Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
File: 7qq8oRa05zqZRKuXAs-YZleANYA.mft (raw, json)
Hash identifier: xlGwf3iWVwMgsOmH7zNDnPSvObau1fJm81KrRQGfHKo=
Subject key identifier: 8C:55:F5:CE:DE:31:7D:0B:EC:BC:61:BA:FD:F5:F0:FD:45:97:59:A1
Authority key identifier: EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
Certificate issuer: /CN=eeaabca116b4e73a9944ab9702cf986657803580
Certificate serial: 0199FCC67BF7E338C371C8C49463E959CEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
Manifest number: 032B
Signing time: Sun 19 Oct 2025 14:01:30 +0000
Manifest this update: Sun 19 Oct 2025 14:01:30 +0000
Manifest next update: Mon 20 Oct 2025 14:01:30 +0000
Files and hashes: 1: 7qq8oRa05zqZRKuXAs-YZleANYA.crl (hash: mJxLm4Ev4kV0nOf9WcpL3Yc1ViuQhyy1QFh5ri4FwOY=)
2: 87MujmzYjqiHmvGtUQfVum9xgYI.roa (hash: wh9UFynd+k4p6PBt8Z51e5f4u9WZiYuFkQCOx8EtepA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:7b:f7:e3:38:c3:71:c8:c4:94:63:e9:59:ce:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeaabca116b4e73a9944ab9702cf986657803580
Validity
Not Before: Oct 19 14:01:30 2025 GMT
Not After : Oct 20 14:01:30 2025 GMT
Subject: CN=8c55f5cede317d0becbc61bafdf5f0fd459759a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4a:cd:3c:3b:a4:b3:66:4a:e4:83:3f:01:99:
f1:32:5d:76:73:4c:c4:65:19:58:61:17:7c:95:e9:
2f:10:92:63:d5:d6:da:69:1a:8b:7c:60:9b:79:b8:
0f:01:29:f9:b7:53:da:38:d6:86:53:be:84:d3:4c:
1a:64:58:2a:6b:f0:77:cf:a1:a8:de:c8:30:2b:30:
94:18:d5:ec:5d:84:a9:73:e3:c4:e8:7a:35:ba:db:
01:aa:25:27:f1:23:d0:96:49:f0:70:bd:88:48:16:
3a:48:e5:b9:f9:a1:fb:b4:69:a8:8d:67:00:ee:eb:
8c:9e:49:57:e5:28:ef:78:c4:c4:ec:1b:f4:8e:03:
8e:02:6a:6a:76:c0:71:51:9c:d3:26:4b:3f:09:b3:
e8:42:d8:6a:6b:51:ff:5a:cd:21:b0:85:e9:86:9f:
92:9b:19:8c:56:c7:69:da:8c:60:8b:1a:e4:e9:46:
82:c8:f2:10:ed:7b:d9:7e:47:ed:01:f5:3d:f5:f4:
74:5d:87:5e:b1:bf:cc:25:2f:ac:27:5d:d6:32:b2:
cf:c1:70:3f:95:a2:5e:3c:6f:30:1a:1b:e3:bf:23:
d9:17:fe:fd:f2:df:21:f3:4f:93:73:81:e8:24:23:
5e:18:65:87:a9:d4:be:8b:b8:61:31:65:7c:92:5c:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:55:F5:CE:DE:31:7D:0B:EC:BC:61:BA:FD:F5:F0:FD:45:97:59:A1
X509v3 Authority Key Identifier:
keyid:EE:AA:BC:A1:16:B4:E7:3A:99:44:AB:97:02:CF:98:66:57:80:35:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qq8oRa05zqZRKuXAs-YZleANYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aebd48-a002-45f5-b307-db415a9bebf5/1/7qq8oRa05zqZRKuXAs-YZleANYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e1:32:3e:49:f7:23:c3:b6:8b:f2:41:77:87:d2:04:c3:f2:
1c:c8:11:dc:52:25:04:2e:40:a9:d9:6e:ec:72:30:12:f7:46:
a2:0c:0b:c3:05:f4:8f:8d:79:1f:13:72:3b:af:c2:ab:1c:f8:
aa:04:8f:e8:56:ca:18:82:54:c1:cc:56:93:09:10:b4:68:05:
18:10:4f:11:b9:56:70:6f:18:30:a4:a7:2f:10:e2:fe:cd:ba:
32:e0:c9:27:12:3c:9c:50:0f:49:d3:42:18:27:80:be:8b:87:
5d:64:2d:45:c4:57:b6:4f:0c:be:fb:af:5b:3b:d9:e5:16:b7:
6a:4a:4d:59:00:8c:b6:32:d7:71:cb:11:78:f8:47:62:c7:75:
8d:45:57:9d:33:24:61:04:d5:80:78:9d:16:b4:4a:85:12:dd:
b6:14:e3:3b:97:f2:6e:02:90:b1:bf:75:5c:13:78:72:e8:a2:
8e:66:9c:e3:8e:40:dd:94:aa:7a:81:c0:86:fd:04:9f:b1:a6:
cb:82:38:9a:ae:43:77:5c:17:66:d9:c5:76:9f:1d:56:df:81:
c9:46:55:cf:ff:67:cd:5f:ad:9d:e5:de:60:29:9d:98:da:59:
af:36:6b:fe:7f:6d:27:ad:1e:6c:d7:ba:ba:30:3a:80:82:7e:
bc:47:8c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:00 2025 by rpki-client