Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
File: 7hsImeOKlrVPxMvNEO9TnFTtTTg.mft (raw, json)
Hash identifier: RxTRQ38aT++us9W+NbfunSGf4x99xTEkhfd+mbPNj2o=
Subject key identifier: 81:75:9F:05:B3:FF:1F:79:63:A7:E8:8F:65:63:C6:5D:4D:2D:DB:5F
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 0199FD6B18D6F4134A83E8E6C49100AE44B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 17:01:18 +0000
Manifest this update: Sun 19 Oct 2025 17:01:18 +0000
Manifest next update: Mon 20 Oct 2025 17:01:18 +0000
Files and hashes: 1: 7hsImeOKlrVPxMvNEO9TnFTtTTg.crl (hash: 42e+jAJYzN2XqZnPBwirRMWL47aADmCfWQZq6+iEYDw=)
2: D0b1nmB_L5VEWf6cceZCeBQxCQo.roa (hash: 5aiQU00dPQtZA6c9t9iAvI3R/XjZbywVf6L+3WprENk=)
3: aayTQzRiJq9tAMzk8swFje4kTOA.roa (hash: sZC16XAD3EcE1zhIDvKbW1It71XSPS2OvJcF/8voOKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:18:d6:f4:13:4a:83:e8:e6:c4:91:00:ae:44:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: Oct 19 17:01:18 2025 GMT
Not After : Oct 20 17:01:18 2025 GMT
Subject: CN=81759f05b3ff1f7963a7e88f6563c65d4d2ddb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e1:1d:2f:a6:8e:d7:f2:6a:e0:70:eb:f3:0a:
1a:06:7c:b6:69:6d:e0:b1:4f:70:c7:80:4b:af:9c:
fc:14:5d:98:22:05:32:0f:2e:d7:f5:af:49:f6:45:
bd:1c:39:a6:4e:ec:cd:dc:a6:0e:51:41:49:c5:86:
f4:73:87:98:fe:7e:aa:f1:56:dd:82:9f:87:c6:1b:
a2:0e:b9:2e:f7:75:27:a4:c2:dc:7f:83:d3:d1:e3:
04:07:ce:37:86:1a:33:59:65:b7:af:4b:73:d9:d2:
ac:c5:e1:65:da:2a:a9:88:32:ca:22:fc:78:1c:46:
c8:c5:7f:9a:dd:68:83:e7:6d:9a:01:85:15:8b:d2:
50:d8:ac:30:6d:4a:1e:e2:9d:b9:d7:c9:bc:f0:d7:
51:58:f0:bc:00:cb:f0:f2:cf:72:a7:40:b1:e9:dc:
4a:be:62:19:5c:02:38:98:a8:01:6a:aa:44:de:72:
24:b7:ce:50:18:55:b9:65:4a:d9:70:20:a7:42:03:
b5:ed:66:4e:83:1c:59:e7:26:2f:6a:8f:97:87:2e:
a3:e1:51:9e:62:7d:21:f0:a9:71:48:e4:5b:04:83:
78:fe:74:c4:25:5e:d3:2e:fc:22:bf:ef:01:e7:77:
4f:de:2f:36:4a:9e:9d:4b:25:20:7c:47:85:3c:3b:
cc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:75:9F:05:B3:FF:1F:79:63:A7:E8:8F:65:63:C6:5D:4D:2D:DB:5F
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:90:17:b9:a1:5d:94:6b:e5:70:6b:01:73:9f:b5:9a:9a:eb:
59:73:b2:a0:84:c3:34:a7:8f:09:67:80:7a:9c:9e:8f:ee:a5:
8a:a3:71:3b:66:4a:4e:72:17:89:cd:54:05:46:b5:a9:43:a2:
68:0b:4b:8a:c6:7a:06:c5:80:64:9d:8e:8c:f3:ed:64:99:c2:
77:41:6a:99:dc:d6:3e:ce:26:e5:6e:2d:fd:f2:14:86:82:6d:
dd:af:53:be:c6:1d:1b:06:75:9e:51:6e:f1:66:75:bc:e6:1c:
df:3c:eb:e6:ab:cc:63:10:ef:86:f2:66:17:9d:01:c3:99:81:
63:44:5c:cb:56:b2:b1:2b:f6:a3:cc:a0:d5:85:4f:7d:20:dd:
a8:d0:66:ad:0f:ff:aa:e9:bc:ed:fa:43:60:d8:21:c8:22:0e:
a5:73:b8:1a:59:c7:73:29:63:bf:1d:b1:e3:f9:e9:42:48:99:
06:56:40:eb:3d:0e:0b:cb:1a:aa:bb:49:7f:a0:ce:81:ac:7e:
7c:9d:9c:08:a7:ba:d2:11:5f:38:b6:f8:11:e1:13:79:39:33:
33:1a:32:bd:42:32:b8:1d:7f:bf:3f:b8:b6:ce:ca:71:0d:80:
4a:98:88:2f:17:4a:b8:cc:fd:f0:0c:83:af:62:8e:d3:01:73:
98:00:06:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:56 2025 by rpki-client