Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: ANJYEIE7XAMOvhtxkA/E+8hUxQx2fW1GJYw2J5Z/S78=
Subject key identifier: 69:C7:C3:2E:5C:2D:70:89:A3:4F:6E:77:5B:79:DE:6F:F6:78:F1:A8
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 0199FC8FB4D5CC74750D4AEF08C9CAA7C954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 14AC
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: NBtN2Q+ubFdyz9pgsGKfJaMN0kalJArk8mUwO51njRw=)
2: Fy9dAaWIGt3DDwam3RK8I1POnD0.roa (hash: mN5AYrqpl0VfVq4+AtyPnI39fV2fuW1S27zeiDc2nYY=)
3: iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa (hash: iCHtjZhnNNI84krnhRcpRLsDA1PIVF/eAzRpZb4b+rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b4:d5:cc:74:75:0d:4a:ef:08:c9:ca:a7:c9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=69c7c32e5c2d7089a34f6e775b79de6ff678f1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:72:e6:94:28:24:36:cb:23:48:d1:eb:8f:
28:47:97:43:80:00:58:6d:e3:f3:83:88:16:1a:3a:
fd:c8:33:cb:84:34:96:fa:44:de:52:6e:76:97:e9:
ae:a8:a0:de:7d:4d:5e:50:39:55:35:e8:b4:1b:34:
4e:d0:04:fc:6f:48:9c:05:57:27:25:13:a1:53:5d:
71:56:68:47:1f:e1:34:3d:d8:e4:40:26:39:e9:83:
67:6e:ce:7e:53:92:cb:f6:16:f5:39:0d:ec:bc:87:
b5:91:ca:e8:cb:ef:05:67:92:96:89:90:ea:30:41:
38:af:52:58:79:c3:3e:5f:46:9e:54:57:cf:10:78:
81:28:c4:6b:16:9b:86:19:e6:fd:89:bb:84:74:a0:
7b:85:1a:00:56:bc:3f:ff:2f:24:e0:f0:29:f3:97:
4d:c0:62:dc:fb:7e:d3:b1:25:fb:93:8b:36:9d:f3:
4c:83:27:7c:d4:4e:77:f2:ec:b0:94:7a:b9:77:b0:
ca:95:c6:ab:a5:6b:24:76:8a:b9:e8:64:c6:5f:9d:
7c:eb:4a:ce:9f:41:ca:eb:fa:6b:6c:a6:38:d9:07:
21:5b:d0:9a:f5:c3:68:d4:16:de:5e:32:50:b4:f3:
7e:3b:72:aa:6f:24:cc:5f:f6:05:4d:f6:e8:b4:bd:
22:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C7:C3:2E:5C:2D:70:89:A3:4F:6E:77:5B:79:DE:6F:F6:78:F1:A8
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:28:96:d4:8d:9c:87:54:66:78:24:50:42:a3:e8:ca:94:f7:
09:37:b6:2f:65:e0:d2:27:16:6e:1f:ed:c3:17:ce:42:0e:52:
44:57:d4:b2:1c:b1:30:50:3f:4a:f6:dd:b4:d1:e9:07:22:45:
7f:47:47:1d:ff:d1:4f:b5:cd:fc:9d:b7:f6:3d:60:61:2e:86:
d8:08:59:47:01:b7:4c:91:c8:b8:2f:34:9c:4d:16:77:52:63:
1e:41:29:fb:9e:b6:a9:b6:d0:11:71:d0:30:ea:a0:6b:5f:6f:
5d:74:38:06:69:27:1d:ec:57:dc:5a:b5:fc:0b:6c:44:b7:43:
f2:3f:50:c3:e0:a5:78:5b:20:81:a6:21:96:b9:33:4c:a9:ed:
0f:ce:09:8b:50:8c:85:02:c4:7a:d1:34:cc:0a:f8:ac:c5:c0:
42:54:1b:8c:6a:3f:ff:83:cf:7d:61:98:6e:5c:04:e2:44:e2:
10:47:ea:7e:97:39:53:20:98:37:64:9f:4c:99:20:63:b9:40:
87:b3:c9:5e:86:45:16:b1:fc:85:b2:58:fe:cd:a3:5b:5a:8b:
4e:4e:37:bd:8b:a8:44:d4:13:83:fc:b5:9c:17:a5:4e:54:5f:
96:88:51:5e:05:73:f4:ea:9f:1f:bf:f0:09:3d:f7:34:73:29:
5e:cc:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:54 2025 by rpki-client