Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
File: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft (raw, json)
Hash identifier: KNBk8lx0qzbmG9tjE5dFep5dmQN7I9zvr4RL1+/fSAQ=
Subject key identifier: 3F:30:DE:1D:FB:AF:1E:EF:5A:0A:D9:5B:3A:A7:9B:86:19:E0:69:83
Authority key identifier: ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
Certificate issuer: /CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Certificate serial: 0199FD6B71A1F4D63BA4531FE2849F07AD26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 17:01:41 +0000
Manifest this update: Sun 19 Oct 2025 17:01:41 +0000
Manifest next update: Mon 20 Oct 2025 17:01:41 +0000
Files and hashes: 1: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl (hash: krTu9HOAMJxEliwdfO/WtwJzyHE/VxQk0kt1J4vEf1k=)
2: NtOWsHokBD2D-h9w2vIY6AqcxW0.roa (hash: NgvfZzRezTm/iHnWAmu436qovNykwseNE0VLXLqNwzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:71:a1:f4:d6:3b:a4:53:1f:e2:84:9f:07:ad:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Validity
Not Before: Oct 19 17:01:41 2025 GMT
Not After : Oct 20 17:01:41 2025 GMT
Subject: CN=3f30de1dfbaf1eef5a0ad95b3aa79b8619e06983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:31:b9:09:bc:5f:49:8c:17:3c:a6:b5:04:fd:
a6:20:38:3c:16:9a:bf:e9:60:89:a3:13:89:3a:9f:
eb:a2:0b:48:ac:2d:fd:f5:cc:0e:92:91:84:ad:31:
dc:4c:37:c4:54:3a:ea:e3:13:ae:48:0c:22:5a:1f:
22:50:97:88:cf:f8:db:89:27:6d:fc:7a:ea:17:60:
17:c7:2e:02:0a:0c:dd:01:4e:3f:8a:c9:08:22:8d:
88:c6:0d:0d:01:a4:1d:96:de:fd:79:e1:57:60:3c:
a9:64:3b:9d:c8:3a:18:d4:a6:de:3e:04:6b:58:bb:
b7:af:8f:58:73:3c:aa:46:94:ca:af:f0:9e:f6:ce:
38:e6:93:3c:fd:02:09:2b:3a:5e:dd:8a:d0:20:63:
d7:2f:23:0f:e4:64:c8:d0:c3:bb:dc:83:33:44:13:
55:42:03:7a:57:37:e5:c5:9c:c0:d8:c7:75:46:34:
72:82:dc:84:f2:76:0f:f9:ef:64:80:90:4b:2f:ff:
8d:b8:f0:25:ba:28:40:30:af:bc:8a:8d:82:8f:a4:
36:fc:b9:5c:4e:6a:19:39:7e:0e:7c:8a:84:53:72:
97:00:7c:63:5e:52:ce:14:e6:75:b1:19:79:dd:2c:
ad:4e:02:80:d5:11:20:05:df:53:34:f2:cf:fd:a0:
a1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:30:DE:1D:FB:AF:1E:EF:5A:0A:D9:5B:3A:A7:9B:86:19:E0:69:83
X509v3 Authority Key Identifier:
keyid:ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3b:8d:46:8f:ee:41:1a:82:13:4d:aa:7e:84:bf:f4:63:80:
e8:26:21:ed:d3:77:11:be:56:2d:32:d9:fb:4a:1e:a7:14:c4:
4e:ae:be:4a:ed:ba:58:64:29:47:43:99:2c:57:8a:9b:68:b7:
75:ea:f4:3e:05:c3:c8:74:9f:06:06:15:82:64:d0:ed:e7:6a:
d9:fe:e3:79:9b:c8:8d:91:33:68:39:58:43:ac:fa:c3:b8:d9:
86:2f:4c:75:a1:9e:a2:69:99:fc:7a:06:83:72:1a:34:b4:00:
84:d2:2b:2a:53:f4:8f:de:1a:9a:72:10:63:3b:52:d4:d3:b9:
eb:29:79:70:b5:e4:0c:d0:cd:70:03:6b:a0:8a:93:de:e1:84:
43:94:75:8d:ea:52:00:f7:a4:29:32:2f:74:50:97:71:56:b4:
ed:41:49:66:16:f4:ed:0c:c8:a7:28:79:f1:aa:f5:c5:b8:b1:
89:f9:bc:bd:5a:ac:f3:44:0c:ac:d0:e4:98:d2:33:00:3b:0e:
b1:b0:86:e3:38:49:c7:b4:25:f0:03:a8:fd:3d:2d:d2:cc:bc:
11:9e:58:78:6b:c9:b5:70:ba:ed:4c:c1:74:5a:4e:43:e8:47:
f5:41:c7:9c:26:ea:df:da:e4:7a:6c:27:3a:3f:c7:46:d7:f7:
54:7a:70:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:58 2025 by rpki-client