Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier: mnzPKD1eBDdhYRd22ub23xVUJhwXecIrPLg+Uhb5LR0=
Subject key identifier: 74:44:9E:D7:3F:DC:93:57:8F:2A:7F:CF:D0:5F:6A:A2:2B:37:40:97
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 0199FD6AEABB8C34826550FFCE0A6850623A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number: 0EB0
Signing time: Sun 19 Oct 2025 17:01:06 +0000
Manifest this update: Sun 19 Oct 2025 17:01:06 +0000
Manifest next update: Mon 20 Oct 2025 17:01:06 +0000
Files and hashes: 1: 5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa (hash: O5AF3h5GUvVjXi+fdnM5KUl9Mafj4SPh9elj1bhbK30=)
2: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: FxRhlq6WR+ZLYP8EJDoJBbv5UHiv0e+G0kyXgP8c5M8=)
3: jAeBGrf8BFIRbqKfW6MMAFHsAAY.roa (hash: XkntMpJexF4yO1fbtCkxhPtOe5hHQjbro7XU8mxBw50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:ea:bb:8c:34:82:65:50:ff:ce:0a:68:50:62:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Oct 19 17:01:06 2025 GMT
Not After : Oct 20 17:01:06 2025 GMT
Subject: CN=74449ed73fdc93578f2a7fcfd05f6aa22b374097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fd:9a:67:7d:ad:3d:2d:71:23:23:83:e8:96:
fa:fa:8a:57:bb:d1:46:14:ce:04:19:81:2b:0a:b0:
07:a3:f3:2e:dd:56:7c:00:e8:2c:1b:c5:16:37:0e:
3e:59:3a:82:dc:62:6b:27:b9:31:2f:ed:b9:54:86:
47:e9:e5:d2:73:8c:f1:5f:ca:af:c3:fe:2f:65:56:
47:a1:61:d7:55:96:ff:13:9c:7d:d6:9d:2b:78:4c:
53:81:cc:d4:f5:83:e3:73:ca:ec:cb:38:30:fa:22:
00:b2:e9:41:85:7b:32:69:43:6a:f3:3b:53:84:d8:
bb:c2:cd:4c:e3:67:83:1e:10:b0:4b:ec:3f:f1:34:
8c:a5:1b:fb:3a:b2:99:24:41:f1:2c:d3:26:70:8a:
26:fd:c9:ca:b9:71:26:e9:95:7f:d4:26:82:be:c4:
8e:8a:7f:9f:da:c5:ac:21:8d:ce:9f:a2:2e:d2:35:
e3:a0:41:bb:8b:9d:ef:0f:ea:dd:e4:ee:07:b0:c2:
d6:37:aa:c3:af:32:16:4a:69:ac:60:44:a3:5e:34:
fe:79:8a:63:bf:e9:40:1f:e0:af:6e:20:18:48:2b:
e3:a9:44:86:a7:57:84:57:c0:38:4b:51:59:63:92:
a5:da:21:dc:33:64:c9:38:a4:73:b9:b0:1c:92:26:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:44:9E:D7:3F:DC:93:57:8F:2A:7F:CF:D0:5F:6A:A2:2B:37:40:97
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:87:59:c9:53:d9:25:24:d2:4a:da:ca:d4:ed:d7:f2:34:32:
02:6f:c1:16:76:e4:04:07:36:5b:23:92:15:1a:5e:66:f5:4b:
77:59:b9:99:8b:f4:86:03:5d:3c:8e:40:22:43:d4:73:da:7c:
1d:d1:d7:92:66:16:7f:d8:ba:58:32:3c:9a:f3:3c:fb:d0:e1:
2b:bc:1a:a1:da:a5:9b:7b:9a:b8:b7:20:35:e9:74:09:cf:ad:
ee:79:d9:fd:df:3f:c3:02:d9:4c:39:f6:a0:67:d6:5c:0e:53:
76:37:9b:a1:d7:5c:85:12:d9:41:61:9b:fe:63:47:ff:ab:d8:
27:d8:17:b9:eb:c7:ad:43:bf:43:9c:fd:be:2e:5a:89:a1:c5:
f6:91:93:ae:e5:06:79:84:c4:de:fb:c7:4d:80:e3:db:bb:36:
09:03:8a:56:25:36:4c:41:3a:b5:4e:9e:2f:f5:59:67:54:eb:
63:a0:fb:6c:7a:55:49:99:9c:02:72:e0:ca:94:88:a2:e8:a2:
88:30:2b:b8:7e:7f:b7:15:52:16:d0:04:07:c9:86:80:b7:d1:
7e:ac:6f:47:a4:61:38:74:a7:90:55:a7:4b:f1:9b:24:ef:6f:
08:ef:67:e5:d0:6e:5d:ed:7c:e4:7f:f7:91:73:27:3d:13:ea:
39:12:9b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:47 2025 by rpki-client