Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier: sr7u3GPSHkfxvYyaQ4adsPw+P9jbiZfuhoyj9HTCeF0=
Subject key identifier: 53:DE:7F:F4:D3:B5:66:84:27:9A:FE:6A:53:11:E9:44:16:53:A9:79
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial: 0199FD33E377B9B426A04A8F274E02159A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number: 02BF
Signing time: Sun 19 Oct 2025 16:01:00 +0000
Manifest this update: Sun 19 Oct 2025 16:01:00 +0000
Manifest next update: Mon 20 Oct 2025 16:01:00 +0000
Files and hashes: 1: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: xZFIOeTBFHCKMoclyV9E5rZPcVqrLLdsBJrqBG4KX7g=)
2: qBI-2zh83yrxwps5B2wpeqKjzBE.roa (hash: +a40JJUntJvdA4SOSdLnTGJXNEt6hOF4b5LOIU68Stg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e3:77:b9:b4:26:a0:4a:8f:27:4e:02:15:9a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Validity
Not Before: Oct 19 16:01:00 2025 GMT
Not After : Oct 20 16:01:00 2025 GMT
Subject: CN=53de7ff4d3b56684279afe6a5311e9441653a979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:7a:80:02:c5:2a:20:2d:85:28:a8:ec:f2:
e0:24:4d:3b:a9:df:4b:a0:a2:42:8a:65:d2:b9:74:
33:90:d8:91:4c:f5:f0:09:df:45:f7:e1:a5:9c:6a:
7b:8f:bf:ed:6c:3b:53:14:ac:7e:5b:15:68:3b:27:
63:77:51:2f:55:22:52:3c:44:ea:b7:d9:52:fd:fa:
83:ca:78:dd:4e:18:b3:0a:7c:de:62:29:2d:7a:2d:
3c:8d:15:5e:4f:4a:23:b2:c9:6d:9b:a8:31:e0:03:
39:93:9e:f2:2e:32:35:04:66:57:28:ef:c7:68:68:
16:05:3f:68:b3:e1:17:df:44:f9:c4:b0:e1:11:36:
c3:32:1d:3f:1a:89:6c:4b:bc:6c:10:e1:9b:b7:11:
a6:fc:10:aa:85:8f:e1:89:c3:69:5b:4d:26:6d:f8:
01:4e:f9:1d:99:45:83:68:3e:62:bd:94:d3:12:7f:
d7:10:6e:1b:8f:ad:2d:82:55:22:31:74:73:3a:bd:
dd:ce:ef:13:15:49:f0:b7:d1:3b:e5:c4:07:59:1c:
fe:75:62:ca:8e:b8:77:6e:3b:78:17:9c:d6:4d:98:
f3:0d:d8:e4:ef:8f:b6:57:9b:df:ef:7e:4c:80:22:
2a:34:95:45:fd:ee:eb:90:90:d2:d1:3f:ed:24:cc:
ec:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DE:7F:F4:D3:B5:66:84:27:9A:FE:6A:53:11:E9:44:16:53:A9:79
X509v3 Authority Key Identifier:
keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:8f:fa:d7:6e:44:fb:c5:2d:d4:85:c8:36:b6:fc:8e:5f:89:
33:e3:c3:8d:96:a0:1d:1b:40:6f:27:02:81:44:c2:84:80:48:
02:06:ac:82:ff:d3:20:e0:6f:53:e0:b5:cf:cc:12:f0:a4:c6:
ea:fa:5b:b8:94:d6:6f:38:dc:ff:49:a7:dd:54:5f:2f:8a:c2:
82:21:66:b2:23:0c:0b:b8:ea:6b:89:cc:ee:4d:a2:ae:82:ad:
7e:75:da:73:84:4f:b5:0d:b2:30:c4:81:1b:c3:45:d3:e6:58:
c6:37:0b:e4:1d:c7:ff:6e:2d:61:51:08:6b:81:cb:4b:cf:d9:
a3:89:96:ef:e6:a6:26:4f:e2:3f:f2:fc:fe:5f:10:75:00:c5:
50:74:a7:93:b1:c5:88:96:e6:b7:99:67:a3:04:2b:5f:47:72:
46:b8:e9:a4:40:0f:c9:fd:58:f1:d4:07:fa:54:79:85:a6:cf:
da:2a:24:0e:22:a0:55:0b:0e:58:0c:04:cd:16:d5:42:e2:98:
d1:b0:a6:12:85:8b:50:f2:bf:9b:8f:cf:e7:82:ae:76:6e:7d:
38:94:49:e9:0b:a3:75:0c:1e:ba:ae:9c:6a:2a:17:01:13:c6:
6b:df:a0:8a:76:f7:3f:cf:47:ac:f8:fb:d8:72:c0:cb:54:3a:
14:e4:f0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:33 2025 by rpki-client