Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
File: 7pzNOKXWSWiAvAlHBuaPoE-izZY.mft (raw, json)
Hash identifier: vwgs4gMJrZZPkTJJ4c2DqllpwZ8wmPxuTbpRe2wjYrU=
Subject key identifier: 3D:6D:4F:4E:0E:E4:D2:2D:55:A5:5E:BE:97:F3:DF:37:1F:C8:52:D8
Authority key identifier: EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
Certificate issuer: /CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Certificate serial: 0199FDD8B416B4075F78439829D9F34A7FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
Manifest number: 029F
Signing time: Sun 19 Oct 2025 19:01:01 +0000
Manifest this update: Sun 19 Oct 2025 19:01:01 +0000
Manifest next update: Mon 20 Oct 2025 19:01:01 +0000
Files and hashes: 1: 7pzNOKXWSWiAvAlHBuaPoE-izZY.crl (hash: wGrdUU2s1j9Lo/TmIzo9WHCrgpcCBxlj5tqq4bciDWM=)
2: zUvaZsb6AAcGs5bszD-Bq4oB3BE.roa (hash: 2T5+Ho1mw99m4EQU26GsTeUM3Ju0dbCS0haz/aa2sBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:b4:16:b4:07:5f:78:43:98:29:d9:f3:4a:7f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee9ccd38a5d6496880bc094706e68fa04fa2cd96
Validity
Not Before: Oct 19 19:01:01 2025 GMT
Not After : Oct 20 19:01:01 2025 GMT
Subject: CN=3d6d4f4e0ee4d22d55a55ebe97f3df371fc852d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b1:1f:7c:74:5c:4c:ad:ff:51:30:94:af:80:
bd:49:ca:14:16:87:a7:49:58:3a:27:fa:61:bd:56:
8f:e2:7f:61:16:21:73:ad:0e:6b:16:16:b9:01:f9:
7e:74:32:28:22:10:69:37:ad:35:c9:12:cd:17:62:
16:00:3f:16:01:2d:1c:52:94:9c:9e:54:90:e1:ea:
71:15:19:ed:5d:b4:86:ac:1d:c7:1f:5c:b3:b2:59:
d1:e4:11:0c:54:6c:2a:fa:e1:5e:2d:df:3b:a6:d9:
3c:3c:29:12:e4:b6:f6:70:ca:d3:9e:11:52:08:38:
b7:08:ad:46:7f:a0:cd:cf:5d:db:32:d6:fa:e7:bc:
54:15:09:d5:f8:40:f4:36:5b:2e:32:64:d9:22:74:
c2:58:05:ce:69:c4:fa:47:b6:78:15:a2:73:99:fb:
3a:22:aa:03:75:d1:05:ac:91:33:b1:14:c3:d7:b8:
f8:b8:6b:82:f7:ba:1d:6f:ed:4e:90:47:ae:37:0a:
a4:e2:7e:63:97:c3:c3:b7:6b:60:4f:de:73:94:15:
bb:a0:d9:7a:48:96:e0:7a:9c:76:9e:86:15:bc:13:
30:68:54:4c:ba:02:5e:c6:ce:d8:b1:b6:02:de:09:
df:84:5b:38:92:26:2d:2d:06:a9:88:56:b6:23:e6:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6D:4F:4E:0E:E4:D2:2D:55:A5:5E:BE:97:F3:DF:37:1F:C8:52:D8
X509v3 Authority Key Identifier:
keyid:EE:9C:CD:38:A5:D6:49:68:80:BC:09:47:06:E6:8F:A0:4F:A2:CD:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pzNOKXWSWiAvAlHBuaPoE-izZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/15f95c-b0b6-4522-8ea0-55beafa4bb29/1/7pzNOKXWSWiAvAlHBuaPoE-izZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:08:b2:d2:92:c2:6b:f7:ae:a3:cc:c5:65:8c:bb:cb:9e:46:
46:d2:fc:cd:89:c6:75:a6:3e:7d:ec:32:81:a6:af:41:40:31:
76:a5:0b:09:8e:5b:2b:f5:2b:b9:2e:0b:d7:a2:51:8d:ad:6e:
9a:a2:8c:81:4c:d4:7f:fd:24:b0:71:b5:7a:6f:d0:3d:7a:33:
9e:86:58:9f:72:9f:32:03:c2:8b:9b:76:48:76:8e:6c:bc:c5:
2d:2d:34:d2:57:7b:f8:25:23:a1:ba:c5:48:8c:61:e5:c0:d2:
68:06:99:b3:0a:bc:50:91:10:f0:85:87:af:52:09:d7:95:8b:
d2:74:61:2f:95:d6:9b:cf:c0:5b:b2:26:55:f4:de:b6:fd:1a:
70:42:04:95:e9:b5:b3:b8:09:f9:df:8e:7e:45:33:86:77:e0:
6b:2f:7a:a1:b0:d4:49:10:8e:97:d1:61:03:c1:b5:2f:88:d8:
48:17:51:db:41:08:57:a2:bc:cb:84:05:4e:06:fe:1a:0f:d5:
7f:2a:7a:dc:d1:75:66:dc:d0:75:74:6f:01:85:50:3d:7f:72:
df:67:08:4e:48:d0:9b:76:be:72:c4:a4:e6:e6:e9:a4:9e:c7:
6d:ac:b9:07:9f:a8:22:ce:d1:e1:68:6f:7f:5b:b1:c8:9c:57:
6b:38:e4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:54 2025 by rpki-client