Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: ptBeIS39Msg6pjJwVbOTzfMNyfWyDovUV46ECK2ktR0=
Subject key identifier: FB:8C:F5:F7:06:D9:AA:C2:E3:0D:92:35:12:C1:81:D5:D7:25:23:F3
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 0199FF59BACA431D53A52883D3CAB15D42D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 14EA
Signing time: Mon 20 Oct 2025 02:01:34 +0000
Manifest this update: Mon 20 Oct 2025 02:01:34 +0000
Manifest next update: Tue 21 Oct 2025 02:01:34 +0000
Files and hashes: 1: 1zFu0RzpnnoDGJMwnKjinpXmRCA.roa (hash: ZQd8IBEmMebks+ONJAcNs9poavTsD9w6+Xw3hhWxaQ0=)
2: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: zEnnbuUytLAK51m79ad86hL2zYSya9RdcTboo68qKAA=)
3: HKJIsIJ7TQKVpo395xcD-UrLDIc.roa (hash: 5l8r3D44ewEJc+IhuEtnOq2QaEWlAtDCOHCZ14bO5AY=)
4: pRVui7p_9zc7vkvdS1qRnmC5uhE.roa (hash: nMrVu0tOXbJwGT4qILzCfjpCh8zrDSPr52uVHfmUR0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:ba:ca:43:1d:53:a5:28:83:d3:ca:b1:5d:42:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Oct 20 02:01:34 2025 GMT
Not After : Oct 21 02:01:34 2025 GMT
Subject: CN=fb8cf5f706d9aac2e30d923512c181d5d72523f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:4f:ae:ea:25:0f:ca:9c:65:d7:2c:69:e4:
b2:95:a2:1d:cb:9e:39:4b:9d:85:d3:ef:a9:d6:dd:
0b:88:17:41:50:98:ef:ba:91:fa:d1:90:c9:ba:8f:
65:61:7b:39:b7:0a:11:05:b4:1e:52:7d:78:50:f6:
c1:2d:61:a2:c8:6d:0b:a7:3d:3d:81:88:30:82:55:
e0:15:29:8f:2a:92:80:a2:87:05:bf:1a:08:1f:ae:
c4:a8:69:db:f8:2a:67:77:3b:48:45:c2:9c:13:73:
90:c2:4a:c9:49:7c:df:4b:11:ef:46:ce:6e:ce:89:
e4:1c:ba:e7:6a:82:32:55:8c:e2:f6:74:cc:2e:a7:
f5:ae:4a:ca:a4:1f:47:27:8b:6e:cc:ab:76:d8:41:
44:53:57:9e:14:18:7c:2e:4c:e3:8c:53:e4:50:29:
61:43:e2:7b:8f:0c:a8:6d:2f:a7:d2:ee:b5:c8:47:
10:37:34:a8:a6:5b:9f:58:db:d2:92:31:f4:57:11:
54:ff:a8:8a:bd:13:2c:38:24:ee:e6:27:0d:c4:d1:
b4:e7:77:1c:05:fd:11:08:c6:34:16:e3:74:41:01:
cb:31:7c:a0:69:75:d2:95:54:db:ac:b9:ea:f2:47:
fa:0c:11:15:5b:55:ad:4b:3a:42:ee:4d:03:bc:10:
84:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8C:F5:F7:06:D9:AA:C2:E3:0D:92:35:12:C1:81:D5:D7:25:23:F3
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9f:61:19:83:d0:c7:b0:d2:7f:62:c2:fb:43:c6:67:a3:15:
d1:41:d4:d5:4c:cc:f4:5e:9a:4a:4d:db:4a:0b:ab:21:42:cb:
20:16:b4:9a:05:b3:c5:53:dd:9e:98:4b:01:1a:26:81:e3:05:
ae:6e:8a:02:e3:6d:e4:56:6a:76:96:ef:cd:68:00:ea:2b:89:
01:e1:96:2a:1a:46:52:78:6e:5e:1b:5d:2e:f8:39:18:1a:7c:
e8:21:3f:4c:65:08:14:fc:36:95:9f:a3:fd:c7:06:b3:e5:b0:
85:4b:55:6e:1d:2a:0a:8b:8b:d9:b1:50:b7:91:c7:09:2b:61:
ce:51:59:a1:70:7d:37:7c:b6:18:12:6e:4c:5b:ff:e0:80:1b:
f6:6a:b2:62:e3:cd:cb:51:d7:75:df:75:f8:00:44:f1:7e:c0:
3f:ab:ae:7b:8d:a3:5c:26:d5:9e:90:5e:62:3f:1c:50:6e:06:
7e:48:13:cd:53:19:c6:41:43:69:64:79:32:89:98:cc:d0:cc:
61:86:01:91:67:60:55:ec:71:a5:a2:95:9d:8b:d9:cd:37:7e:
6b:ea:64:a0:0f:a0:0d:dd:ac:48:17:64:26:d8:93:ef:0a:79:
88:60:e2:dc:a1:ee:c1:d9:53:6e:34:cd:e9:91:24:6d:98:1c:
b5:e2:c6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:58:48 2025 by rpki-client