Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier: Mq6jXpfJieSk+Y4qALsSejC4hEuEsxYJMipbiWFVopA=
Subject key identifier: 9B:EB:78:39:91:C4:9B:7D:E1:61:26:D8:7A:3C:3E:8A:51:37:2C:40
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial: 0199FFFE6314FED5FBFE054D12B4C1575E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number: 110B
Signing time: Mon 20 Oct 2025 05:01:25 +0000
Manifest this update: Mon 20 Oct 2025 05:01:25 +0000
Manifest next update: Tue 21 Oct 2025 05:01:25 +0000
Files and hashes: 1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: woY8jrGOGwD0pk7X3/MbTduYzXl+T8rOwLmsOv7g7hQ=)
2: KrFqFiDpj3KTLxxAsjJyiKgAjFA.roa (hash: 1PmMv3UcI9fAXjZSi6jxq86mVNekWxeQeV4OVG0h5eY=)
3: QEP4j9JVsbgw6u0dNGwjp_dEBOM.roa (hash: cfwWMXWNZBAAjCKALqzpLbct9a8WBHygXbGOplIqMXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:63:14:fe:d5:fb:fe:05:4d:12:b4:c1:57:5e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Validity
Not Before: Oct 20 05:01:25 2025 GMT
Not After : Oct 21 05:01:25 2025 GMT
Subject: CN=9beb783991c49b7de16126d87a3c3e8a51372c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:dd:f1:4e:44:5d:a2:67:a6:4f:7a:c4:31:
e0:40:51:1c:8b:5c:09:60:3b:ba:26:99:10:8a:70:
fd:20:b7:d3:cf:ba:89:d2:c0:a6:34:f0:fd:2a:c0:
6e:e9:25:56:db:4b:50:61:b9:a0:91:f3:bd:2c:25:
37:c6:da:7e:53:36:28:a5:01:68:ea:6c:00:e9:fd:
5d:72:9e:b1:b0:c5:55:1d:4c:ce:4b:07:68:4f:b2:
5a:9d:20:3a:51:fe:8e:0f:50:ae:ad:7d:de:59:e0:
a7:d8:7f:0a:f0:f2:9f:55:ba:6a:72:51:20:73:f1:
b9:f9:2d:4f:bd:01:08:29:a4:3b:e2:94:8e:0a:b6:
8d:28:b6:3b:7b:58:06:60:4c:b3:eb:4c:8c:77:63:
31:68:5d:69:c5:e3:62:79:0d:68:ea:67:74:21:56:
1f:ba:97:67:f3:f0:03:a9:ec:be:59:dd:67:c6:90:
e2:e5:c2:48:92:0b:75:a7:8c:1b:f2:f1:2a:bc:8e:
6b:eb:26:d9:b3:42:5f:2a:94:aa:9a:3d:9a:bf:c4:
9d:0e:ca:16:b3:cd:0c:fc:8d:a2:19:0a:31:5c:b8:
db:4e:ba:59:f7:91:37:e0:c5:d2:fb:22:35:4f:ec:
4b:f9:c1:5e:a6:dc:4e:64:09:57:be:f8:35:56:ab:
50:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EB:78:39:91:C4:9B:7D:E1:61:26:D8:7A:3C:3E:8A:51:37:2C:40
X509v3 Authority Key Identifier:
keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:1a:5b:8f:c6:7a:2a:23:b3:72:7b:b4:27:de:c3:f6:a5:10:
14:93:31:61:98:d0:7f:d4:e3:62:6f:d8:d8:26:b3:67:69:1c:
5e:2e:3a:97:be:98:96:14:09:63:e6:b8:89:17:bc:b0:92:12:
b8:a7:c6:a1:62:eb:75:2f:1f:9e:76:22:74:b2:56:cb:07:fe:
98:2d:d3:89:ac:50:42:ec:9a:77:f3:7e:27:b1:64:b3:9b:cc:
bd:7c:f1:7e:74:eb:94:eb:08:53:82:fc:e4:4c:64:f7:d2:ec:
05:00:24:22:fc:3f:67:e6:69:dc:66:6e:c9:6d:93:4f:ba:4f:
c5:41:97:90:97:07:c0:0f:ba:2a:2f:04:5a:7a:75:5a:71:5f:
b0:8a:fc:b9:77:dc:94:53:36:96:2c:4d:b7:49:b4:7f:a7:b5:
56:69:7b:9d:f8:37:4a:cf:ec:69:2b:d7:a1:5d:6b:27:13:94:
67:76:71:02:fa:38:7f:6a:9b:82:74:7e:e1:ee:b1:da:5a:6a:
18:62:0d:88:22:fc:10:06:dd:3a:ab:1d:ff:e4:5b:1f:24:eb:
47:a4:ae:8c:e7:3a:8c:b9:e9:4c:0c:1f:78:f1:62:a1:ff:6e:
ad:d4:ae:32:b8:d5:59:f7:d9:84:07:6a:ae:3e:9c:a7:d3:57:
a4:2a:58:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:47 2025 by rpki-client