
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File: 7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier: men4glKxCDSoPqvazBUT0MG4LrwwpLDcluOazmtaEJg=
Subject key identifier: 1D:F3:00:E5:36:56:A6:F4:44:24:F6:D0:5B:DB:3F:FC:F4:1B:56:6C
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial: 0199FC588F29D466EF58952D79585FB50D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 12:01:26 +0000
Manifest this update: Sun 19 Oct 2025 12:01:26 +0000
Manifest next update: Mon 20 Oct 2025 12:01:26 +0000
Files and hashes: 1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: 4/KW7JfgxpLph8mfpZcOGWjiLB9fyTpt0KG9yGt9EqY=)
2: PGTEyuyHfVxWRtCLWSM0Bggjqk8.roa (hash: LpN4nDf3nPAGvaIylopZoGcsyeFo20wtey+AbU/Sxvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:8f:29:d4:66:ef:58:95:2d:79:58:5f:b5:0d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
Validity
Not Before: Oct 19 12:01:26 2025 GMT
Not After : Oct 20 12:01:26 2025 GMT
Subject: CN=1df300e53656a6f44424f6d05bdb3ffcf41b566c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:b1:d2:85:91:de:71:78:04:47:61:35:86:
ed:69:26:f8:a2:80:cb:c7:22:06:27:f7:77:0b:9a:
18:41:bc:c8:3f:4a:e6:e6:78:d4:d2:74:07:7f:19:
b0:0d:ff:a9:e0:66:13:ac:a8:87:8c:7e:22:79:57:
a2:10:e6:4c:db:a6:76:68:b5:29:aa:91:2d:62:cb:
51:f5:67:f8:f3:4c:16:f1:f8:f8:08:27:03:bb:67:
0a:8f:8f:39:dd:38:aa:cb:5d:9e:6c:2d:9c:ff:95:
c9:b3:14:f4:92:a6:da:f8:f0:c2:35:3f:15:6d:48:
54:59:10:17:ec:e8:13:5f:70:36:49:1f:3c:0e:0c:
d5:25:95:d6:0b:cd:d9:6b:89:6a:f7:70:b1:6f:da:
4c:88:65:c0:21:1a:d7:be:20:e3:c6:dc:d6:c6:99:
b8:fa:d4:ee:97:bc:b7:54:cc:6a:6e:be:85:5f:6c:
63:91:17:e1:6e:c7:c3:c4:ba:7d:e4:d7:43:1d:d1:
ef:05:eb:e4:33:22:30:b5:b4:48:e6:ee:88:c8:6d:
98:2e:de:ab:c6:59:ac:91:48:90:cc:82:c2:15:ed:
a6:5a:d6:39:55:3b:72:68:f9:fb:89:1c:e6:c5:65:
43:9b:c4:26:30:ec:5f:d6:a0:70:0d:f0:5b:c3:44:
64:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F3:00:E5:36:56:A6:F4:44:24:F6:D0:5B:DB:3F:FC:F4:1B:56:6C
X509v3 Authority Key Identifier:
keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:58:bd:46:fd:15:bc:88:c8:f5:45:b8:1a:23:83:9b:ee:48:
75:4f:f9:25:23:21:97:da:30:a6:1c:dd:f2:77:5d:82:eb:98:
d8:32:d0:87:ba:39:e3:69:3a:db:92:59:5a:10:03:90:4d:59:
59:77:2b:fd:18:3a:50:7f:80:0f:f4:be:87:e6:34:51:cc:9c:
e0:c7:96:2e:c5:e2:3d:12:03:4f:76:ef:c6:63:f7:50:9b:f2:
23:0e:26:92:40:66:e1:d5:55:b5:d8:31:95:c7:1d:12:a8:94:
22:a1:ad:e6:93:c7:01:bb:c7:e1:fa:82:76:5f:70:e4:f3:5e:
7f:46:54:7e:d2:33:ec:c3:ec:84:1b:43:2f:ea:a1:3f:94:8b:
4b:b3:28:35:bf:33:68:d8:96:cf:69:e0:8c:a1:eb:80:12:8f:
9a:1f:7e:5a:67:43:63:d6:14:1f:5b:12:48:7a:81:54:de:a7:
2a:dd:32:22:76:15:58:86:cb:d6:3f:8d:1d:97:ed:40:28:98:
e2:9a:6f:14:eb:25:ee:67:c6:d4:9d:d5:d7:c6:1f:69:0f:01:
20:85:bb:84:de:51:f1:f5:f8:aa:37:55:9f:40:0f:e8:e1:76:
5e:34:65:fc:ba:cd:14:e8:c6:36:0b:b9:04:d8:17:ac:e0:88:
01:c9:a7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:15 2025 by rpki-client