Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
File: 7oO8RYo2ltZS---GPl7kDwCW8Zc.mft (raw, json)
Hash identifier: nLWKv0qLcDElx7dfJ8RwMyWPcXRHKLkgcUQp716gx9E=
Subject key identifier: 4E:C5:51:92:FC:45:55:34:FB:83:CE:39:01:65:B8:49:4E:F3:23:EE
Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
Certificate issuer: /CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Certificate serial: 0199FFC81638B502BDF13F931A2167E5A583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 04:02:06 +0000
Manifest this update: Mon 20 Oct 2025 04:02:06 +0000
Manifest next update: Tue 21 Oct 2025 04:02:06 +0000
Files and hashes: 1: 7oO8RYo2ltZS---GPl7kDwCW8Zc.crl (hash: 5jzUScqcWgeSzNohg2IZiYMHMTrekG6HT2aPy+tRbNg=)
2: edRcT7FMgGsyYd3xzwlL4K5C_DM.roa (hash: /Ph33995AjfxmqzcVmLLzLIpZfMtf4kmmPMMs6+m6RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:16:38:b5:02:bd:f1:3f:93:1a:21:67:e5:a5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Validity
Not Before: Oct 20 04:02:06 2025 GMT
Not After : Oct 21 04:02:06 2025 GMT
Subject: CN=4ec55192fc455534fb83ce390165b8494ef323ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:9e:d0:d0:98:48:c0:b1:98:f2:42:ea:90:
92:d7:2b:99:06:ba:b0:2c:2b:64:e9:ea:10:68:5a:
07:2d:45:48:cf:bd:8c:08:d3:24:53:9b:6d:49:bf:
db:04:0d:03:eb:07:0d:0c:15:53:a6:2c:3c:48:a5:
e1:85:2a:fb:e5:93:8e:14:2d:af:7d:36:f4:81:9d:
74:e0:09:a3:22:c5:1d:21:3b:b7:a4:ea:53:90:d7:
6a:fd:24:e6:7b:ee:c5:f7:39:dc:a6:fb:d2:27:60:
ec:4e:2b:38:1d:35:1e:bc:04:0b:0c:3f:1e:86:c2:
e1:12:19:a5:c5:19:4e:6f:d8:38:b8:54:b4:e7:fc:
e3:f9:01:19:92:e3:33:47:65:70:b0:a7:f5:6e:d9:
fa:40:6d:02:c1:39:ae:70:84:a5:11:b5:79:e6:24:
78:e1:f6:8e:82:e0:b7:e9:ec:a9:c4:cf:ab:2c:f1:
a5:83:13:7f:56:38:45:3e:17:49:c2:49:34:77:c4:
10:09:57:66:32:24:54:7e:34:d2:df:6b:52:45:df:
f3:e4:94:e8:6d:1f:0d:06:1b:6a:e0:1a:d3:21:cb:
a9:5c:31:83:dd:bf:f2:a1:40:30:08:1c:07:8a:94:
b8:77:2e:f6:ab:74:db:42:1f:24:b6:2e:b2:05:1d:
27:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C5:51:92:FC:45:55:34:FB:83:CE:39:01:65:B8:49:4E:F3:23:EE
X509v3 Authority Key Identifier:
keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1a:5b:fa:36:d9:54:62:52:52:6a:85:9f:2c:4c:05:33:43:
9e:66:17:17:10:b2:e5:32:c3:28:7c:d3:5b:c0:c4:6e:01:63:
eb:fc:18:41:41:34:86:94:32:d3:24:4f:99:0f:78:59:67:d2:
36:cc:2e:9c:11:69:ff:78:da:6b:74:07:4f:3a:fd:86:44:82:
96:3a:30:2f:01:2f:2c:a4:5f:22:15:a5:cf:d0:eb:91:bd:1a:
64:6f:c8:9c:03:15:d5:0f:02:31:b6:30:b7:62:bb:a4:20:fb:
97:49:93:97:25:92:54:34:eb:93:f7:b2:7b:af:f3:c7:20:1b:
90:44:1c:d9:50:6c:47:b1:57:bc:0b:50:16:d9:12:cf:18:0c:
54:4c:59:04:40:00:63:23:b4:ca:f8:f6:3f:6b:25:27:e0:bd:
90:09:92:ae:27:cd:56:69:cf:48:64:59:ba:de:df:c6:18:ae:
43:6b:c3:cd:a3:af:a6:dd:03:55:0a:33:ef:56:06:a6:15:f5:
42:52:45:8c:c5:ff:be:13:49:1b:df:8f:78:bb:a0:59:be:b2:
9a:81:03:bb:2c:a2:8a:2d:42:8e:9f:b7:48:be:70:6b:11:17:
fc:c4:33:4e:78:8b:71:d6:84:d2:35:05:cc:a5:d9:ba:e3:4f:
7e:30:45:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:53:37 2025 by rpki-client