Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier: 3FDwS6PikErY2MUxdTShxPSrva7NCVH/xBs3So73aTA=
Subject key identifier: 59:DF:CC:D6:DF:0D:F2:70:BE:1B:5D:63:39:E0:FA:83:3B:B5:B2:13
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial: 019A0110B6149E3F517E5AB390C807622A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number: 02C1
Signing time: Mon 20 Oct 2025 10:01:03 +0000
Manifest this update: Mon 20 Oct 2025 10:01:03 +0000
Manifest next update: Tue 21 Oct 2025 10:01:03 +0000
Files and hashes: 1: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: EpUDTUlyzbOIRofiiAL5AqUfczPqSpwxNMsub/96iTU=)
2: qBI-2zh83yrxwps5B2wpeqKjzBE.roa (hash: +a40JJUntJvdA4SOSdLnTGJXNEt6hOF4b5LOIU68Stg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:b6:14:9e:3f:51:7e:5a:b3:90:c8:07:62:2a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Validity
Not Before: Oct 20 10:01:03 2025 GMT
Not After : Oct 21 10:01:03 2025 GMT
Subject: CN=59dfccd6df0df270be1b5d6339e0fa833bb5b213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:76:f5:1b:db:1d:63:bb:51:db:03:d9:64:af:
74:d4:d9:16:ba:04:f8:01:06:76:18:81:7e:1c:b9:
85:f3:28:66:1b:58:17:44:7d:e4:58:90:2c:bf:0c:
6d:01:25:98:b8:63:4a:d7:1b:fd:23:81:4b:bf:b0:
81:b9:e3:68:66:ef:5f:8a:6b:54:19:ae:db:09:91:
f5:6b:6e:ba:52:5d:f2:35:e9:f7:12:ca:fa:8d:0a:
c8:73:30:31:70:7a:e5:70:65:99:99:c2:75:ac:36:
4a:bc:fa:ae:e3:ff:ea:1c:11:81:56:6d:8f:ad:d9:
b4:1e:c8:ac:27:d2:e0:72:63:54:2e:88:7d:45:55:
33:4f:dd:11:75:bb:ef:a7:78:2d:4e:5b:d1:40:5e:
90:aa:4c:7c:55:53:54:2f:b2:9f:3f:dc:02:ef:75:
fc:a0:00:c5:16:1d:3b:45:f1:77:2c:4d:fa:78:77:
22:68:9b:62:0e:05:06:e6:59:58:45:d8:fc:96:19:
10:c7:d2:9c:66:2c:a6:87:2d:5b:0e:64:3a:c0:8c:
b3:88:ce:78:a0:60:d1:16:72:13:ee:ae:2d:60:71:
41:8d:40:e7:17:4f:ab:dd:69:6f:2d:a1:be:ab:57:
93:54:48:8b:8d:85:44:81:3b:18:aa:6c:ff:54:ff:
2b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DF:CC:D6:DF:0D:F2:70:BE:1B:5D:63:39:E0:FA:83:3B:B5:B2:13
X509v3 Authority Key Identifier:
keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:23:b9:b3:de:24:4c:b2:66:31:81:fc:7f:7b:24:23:2c:2f:
f7:64:7c:6d:70:55:84:04:e1:a6:e2:8d:77:bf:ad:fe:1a:e7:
55:bb:df:56:62:a4:8d:1a:d1:10:1e:a5:11:4e:ec:ae:10:3b:
83:74:06:d4:16:60:e5:ca:6d:67:03:1c:4f:d3:d4:66:1e:33:
84:68:9c:ae:87:17:03:05:26:ca:50:cd:28:d8:8b:a5:88:40:
a8:ee:67:09:1b:6c:d1:17:02:29:52:26:23:4e:3e:d7:9d:6d:
7f:03:b3:80:3b:62:01:09:75:41:9a:c3:cf:01:03:8c:b4:1f:
26:58:10:9b:93:17:b5:dc:c0:20:1e:ff:ec:02:44:13:fc:04:
b8:95:e7:81:26:09:73:43:fe:94:9e:a5:5d:57:05:41:cd:c8:
64:30:12:95:bc:f0:e7:be:ef:64:d0:01:bb:b9:21:5b:f5:b5:
20:4e:8b:77:84:dd:40:91:56:69:58:1b:74:a1:0d:9d:28:3b:
98:d9:e5:98:7f:1b:77:0f:14:5b:16:25:34:f0:8f:26:2e:47:
ad:c7:8d:fc:ca:5e:5c:f7:ad:41:2b:cf:f0:bc:4a:be:36:6d:
13:a6:a1:53:0b:32:ed:cd:90:e4:c0:e1:fb:ec:e6:1d:c8:8c:
0d:84:e0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:13:40 2025 by rpki-client