Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
File: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft (raw, json)
Hash identifier: y+ioc9g4IvAaUDmw9yeYPOHiUAsh0L8F9Qeapp/IJkE=
Subject key identifier: DB:44:FB:B4:94:5B:E0:E1:32:D1:0E:96:88:DA:B7:62:F1:DC:41:79
Authority key identifier: EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
Certificate issuer: /CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Certificate serial: 0199FC5891370B4D43C9F51E86BB38F64D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
Manifest number: 1227
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: 7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl (hash: lCygJe4qgb26EajvGvBOYokg6aeerCe0yw7e6Khta9U=)
2: Z6AAXuXVnBC0PnCaLGdVCJDGtlo.roa (hash: mDlSiJmg0BY9JeNZWlLLq7LDLb9jKGHM+mo1bQwoBt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:91:37:0b:4d:43:c9:f5:1e:86:bb:38:f6:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec8ff96eae2d448ec7849d173b552f15f0f704c1
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=db44fbb4945be0e132d10e9688dab762f1dc4179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e5:8a:44:3a:96:d5:16:27:77:df:3d:df:78:
23:86:6c:1e:79:dd:cc:f6:ef:46:8e:d2:46:d7:b4:
36:9d:fa:ea:ca:99:48:47:1a:7d:ba:85:2d:f1:64:
67:cb:0d:87:f2:13:57:de:dd:20:28:c2:95:c6:90:
7e:81:04:43:40:52:7a:b9:96:b7:78:ee:6d:b6:03:
cb:f8:ce:f7:18:a5:a4:fd:7b:b2:98:76:18:ad:70:
55:0f:bf:64:40:9f:9f:59:6e:5f:7f:97:21:3b:31:
c3:d2:1a:6a:f1:11:72:f8:0a:45:0e:f0:8a:0d:8d:
0b:52:0f:9c:4b:0f:82:39:70:e5:eb:fd:e7:f2:05:
cb:19:2b:e1:6b:37:a1:eb:1e:69:56:bb:f5:a2:c1:
eb:e7:9f:7a:ab:d7:76:ba:33:b6:f2:2f:65:85:85:
8a:c7:ce:92:38:b9:b3:05:07:4d:33:72:22:28:ac:
26:46:f7:fc:04:d8:71:ec:ce:14:f4:31:c6:89:ce:
c1:54:e6:b3:b8:4a:f9:27:03:f0:4d:b8:40:8d:0c:
ab:19:f1:bc:ca:4f:1d:12:0d:e4:6e:37:e4:0c:bd:
91:71:f7:81:c7:d2:4d:a6:62:be:ac:b0:15:74:84:
d3:90:8e:3c:7f:72:f3:23:fa:0d:58:68:b0:3d:a2:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:44:FB:B4:94:5B:E0:E1:32:D1:0E:96:88:DA:B7:62:F1:DC:41:79
X509v3 Authority Key Identifier:
keyid:EC:8F:F9:6E:AE:2D:44:8E:C7:84:9D:17:3B:55:2F:15:F0:F7:04:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7I_5bq4tRI7HhJ0XO1UvFfD3BME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a16acc-1dfb-4b2f-b243-6f1c974e8637/1/7I_5bq4tRI7HhJ0XO1UvFfD3BME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2c:9b:19:38:b9:53:05:50:75:7c:f2:64:ed:40:31:32:58:
c7:83:ae:ac:3f:4f:9d:fd:f9:c9:d1:a7:d8:51:68:b3:c8:43:
89:f6:ec:e4:6b:74:2f:ec:cb:a5:9e:43:93:8b:0f:5b:7e:03:
a5:21:d6:08:78:48:17:0d:7a:d9:00:29:66:96:61:89:51:39:
e9:93:de:5c:11:80:73:d8:74:bd:1d:69:2a:01:21:cf:e2:d1:
61:ee:d5:23:ff:48:d2:11:ed:89:b7:16:f0:79:f0:61:95:10:
18:02:eb:f0:46:d8:7a:1b:57:2d:5b:0d:e7:f8:dd:e2:8d:7f:
77:b7:9d:fc:dd:c4:84:26:a1:77:77:f9:0e:8a:0b:9c:37:36:
55:18:eb:c1:19:6d:47:2e:04:19:cc:04:60:79:f1:d8:48:35:
83:dc:79:59:f9:46:03:24:e5:75:75:2e:98:45:88:b5:45:0d:
ca:6d:27:06:b7:be:23:07:17:a7:e7:af:3a:6d:69:37:7f:b0:
f7:28:df:34:b5:8c:bf:bc:5e:ae:b8:0d:d3:a5:27:2f:a6:81:
79:06:cf:a5:c1:f6:4a:8a:9d:4c:ca:6e:29:89:51:1f:69:65:
5e:dc:17:16:53:ca:5e:25:7e:48:d8:19:05:cf:75:69:87:5d:
35:35:71:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:56 2025 by rpki-client