiqdnfKIE7PgA9XlisOrBTAH+e4R62Ys=)
7: V20vcYbyilDSQD-Jtx8d2qJDtnY.roa (hash: 2USt4pmFmNQvxtA5b7+ZLT1hKFltQnZghx27ehbthpQ=)
8: nHLGbM1FaGgG8wvdxg9Y5XPBlQw.roa (hash: EnIVps1oa/43pm3iNHQ84rjsTR4sIc4UNGGhICjrp8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:c0:79:4c:ec:31:43:32:a8:ad:65:ae:33:8f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: Oct 20 04:02:50 2025 GMT
Not After : Oct 21 04:02:50 2025 GMT
Subject: CN=23563e0d5e3c8cf10caab5d8fdc7425c9720b968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:92:94:48:56:44:3d:b2:9e:72:af:9d:3b:
59:39:d2:89:c3:56:f3:3a:2a:de:20:9d:14:4f:c1:
a9:0a:f9:d3:32:fd:25:dc:ca:cd:c6:0c:12:c5:bc:
b0:0d:e6:e9:44:c7:1f:b2:04:fe:8e:94:6a:3c:37:
c4:ba:4b:50:1e:8e:6f:2d:06:07:04:fc:78:e4:9a:
5b:02:0f:60:9e:b9:6a:01:7a:e2:af:9e:d3:e0:69:
09:25:bb:44:5d:94:82:6b:2b:60:5f:2b:2e:05:83:
01:93:4f:6f:d7:d3:14:ea:8a:eb:76:f7:5f:51:7a:
ce:f1:14:30:a0:d8:ef:ca:b8:f4:be:d0:05:f2:31:
ca:34:0c:6b:62:42:0e:d6:d7:68:f2:87:c6:cd:ab:
e8:24:6b:50:9e:a5:a5:87:f1:d5:ba:9b:32:35:d0:
36:dd:61:2b:36:a1:84:fa:13:8a:8d:be:92:25:13:
57:79:80:20:6c:f3:97:81:3b:2d:dd:8d:af:b6:dd:
7c:81:5a:5a:38:ed:67:30:00:a5:4b:cd:21:a3:f5:
ce:b9:6e:bc:56:68:fd:52:15:4f:35:58:60:24:af:
8c:52:14:79:a4:d0:bf:27:96:bd:2b:cc:9c:b0:63:
93:a3:1d:66:6b:f1:02:7c:68:e1:8d:ec:fc:0c:2a:
d9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:56:3E:0D:5E:3C:8C:F1:0C:AA:B5:D8:FD:C7:42:5C:97:20:B9:68
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:52:1f:ea:b9:35:8f:ad:ec:45:27:f9:af:fe:4f:48:cc:72:
cb:bf:c7:ba:b2:19:32:26:75:44:e3:a6:5b:e9:05:85:6a:ad:
7e:10:1b:a7:28:03:23:aa:46:cd:08:80:da:34:b0:78:ad:d4:
81:d6:b8:d4:d5:38:5d:cd:4c:db:da:cf:2d:f2:39:80:f7:94:
81:bd:97:81:ff:75:f0:8b:43:7b:18:5e:4d:0a:b8:25:ff:f8:
29:fa:81:47:6c:80:c6:dc:aa:eb:46:0e:10:31:c6:ae:f3:1a:
bb:bd:b5:1c:3d:8c:ac:b7:b0:54:fc:14:6e:c6:5c:6d:68:00:
41:d4:26:81:0d:45:89:da:ec:27:08:1c:cf:5b:94:be:ee:f6:
17:2e:94:74:00:2d:80:df:2c:02:6e:72:06:3d:0b:27:a4:e8:
d1:25:e3:d4:c1:69:ed:75:26:42:8e:86:68:d5:16:ab:3a:20:
f3:d5:3c:c9:46:48:c7:57:72:65:47:30:c1:7b:7d:e7:84:64:
cb:0d:cf:a1:f2:70:47:f4:6f:47:7d:7a:18:b2:11:8e:34:60:
79:d2:77:a8:cd:ac:68:85:69:83:c9:88:ee:af:0e:0f:ca:ab:
e3:10:44:ee:a0:e9:21:cd:42:de:90:72:bc:f0:8e:29:16:d3:
55:0e:9d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:24 2025 by rpki-client