Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
File: 7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json)
Hash identifier: lflhLh76XndcS/qvOvdDFQ/w1vxe+asgUIgCDfT2M8Q=
Subject key identifier: CA:43:F0:18:23:E4:AB:8E:7C:55:D2:05:38:A1:B3:93:EA:E2:E9:95
Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
Certificate issuer: /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Certificate serial: 0199FBEB9F47CD95C64D8A98C29DE8735C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:26 +0000
Manifest this update: Sun 19 Oct 2025 10:02:26 +0000
Manifest next update: Mon 20 Oct 2025 10:02:26 +0000
Files and hashes: 1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: /ZXLZt1L8Y6pCS+oq5B3Zpq1d+AdBOra9QL1X4YmUXg=)
2: xE_JDYJwb1MCr7C57Rm2iLhdKIw.roa (hash: sRhgH4Cj24QxldRTdKVZiNUSEzN+8JXEsh8ETe2KACg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:9f:47:cd:95:c6:4d:8a:98:c2:9d:e8:73:5c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Validity
Not Before: Oct 19 10:02:26 2025 GMT
Not After : Oct 20 10:02:26 2025 GMT
Subject: CN=ca43f01823e4ab8e7c55d20538a1b393eae2e995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:0c:cf:87:37:48:bc:f8:c6:6e:46:95:38:96:
ba:a1:cf:b1:4a:16:cf:09:84:ef:f1:08:d3:07:a7:
4d:bd:a6:44:23:28:12:98:e3:50:ce:7b:1d:48:19:
74:57:17:0f:ae:53:26:90:12:21:88:10:a4:77:99:
79:bb:b5:1c:0a:42:6b:ae:12:29:ea:28:fc:26:83:
b9:23:62:7b:36:d2:3e:71:6f:dd:31:dc:29:ee:10:
5b:e0:fa:3d:74:a8:83:e4:d7:2b:0a:dd:3f:59:a8:
d8:c5:35:21:24:40:56:e2:93:c4:ac:f5:46:18:a1:
ab:20:26:ec:cd:cc:a1:99:8b:fd:31:70:fc:66:4d:
25:45:a3:df:65:88:5c:36:cd:04:b9:2d:e0:64:bb:
54:0a:a6:0a:dd:cb:95:ea:cb:76:f8:9b:d2:57:cc:
41:b1:8c:91:ff:08:20:20:76:7d:9d:50:ce:69:ea:
40:f4:b6:38:03:53:12:15:2e:5c:6e:4c:cb:61:e6:
3b:cf:cd:72:1d:36:18:75:c7:80:ad:d7:6c:a7:ff:
58:78:3c:f0:91:1e:55:fd:e9:22:6f:3a:a7:4a:fd:
e1:e0:9c:33:93:b7:b1:ea:ed:b4:97:d5:5d:56:69:
20:17:c4:3c:7a:81:0b:a5:89:a7:de:be:dd:00:4e:
3e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:43:F0:18:23:E4:AB:8E:7C:55:D2:05:38:A1:B3:93:EA:E2:E9:95
X509v3 Authority Key Identifier:
keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c2:09:35:cf:d8:b4:03:10:96:4b:da:36:fd:ef:90:24:49:
77:3b:74:45:5f:b8:43:8c:e8:3a:99:ee:f3:46:8b:a0:12:09:
3a:17:a3:27:7b:10:31:8a:2d:36:34:3f:ce:2f:31:13:20:bc:
26:20:81:ee:b3:8f:c4:2c:f2:77:8d:59:16:58:26:2b:e0:58:
13:40:67:50:a5:ce:18:8f:cb:ed:6d:7c:44:a3:8d:df:39:a9:
dd:c8:f5:67:da:b1:d7:28:5a:55:be:7b:4c:93:da:72:19:b1:
cc:e5:05:6d:b0:ef:78:e4:bc:de:50:44:15:7c:ce:02:d0:f8:
ba:37:0d:b3:4a:92:da:98:dd:e7:cd:47:17:9d:12:c7:35:e4:
b4:2e:fa:a1:82:7c:af:64:16:55:bd:09:29:b3:1b:05:69:5e:
d2:11:1b:b6:43:d6:f8:1c:84:86:bd:06:4b:18:0e:4c:4b:1b:
d7:4b:ec:d2:e1:a0:aa:f3:19:8e:13:4f:34:58:6f:63:08:5b:
cc:c0:40:a6:49:66:a7:8f:08:ed:74:37:fa:e8:bf:cb:1b:b6:
0a:c0:2d:75:83:c1:c8:6e:21:b4:f4:ef:72:60:9e:1e:ee:11:
e3:56:6f:b5:9d:eb:67:5e:2d:46:6d:97:8b:42:36:c5:8e:34:
60:13:eb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:44 2025 by rpki-client