Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
File: 7MihqtAgWUOkVyOJu3QzThyihIU.mft (raw, json)
Hash identifier: DMSvMJRN2Gtv8b4XkIXAbfCNv/vEKotV9dcY7Z4C+SE=
Subject key identifier: 03:A5:75:B1:EE:D6:E1:66:F2:86:31:90:F2:5B:46:EA:23:DA:0F:47
Authority key identifier: EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
Certificate issuer: /CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Certificate serial: 0199FC8F241520D019781AE1336E4111AA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:03 +0000
Manifest this update: Sun 19 Oct 2025 13:01:03 +0000
Manifest next update: Mon 20 Oct 2025 13:01:03 +0000
Files and hashes: 1: 7MihqtAgWUOkVyOJu3QzThyihIU.crl (hash: 96GmNA0mIHY8EQiC8eWdOK5+fsF7hN0g1UIT0qk27Lc=)
2: avqINpYlzxCyV6gq20JtXLQyC4A.roa (hash: 0cl0vSjwJETExQIV/vHZXVhnvVc8V1ucpKa58O8zwHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:24:15:20:d0:19:78:1a:e1:33:6e:41:11:aa:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc8a1aad0205943a4572389bb74334e1ca28485
Validity
Not Before: Oct 19 13:01:03 2025 GMT
Not After : Oct 20 13:01:03 2025 GMT
Subject: CN=03a575b1eed6e166f2863190f25b46ea23da0f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:31:5d:f9:3c:9d:17:66:8b:d5:4e:c1:f2:
94:cb:67:c0:ae:fa:51:b1:85:4a:3a:27:0b:a6:df:
fc:26:08:31:10:35:c2:e0:79:42:70:ba:16:48:5c:
23:fd:c8:04:61:ab:8c:ef:51:a5:fd:9b:e8:de:b1:
cc:e6:8f:8d:24:05:01:38:81:17:17:85:02:3b:96:
3b:bd:e8:4d:77:cf:8a:72:56:79:81:71:a2:a3:0f:
24:1a:2a:c5:64:59:b9:41:3f:09:21:29:dc:c2:31:
b2:1b:0b:ba:ae:f9:65:19:8b:e5:b5:74:45:33:78:
dd:91:3f:70:7d:f8:61:76:e5:5d:f6:3a:cb:96:f7:
bc:f2:bd:a8:e3:56:8a:21:9e:3b:01:16:a3:cd:cf:
f3:84:b3:c4:c7:38:36:8d:cc:16:f4:54:05:cb:9d:
c8:5e:20:a2:c6:67:2b:81:01:02:91:27:74:78:9e:
4b:89:ce:e0:82:0e:c3:ae:55:6b:82:e8:d0:0c:28:
b3:05:2a:e5:59:51:92:c6:c6:a6:11:75:10:e7:91:
d2:59:80:58:c9:fb:c3:fc:0f:57:34:1c:01:df:84:
49:1d:a1:a0:da:8b:47:38:31:c9:64:09:78:c8:e5:
07:09:e5:88:03:60:6e:df:e6:49:d2:a6:d4:c2:f2:
00:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A5:75:B1:EE:D6:E1:66:F2:86:31:90:F2:5B:46:EA:23:DA:0F:47
X509v3 Authority Key Identifier:
keyid:EC:C8:A1:AA:D0:20:59:43:A4:57:23:89:BB:74:33:4E:1C:A2:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MihqtAgWUOkVyOJu3QzThyihIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b3298b-9c5a-4e38-8131-4a68f235c388/1/7MihqtAgWUOkVyOJu3QzThyihIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0a:4c:3e:1f:7a:00:2a:3d:27:36:cf:f7:ad:17:6b:44:68:
a5:83:d2:ba:1f:04:e2:c9:63:d8:9a:78:43:36:7f:d7:9f:c4:
f2:2c:ac:22:f7:84:90:73:29:d7:13:17:4f:5e:9c:6a:9b:df:
11:1f:02:5c:0c:cc:db:a0:16:ab:8c:2b:ce:6e:1f:c2:30:64:
25:bb:14:75:3c:84:0a:ed:38:93:9c:a2:99:60:24:e3:51:5a:
2d:55:e1:09:c0:a0:82:13:7c:58:0b:e2:13:10:a3:27:3b:4d:
72:92:be:63:a3:81:ad:47:f7:09:93:a8:07:ee:99:01:a3:e1:
5d:e2:5c:6c:7f:25:a6:8d:a9:67:29:91:24:90:26:33:8c:14:
d9:a8:09:74:c3:7b:ad:4b:9e:3e:87:cd:be:03:f4:b6:85:35:
30:0f:a0:36:ff:29:b3:07:e6:a5:b3:ef:3b:4f:0b:d6:7c:07:
06:bf:71:c0:8f:44:e3:0a:c3:ec:6f:a4:a5:eb:3f:b7:12:4b:
0c:eb:31:73:01:b2:39:6e:6c:90:b1:14:ea:39:3b:c4:8a:88:
d7:91:f1:de:8a:b9:9e:34:58:51:11:ef:ff:44:e1:8e:6d:36:
e0:d5:77:e0:9b:12:c1:e4:4c:d5:2a:f6:26:60:d0:db:2e:da:
d2:94:b4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:06 2025 by rpki-client