Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
File: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft (raw, json)
Hash identifier: X9GFJPIqi/5A0NSjZg1+TI19P7KQ+oYdRoGtIdrlo7A=
Subject key identifier: 8E:F2:69:E7:72:F4:CC:31:CF:AF:EE:42:89:A0:97:FF:BD:09:89:65
Authority key identifier: EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
Certificate issuer: /CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Certificate serial: 0199FD6B0B01ABA503A5CB14C17E2824FAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:14 +0000
Manifest this update: Sun 19 Oct 2025 17:01:14 +0000
Manifest next update: Mon 20 Oct 2025 17:01:14 +0000
Files and hashes: 1: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl (hash: 3BJUEiUX1MeCRcyaorxQwh7r6i8ds1x1cCPHxFIBo5M=)
2: qrPDrPXSwyvVn-Qdl0rfUFtGg50.roa (hash: YwVpe+VwfLyswPBaEHJ3Hi4HwV3yhmlk88pkGuhRl44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:0b:01:ab:a5:03:a5:cb:14:c1:7e:28:24:fa:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Validity
Not Before: Oct 19 17:01:14 2025 GMT
Not After : Oct 20 17:01:14 2025 GMT
Subject: CN=8ef269e772f4cc31cfafee4289a097ffbd098965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ed:51:dc:38:47:80:22:6f:be:b6:b7:f6:31:
1e:59:a2:81:61:60:cd:0c:b2:c7:53:da:91:21:34:
8a:50:ba:75:23:05:20:6d:61:f0:8c:f4:f2:e6:13:
c2:7a:2e:ec:3e:d6:13:1b:2c:60:00:f0:fd:2d:0c:
fd:14:c6:a7:3b:e5:48:19:df:1e:c5:6b:80:d6:cc:
fe:cf:7b:f4:ff:86:83:ac:5b:cf:3f:08:b0:95:4c:
77:c9:92:4f:74:cb:00:e7:21:bb:43:66:14:cc:60:
06:50:ea:64:5e:c1:a0:a6:4b:76:1d:65:c2:63:36:
ae:ed:82:5e:fb:fd:9f:bd:0d:1c:da:d2:13:7b:d6:
a2:60:00:19:dc:7b:88:1b:81:60:63:b6:eb:41:b7:
66:92:53:fa:7c:13:03:0d:6b:72:25:7e:5d:79:db:
5e:70:aa:12:b9:17:8c:4b:2c:8a:fd:47:db:da:52:
42:e9:f1:46:77:28:17:fb:86:ff:7c:88:7c:ff:74:
1d:16:8c:47:24:fe:0f:0b:45:97:02:39:5e:b5:c7:
44:0d:b8:09:1d:6a:0a:bc:0b:e1:a4:f6:46:cf:b2:
35:e7:4e:89:6b:9c:39:5d:3c:7e:1a:0b:5d:5a:f2:
0f:e7:bf:8d:54:f9:a5:9a:47:34:39:43:5b:70:bd:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F2:69:E7:72:F4:CC:31:CF:AF:EE:42:89:A0:97:FF:BD:09:89:65
X509v3 Authority Key Identifier:
keyid:EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:06:91:85:e1:60:8f:df:86:d1:b1:e0:ec:7c:ff:f6:6c:47:
d6:90:d8:42:b3:49:c5:fb:0d:75:b5:1a:86:21:df:95:e5:24:
5c:41:0d:57:4b:43:ce:e3:dd:16:63:6f:77:81:ea:30:86:fa:
53:31:b0:84:49:c4:88:06:0c:b8:a4:f2:10:04:5c:f6:45:0c:
d7:74:65:2d:c3:b2:8a:d8:92:19:81:4a:9f:fc:ff:87:e9:a8:
2f:3e:82:f8:b0:78:f5:e7:fa:35:fc:cd:2d:67:13:42:f8:38:
b4:db:b0:dd:d6:ea:d6:78:20:86:fc:33:29:35:70:3f:5a:25:
64:fe:bd:1f:86:fc:59:18:c1:e3:c6:67:70:96:0f:fd:ff:93:
62:d0:12:7d:26:a6:53:30:07:02:07:78:e6:ac:16:e0:f8:90:
8c:89:57:30:7f:b0:30:f9:24:35:a8:11:f3:76:82:de:1d:78:
e5:96:32:37:17:17:95:0b:31:f4:67:66:34:ba:d5:e5:36:5d:
7e:8a:a5:f2:e8:68:1d:c0:0f:19:61:8a:a2:ad:63:10:1b:c2:
0b:68:11:e9:61:32:70:93:6e:90:f2:0a:da:65:9e:02:7a:ed:
e5:ea:31:a4:56:92:72:b6:f2:59:5b:ae:ae:86:1b:9d:80:7d:
20:b4:e3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:54 2025 by rpki-client