Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
File: p7He9pWIXq3lzMi0vioCuxYHnpw.mft (raw, json)
Hash identifier: xicxj3GzJutOTIe9aRsV4fta8QtxyKn6P23TL6Y3gQQ=
Subject key identifier: 8B:04:9F:B7:D9:1D:7E:E6:16:EC:AE:CB:61:E2:72:38:3F:A0:FA:44
Authority key identifier: A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
Certificate issuer: /CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Certificate serial: 0199FAD858F28D7B845FB312457116D0D6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
Manifest number: 0932
Signing time: Sun 19 Oct 2025 05:01:46 +0000
Manifest this update: Sun 19 Oct 2025 05:01:46 +0000
Manifest next update: Mon 20 Oct 2025 05:01:46 +0000
Files and hashes: 1: 2ZXONPsq8Wq-C73Y4ZOdG8CP47o.roa (hash: 23qtSB8U1yvtJIhVOx0ex1wgA9IS3rvYP3HTfvaa5cc=)
2: p7He9pWIXq3lzMi0vioCuxYHnpw.crl (hash: kJbTGJ/AV4y2dZqSho33xGn3cI05r58Tj5R9NZrrP4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:58:f2:8d:7b:84:5f:b3:12:45:71:16:d0:d6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Validity
Not Before: Oct 19 05:01:46 2025 GMT
Not After : Oct 20 05:01:46 2025 GMT
Subject: CN=8b049fb7d91d7ee616ecaecb61e272383fa0fa44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4b:88:70:0c:aa:d8:1b:66:6d:f5:37:c0:78:
b3:30:e2:e6:3a:b1:35:27:97:ab:1a:7c:ce:c2:1f:
c2:f2:d5:c7:0d:79:bc:3f:35:63:0d:e7:e4:c4:5a:
ed:95:99:c7:c0:de:75:0c:e7:c2:81:16:59:17:4a:
ce:90:1b:be:85:1b:8d:36:c6:0e:34:1b:88:88:68:
10:92:5e:a3:0f:b0:5e:5a:10:59:bc:d2:1a:88:64:
5c:63:bf:c6:e7:8c:f4:64:73:8a:10:50:f3:cd:a5:
47:72:44:a0:96:91:8e:8e:37:1b:6a:7b:fc:c9:af:
ef:38:f0:27:ff:a2:e0:37:8d:59:81:e8:42:41:54:
61:fa:6f:37:ad:f3:da:51:19:da:b5:44:f6:f8:88:
03:eb:7e:5a:84:b6:8c:6a:be:21:0c:72:57:2e:b7:
94:2b:30:c1:70:33:ec:c9:fa:ac:04:54:ca:10:2c:
e4:e0:cf:51:c1:85:c7:c4:94:5e:13:6d:87:93:94:
f5:a2:08:ea:f7:e5:8b:e5:34:eb:c9:5c:bf:93:72:
9e:12:f8:94:cd:5f:2d:e4:29:23:67:9a:76:c6:6c:
91:c2:ab:10:33:a8:1c:a8:c1:c8:32:ee:60:a1:1a:
df:c5:08:34:e6:06:11:27:b4:18:08:70:56:4e:15:
ff:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:04:9F:B7:D9:1D:7E:E6:16:EC:AE:CB:61:E2:72:38:3F:A0:FA:44
X509v3 Authority Key Identifier:
keyid:A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:28:fb:b7:ef:b7:44:1d:1d:32:36:1a:2a:9d:af:85:cb:7f:
b9:21:e4:d5:6c:5b:cb:9e:69:b3:47:f3:18:ae:69:64:87:c5:
ca:bc:99:2b:7d:e1:e6:05:3a:2a:e5:3b:ee:6a:a9:9b:0b:0d:
1a:20:92:fe:38:6f:45:2c:56:d5:f2:78:07:14:40:ab:28:09:
45:62:3d:50:70:41:f1:bc:d0:c4:de:e4:a6:4d:d5:5b:a6:8b:
83:0e:8c:0e:01:fd:43:00:13:e7:6e:4a:25:2e:66:47:95:ca:
aa:34:1f:68:88:f0:e9:d2:60:29:fc:34:28:60:8d:a3:5e:5b:
6e:e3:5f:66:45:ce:26:b8:2b:55:a7:f0:a9:4d:b3:39:91:97:
8f:83:8b:11:c9:2d:5b:30:db:60:b2:fb:4d:63:7f:63:c4:72:
b9:17:85:1a:d1:6a:34:44:c3:dc:7a:b2:1d:26:b7:00:1a:cc:
bb:e1:7a:c0:50:0e:00:ef:1f:b9:05:09:16:dd:3e:a6:b3:76:
52:dd:0c:ac:14:6c:b5:03:43:15:de:cf:25:0a:17:1c:a4:2b:
99:78:71:24:5e:6b:2c:7c:a4:55:14:3a:c4:00:b3:21:c5:ff:
9d:cf:39:81:91:57:a8:d8:fd:81:50:e9:77:a8:1a:e6:3b:97:
79:7f:11:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:00 2025 by rpki-client