Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier: otDIGhtuNZ4lONOfXKVHa7xH1jtQ/nVjK8MazRaZqd0=
Subject key identifier: EE:CA:AC:1D:D0:90:8E:46:11:DD:41:10:28:9F:13:BC:1E:0F:E0:8A
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 0199FC58D99F057E78D26CE3B6BBD396D2FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 12:01:45 +0000
Manifest this update: Sun 19 Oct 2025 12:01:45 +0000
Manifest next update: Mon 20 Oct 2025 12:01:45 +0000
Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: WCHtBIZkQw/V9cMRNDzWsd/OsJVSID5i5SbuzP07DNQ=)
2: EytKkp-cHU6YafCnB0z54OPcAnc.roa (hash: qXa8VJW5qO7AGM9oVgWuxQ8fPmA9SdZQmj6ClsTDzLA=)
3: SSk5EJ2eeCxHqtRI36s4YAa6XHE.roa (hash: Qy4Hae6uxNoX2t2wWLKuUW7INir6rrE0SB0/N7PGSAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d9:9f:05:7e:78:d2:6c:e3:b6:bb:d3:96:d2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Oct 19 12:01:45 2025 GMT
Not After : Oct 20 12:01:45 2025 GMT
Subject: CN=eecaac1dd0908e4611dd4110289f13bc1e0fe08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1b:29:15:4b:08:e6:db:68:93:dd:56:ad:23:
6a:b2:89:44:e6:40:30:55:a2:28:e5:cb:f2:5d:cf:
d6:5a:01:c7:34:0a:1a:f5:79:be:25:66:51:0c:2e:
37:68:6e:a8:b1:c3:41:16:6e:c3:2c:26:45:0b:1e:
e8:79:81:2e:a3:a5:83:3e:d6:0b:6d:cd:51:94:81:
1f:b5:e8:ca:a8:53:44:f2:ad:16:65:80:b9:36:05:
2e:b6:7c:69:95:7a:2e:7c:cc:bb:60:7b:ad:10:6a:
43:8a:76:31:78:85:c2:1f:3b:a9:0e:0d:a0:88:2a:
84:51:5c:ce:fd:da:29:f0:21:7b:44:5d:74:b2:5a:
75:89:06:74:7a:03:2c:5b:6f:87:7d:93:f9:ef:5c:
6f:fd:30:ce:7c:b1:71:21:01:2c:0e:39:9f:8c:39:
45:29:fb:56:02:37:a8:bf:80:98:8d:a2:24:b7:88:
41:97:6d:45:1d:c5:d8:70:3c:9a:fb:23:cd:97:5d:
d7:23:81:e5:60:77:67:1e:fa:1a:bb:55:a0:af:cc:
c8:7f:88:3a:aa:6a:42:01:9d:4d:57:ec:47:33:b8:
79:df:dc:d8:2c:40:e6:89:ef:88:a9:a5:e1:ff:21:
91:78:a7:92:a3:0d:bb:e0:77:4f:20:68:d4:52:b8:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:CA:AC:1D:D0:90:8E:46:11:DD:41:10:28:9F:13:BC:1E:0F:E0:8A
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8e:19:3a:3d:34:38:31:70:c5:ab:b5:d2:1b:08:f5:bc:70:
4f:6f:fe:37:e2:34:4e:13:6d:88:64:d1:aa:9a:02:86:01:86:
9c:ae:e9:21:f8:4f:46:98:a0:03:ef:7f:97:5b:bc:48:f7:c9:
3d:52:cf:f8:0a:cd:59:4c:cc:42:31:6d:72:8f:0a:39:ed:f4:
ac:21:4a:9b:db:0a:b0:82:7e:dc:29:17:11:a7:60:e2:af:f8:
28:67:9a:43:f3:e1:e0:d0:62:74:e3:c0:d3:25:e6:89:e7:56:
a5:26:46:09:68:3e:e1:f0:42:86:af:a3:fe:a3:7d:2f:7f:a7:
4a:76:20:ce:1f:c4:6c:11:5f:c8:7b:e6:05:91:d8:a1:95:fa:
e8:8c:5b:89:91:08:9d:0c:d8:74:c7:6c:e7:f2:53:80:3b:22:
16:bb:a8:a0:23:0a:89:6d:8d:79:39:b4:0e:02:5c:b0:83:e6:
8e:4b:59:7b:ab:e7:e3:89:a9:8c:15:41:1f:d8:dd:37:cd:5a:
b7:db:a9:52:f2:51:42:95:46:8e:33:d0:66:5f:01:91:78:2a:
2e:06:c8:ee:e8:56:60:b3:26:fb:de:fb:7e:0c:4a:f3:2d:31:
5c:9e:a8:01:10:63:32:b4:51:14:ea:c0:31:01:cd:99:b6:a2:
bc:be:dd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:44 2025 by rpki-client