Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json)
Hash identifier: +3g2eAAZY6NtOFl8migvRys3SEIgisuhS/Vd8wdIqCE=
Subject key identifier: 9F:50:56:18:6D:D9:04:A8:0C:3F:75:15:68:CA:B2:B7:5F:60:FC:14
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 0199FB7CF4B1DFCCAFEF6B881DB613AE79C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
Manifest number: 0ADA
Signing time: Sun 19 Oct 2025 08:01:34 +0000
Manifest this update: Sun 19 Oct 2025 08:01:34 +0000
Manifest next update: Mon 20 Oct 2025 08:01:34 +0000
Files and hashes: 1: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: AusKUS8NWKvn82q8Ng71Zfg4C58yeaDyWz4L/u7PXgc=)
2: BDuB9Tdy1bkdHiiKbCLGOLXhLgM.roa (hash: /BEhxsli53ZdIFQcNasA4TXy3qdR7JtPphvJxMDLbVM=)
3: o9u62C62uEKyliiaqilmlCLeC54.roa (hash: IbrVnLHNGZTQPhCJ7F+rZGHYI9Autu0dmXqnxbbk8VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f4:b1:df:cc:af:ef:6b:88:1d:b6:13:ae:79:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: Oct 19 08:01:34 2025 GMT
Not After : Oct 20 08:01:34 2025 GMT
Subject: CN=9f5056186dd904a80c3f751568cab2b75f60fc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c7:93:ac:90:4c:ba:76:bf:49:09:0d:1f:e4:
67:b1:ec:1d:5f:1f:7a:e6:32:7d:53:79:9d:05:67:
14:ce:08:ab:43:73:43:79:60:82:57:b1:e6:12:c5:
6f:77:1e:5b:97:18:8a:4b:df:c7:e9:f7:1e:af:a5:
ab:02:db:cf:80:df:da:86:81:90:33:02:c4:00:e0:
0a:42:6b:af:75:d3:88:5c:71:e9:03:c4:15:d5:69:
cb:a6:f2:79:1d:c1:12:1a:d3:5b:80:f5:a0:43:c3:
a4:61:00:42:79:94:d0:98:e6:8e:11:cc:23:fb:34:
70:82:ad:90:b1:1b:78:3b:ca:83:3b:fb:c3:48:81:
43:24:aa:47:33:ee:a6:9b:ea:2c:ff:78:4c:1c:6e:
cf:7f:78:84:87:bc:d0:31:84:94:d3:71:da:8a:34:
e8:f6:7e:fb:32:c5:93:da:45:f6:ba:86:7b:34:6b:
f3:d1:f3:23:2d:e9:ec:76:e8:f9:ab:2c:24:04:d4:
99:53:3a:aa:38:45:37:57:ec:e0:a0:95:26:27:7a:
b2:55:58:11:5f:07:08:91:dd:13:31:a3:e1:78:a9:
f7:a7:60:d5:24:bf:49:8c:b9:bd:c4:28:94:d9:77:
f6:ec:44:18:c9:2d:59:ea:7d:08:17:23:26:2c:ba:
dc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:50:56:18:6D:D9:04:A8:0C:3F:75:15:68:CA:B2:B7:5F:60:FC:14
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:aa:80:99:dc:cc:2d:ed:32:63:bd:b3:32:1c:1c:88:8d:81:
ed:6e:e7:42:81:5e:7a:4b:65:0e:ba:82:74:18:05:7c:82:8a:
cc:2e:97:31:e7:f1:17:3c:8b:0f:35:95:e1:7a:80:b4:cb:f6:
6b:10:3c:33:a5:a6:10:cb:a5:e2:25:ee:77:cf:d5:55:07:5d:
ed:d4:ba:1b:1c:a1:04:cf:dd:34:dc:d2:22:24:e0:2e:95:a3:
6d:9f:29:be:e5:01:4e:e7:44:f6:3c:11:5b:11:46:b9:18:9f:
b4:c9:f9:9d:31:5b:d2:cd:68:3e:86:95:7e:18:56:52:3a:cd:
62:1f:ff:2c:23:b8:95:ff:e3:4b:d0:00:26:15:29:d2:92:e7:
57:6f:59:fd:dd:3d:c8:d6:44:71:33:64:d8:8d:23:ee:5b:4b:
6c:83:51:de:d8:b9:d2:6c:7f:95:0c:42:18:52:d7:72:5c:a5:
9e:c4:17:10:ba:9f:af:b6:42:ac:2a:6e:e6:70:79:68:01:dd:
c6:eb:fe:9e:de:49:78:41:95:b2:d4:ad:ca:90:e6:ea:31:63:
ac:c1:25:5b:fa:16:52:4b:38:f9:c7:dd:8c:46:74:18:74:66:
d6:5d:58:81:85:43:fb:99:ee:ab:a6:d2:de:cf:b5:e8:7b:af:
eb:86:18:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:31 2025 by rpki-client