Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
File: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft (raw, json)
Hash identifier: bsw/Az7DVZ5rtc8xu7pDpuhHhE+geoHiYINVgD0Vv54=
Subject key identifier: F8:FA:DB:67:44:91:CA:42:84:15:D2:03:A4:1D:19:D6:63:E7:71:28
Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
Certificate issuer: /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Certificate serial: 0199FBEAA95CD1BFBFDF3FB47F80AB687334
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:23 +0000
Manifest this update: Sun 19 Oct 2025 10:01:23 +0000
Manifest next update: Mon 20 Oct 2025 10:01:23 +0000
Files and hashes: 1: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl (hash: +h8eIMrsL5p3fbt8vKp9DXluXM7QKg13TpaBe7ssDxk=)
2: lsLcveQpDK6_M97PC59O9jY_Mn0.roa (hash: ymXevK/nbRh5h28kJcEd3t9OjF1YdLZjWlDyNpO0ilU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a9:5c:d1:bf:bf:df:3f:b4:7f:80:ab:68:73:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Validity
Not Before: Oct 19 10:01:23 2025 GMT
Not After : Oct 20 10:01:23 2025 GMT
Subject: CN=f8fadb674491ca428415d203a41d19d663e77128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:18:2d:e0:97:a4:7e:c1:f1:5f:c6:b5:c6:
f1:66:70:9f:91:96:78:1b:08:d9:60:03:b1:30:3b:
3c:5c:7c:77:73:ae:d8:19:e1:ba:28:12:c0:09:34:
74:ee:4a:d9:63:cd:89:9b:79:2e:52:73:fc:5e:84:
21:6c:8d:54:61:5d:a3:79:37:0e:3d:5c:78:a7:85:
ad:e2:db:fb:c9:8a:99:a5:39:d1:05:88:8a:1e:03:
fb:da:be:24:70:e2:36:a6:a9:e8:3e:5d:f8:26:69:
18:de:d6:a0:08:56:b7:65:e5:ff:8a:11:d5:be:33:
89:84:c0:50:50:7c:6c:77:dd:67:a3:2e:a8:4c:c2:
95:cf:bf:3b:dd:23:3d:35:a1:01:87:46:9a:b2:83:
13:39:ca:d1:11:c3:6d:ad:0c:8c:ca:0e:0b:e4:db:
b1:37:ef:ba:47:c6:84:be:f6:63:91:90:21:33:ab:
e5:c6:47:77:7f:97:4b:6f:e8:d0:df:f9:e3:31:4b:
55:7d:db:d8:50:62:47:b3:ed:bd:85:6a:22:2a:ee:
8e:94:18:ce:5f:a4:3e:b5:ad:d8:11:5f:23:17:48:
6f:92:53:63:bf:71:78:6a:7e:26:64:ce:ba:03:d7:
ec:5f:36:f6:70:c8:b5:7d:ce:4e:b2:22:de:c8:87:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FA:DB:67:44:91:CA:42:84:15:D2:03:A4:1D:19:D6:63:E7:71:28
X509v3 Authority Key Identifier:
keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:28:92:29:22:10:88:87:6b:ab:53:c7:69:9e:6b:db:19:66:
44:92:c0:09:f7:4d:3d:02:c8:91:34:91:e3:df:aa:53:01:62:
e4:d3:60:03:cb:3d:78:df:67:a4:9a:fa:53:bc:55:75:0f:e9:
ef:eb:bb:5a:b4:b2:a7:f1:ed:9d:cf:ca:a7:c8:95:3b:ec:71:
21:5e:c9:f7:d8:08:ae:f0:d5:70:3f:93:38:6e:8d:86:cf:38:
a6:5e:aa:0c:1e:dd:9c:f0:7d:8b:8a:b3:c7:58:6c:da:9f:0b:
d2:47:2e:d9:0d:d8:4a:a0:60:83:7c:4c:d7:4d:4c:9d:75:60:
17:62:69:a5:fc:1a:98:9e:71:14:ba:82:db:5b:4f:ce:3b:27:
b6:4a:bc:0a:5b:a1:61:6f:ad:a5:0e:c2:6e:88:b0:1f:4f:82:
26:9a:37:2d:bf:66:9a:ea:47:2b:39:6a:52:ab:d3:e9:65:f1:
0d:f5:a3:d3:a2:6f:c2:7e:8f:15:a8:b1:2b:b2:91:18:fc:38:
61:d9:1b:5c:ed:52:24:79:a0:cf:6a:7b:9b:8b:9e:82:b7:e9:
33:dd:47:a6:30:6c:05:3c:31:82:57:bd:3e:f4:ca:44:1d:c0:
89:6d:2d:25:b7:10:e7:3c:a6:b9:24:dd:d4:cf:fb:3a:67:a3:
f4:84:3f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:46 2025 by rpki-client