Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
File: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft (raw, json)
Hash identifier: MQLd1HjjQIrvqRahKLtT/ndi97Qj+MMNFRwfmFO1pL8=
Subject key identifier: 38:8A:00:62:78:69:6F:89:35:B0:67:B9:C4:D1:5B:8E:C6:E3:CA:BC
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 0199FCC64A72748EA9F163F87DCE83F61844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
Manifest number: 084E
Signing time: Sun 19 Oct 2025 14:01:17 +0000
Manifest this update: Sun 19 Oct 2025 14:01:17 +0000
Manifest next update: Mon 20 Oct 2025 14:01:17 +0000
Files and hashes: 1: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl (hash: +oHZRHFE01kL7BIIZCXe0pRSt5FWzVMwzcfrDVdBXv4=)
2: xAkaLP7SkRQoBd-TYEf0fakBydQ.roa (hash: lfN1/uTbDMdDmb+tGMgvNHV7ezOmGfmodPA/bpTlm38=)
3: zeqX-4ngsCGD2Y4pwGbqJh4HQYw.roa (hash: KAYfqgoq5ZBvonKqM43MFg2S2Gi1Jp8WijPkzVbT/lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4a:72:74:8e:a9:f1:63:f8:7d:ce:83:f6:18:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: Oct 19 14:01:17 2025 GMT
Not After : Oct 20 14:01:17 2025 GMT
Subject: CN=388a006278696f8935b067b9c4d15b8ec6e3cabc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:fc:b1:e7:97:47:5b:b9:c4:5b:51:50:21:
ce:c6:e2:4c:6c:c0:2d:a5:d4:8b:bc:08:04:e3:e6:
4a:96:ec:27:33:9d:c4:c8:95:a5:c8:34:61:89:2a:
89:85:a1:e3:79:b2:ec:5e:25:93:5c:45:69:f4:d8:
f2:5b:6d:fa:b5:60:f4:ac:62:1a:22:f9:89:af:84:
73:1f:bf:43:a9:7b:e0:04:f3:4f:3c:06:b9:4b:b7:
f7:ef:5a:84:84:62:87:0a:84:4e:a4:02:aa:57:5e:
24:e5:79:0e:6f:0d:2d:a6:3f:e8:a0:e9:3f:0e:7a:
a6:78:c9:cf:d4:ee:5e:bd:64:1e:b2:37:f4:e4:cf:
18:f5:93:82:ac:e8:44:42:e6:5e:dc:0e:5e:c3:a3:
aa:2e:84:ed:c6:b6:f3:9d:b9:4b:5b:86:fc:95:b1:
78:af:1f:98:2b:46:f9:a7:bf:26:f0:ee:0b:73:4b:
f3:80:d4:dd:cf:97:4d:32:95:d3:50:e2:6a:4d:73:
96:4d:91:40:c8:80:10:36:f6:11:0f:1d:e7:2f:df:
5f:bc:a7:15:f8:b5:6b:86:0f:35:64:c1:5c:80:a6:
fe:b0:f9:c7:8e:a7:9b:cd:52:32:fb:19:a8:74:38:
b0:f4:90:a5:ac:2b:72:19:57:a6:b6:dc:9f:5b:d6:
fd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8A:00:62:78:69:6F:89:35:B0:67:B9:C4:D1:5B:8E:C6:E3:CA:BC
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ec:af:25:7b:59:65:1d:92:b2:fb:47:20:03:ea:96:60:5f:
50:93:c4:d4:77:18:23:18:73:62:40:72:5f:5e:c6:0d:66:39:
2f:9f:83:0b:c2:79:9d:15:d5:4e:d1:a8:20:c6:b0:a5:5e:8a:
13:9d:01:8d:f8:18:e5:14:0e:4d:ab:01:db:b6:41:74:16:3b:
37:94:04:cb:86:a2:bd:40:c0:c5:61:5a:8b:fe:83:45:cf:20:
db:b3:19:ef:38:f8:13:fa:06:a6:f7:b2:8b:bf:c8:2a:11:91:
39:22:92:3a:71:6f:21:95:b3:61:fc:1c:8c:13:84:c4:2c:72:
c3:6f:88:92:54:f2:43:fe:4e:7d:30:6e:af:11:5b:bd:06:b4:
94:40:c4:a7:f5:66:b3:6f:ee:b6:55:a2:54:c2:71:3a:d2:df:
cb:3d:53:ad:68:44:1f:5c:ac:34:de:88:3a:51:d2:a9:fb:ee:
01:16:97:87:21:13:fe:29:9b:c2:40:21:5f:c3:35:ad:2d:74:
ab:83:bb:8a:0e:59:0a:11:15:43:25:ec:ba:ff:b6:ca:61:a8:
25:16:b0:fc:49:c8:d5:c6:cb:b2:44:4d:0f:b0:18:ac:16:71:
d4:0f:52:6c:e0:81:4b:17:81:f5:86:e3:e7:7d:89:46:1a:52:
81:2e:4a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:27 2025 by rpki-client