Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
File: _7WFJ4AULkE_nxWyTVmRMxGhDsI.mft (raw, json)
Hash identifier: 8WragLF2i+mi/wRRGnUSC1H+YSChsMyMlHkkXMxI/x0=
Subject key identifier: 2E:9F:F2:8D:AD:3D:F8:48:D7:2D:91:F4:1D:D8:F0:1F:9D:EE:EB:14
Authority key identifier: FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2
Certificate issuer: /CN=ffb5852780142e413f9f15b24d59913311a10ec2
Certificate serial: 0199FFC86FE07C8DF3D18FBFAE8FE53629AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
Manifest number: 0199
Signing time: Mon 20 Oct 2025 04:02:29 +0000
Manifest this update: Mon 20 Oct 2025 04:02:29 +0000
Manifest next update: Tue 21 Oct 2025 04:02:29 +0000
Files and hashes: 1: I32dN6KwFoewNSfpS4XBjG5myXU.roa (hash: PHYrnIWI7dP/AROY19OnK6Q0ENbOWp8OyZchyzmlbds=)
2: _7WFJ4AULkE_nxWyTVmRMxGhDsI.crl (hash: JIfXplt5/vUkZNRIOw9t5JruyireSbvpkVrV2779XEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:6f:e0:7c:8d:f3:d1:8f:bf:ae:8f:e5:36:29:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb5852780142e413f9f15b24d59913311a10ec2
Validity
Not Before: Oct 20 04:02:29 2025 GMT
Not After : Oct 21 04:02:29 2025 GMT
Subject: CN=2e9ff28dad3df848d72d91f41dd8f01f9deeeb14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:01:cc:cf:34:ab:1c:48:42:68:d7:70:4c:97:
25:f3:75:f0:e4:ca:14:e3:21:6f:45:69:d4:4a:56:
fe:5a:4e:48:fb:97:d4:de:31:59:73:ae:be:05:7f:
9d:63:12:4b:85:c2:90:21:b0:62:15:fd:74:c1:28:
1b:62:3c:72:be:72:a9:fa:8b:28:07:da:c1:7d:47:
91:a3:79:15:80:9f:1b:fb:cf:a6:b8:64:4d:d0:3c:
47:3b:6e:34:fe:52:4a:2d:11:39:9e:ff:0e:94:63:
ac:53:aa:a0:c0:27:6b:22:90:75:41:5a:91:16:40:
aa:65:97:2b:38:43:43:5c:1d:1b:52:c7:a8:4a:4b:
a7:6e:f4:20:aa:27:6a:9a:e6:ac:5f:46:02:62:d0:
eb:db:6f:4f:c1:77:80:ff:4a:50:39:04:5c:38:23:
d0:5b:62:59:bb:64:07:1c:e2:be:20:2d:5c:3e:4a:
36:7f:ac:06:bf:36:14:29:e6:87:b1:46:b3:70:ca:
60:8c:3f:68:c8:87:95:45:f5:75:f2:2b:e0:0f:ef:
46:d7:36:02:08:f9:41:9f:89:54:96:f6:15:98:40:
8b:50:d8:9b:ab:5c:13:7e:61:da:bf:c5:d1:2f:ae:
82:6d:87:d4:b6:ca:40:ba:8a:f3:1c:a4:d1:e4:2b:
16:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9F:F2:8D:AD:3D:F8:48:D7:2D:91:F4:1D:D8:F0:1F:9D:EE:EB:14
X509v3 Authority Key Identifier:
keyid:FF:B5:85:27:80:14:2E:41:3F:9F:15:B2:4D:59:91:33:11:A1:0E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7WFJ4AULkE_nxWyTVmRMxGhDsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/64b6b4-7ce2-4c8b-8585-ed092dbc72b3/1/_7WFJ4AULkE_nxWyTVmRMxGhDsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c8:74:85:b6:cf:ee:33:2c:e6:49:f1:22:06:09:12:e9:04:
59:f0:70:6c:e5:93:26:8a:f6:83:74:4e:45:58:2e:6f:06:c5:
49:6b:94:48:29:02:e3:d0:bf:59:12:47:6d:ac:8f:3c:6c:26:
b5:09:7e:0b:75:0c:22:92:ed:ba:82:7a:b0:db:6b:03:98:8d:
02:3d:a4:0f:65:01:75:8e:65:70:da:d0:97:40:9c:17:d0:93:
99:11:70:e6:81:f7:85:c4:a8:52:13:df:b8:69:c9:57:e3:07:
10:ed:61:5e:1c:49:a1:66:17:45:43:de:ee:b6:b3:7b:ac:2c:
92:a5:80:49:56:7d:c7:1d:4d:43:39:2e:3d:e0:08:37:04:db:
25:72:88:48:ee:e3:05:9e:d1:49:48:73:d7:3d:d8:73:5d:29:
57:db:03:33:4b:60:fb:19:f3:8a:f1:7a:66:d0:89:7a:92:17:
ed:2d:92:29:fa:83:ca:81:5e:3d:41:66:48:e1:4e:06:45:a3:
0f:97:a7:55:36:c5:28:53:e2:ab:70:4a:b2:52:d9:c7:e2:be:
0b:f6:b4:08:3d:ad:eb:ec:ae:8e:74:3c:54:ec:ce:b4:89:a9:
54:3f:6b:9b:a9:48:32:64:08:3d:cf:89:3f:63:27:bb:b4:59:
27:55:f9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:59:46 2025 by rpki-client