Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
File: 7-oXe8wrDvZMq2BObmQnsa3gv2k.mft (raw, json)
Hash identifier: 61MS4Mtz0bsiqpE2KjregrnIEe5zpnKgKRBIjaEDThs=
Subject key identifier: DC:0B:FD:C3:AA:D3:93:BD:DC:B0:76:05:9B:1C:2B:80:82:28:19:A3
Authority key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
Certificate issuer: /CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Certificate serial: 0199FAD8154FAF9CB9AA6E9640C0EC92DE86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
Manifest number: 0F47
Signing time: Sun 19 Oct 2025 05:01:29 +0000
Manifest this update: Sun 19 Oct 2025 05:01:29 +0000
Manifest next update: Mon 20 Oct 2025 05:01:29 +0000
Files and hashes: 1: 7-oXe8wrDvZMq2BObmQnsa3gv2k.crl (hash: NIs2wr4pB4dRKWaHIj0RC20xIDunki2gPq7+rM7Nk9E=)
2: BfBzjofHcSu4a3jygqfPxr7xm38.roa (hash: WZsJkNeqT7b0+zK6F4CNPynL3I93rxtNrXgK5qWCEEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:15:4f:af:9c:b9:aa:6e:96:40:c0:ec:92:de:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Validity
Not Before: Oct 19 05:01:29 2025 GMT
Not After : Oct 20 05:01:29 2025 GMT
Subject: CN=dc0bfdc3aad393bddcb076059b1c2b80822819a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c0:2a:45:05:be:30:db:06:d7:a5:db:58:66:
e7:0e:fd:50:b1:c0:8b:53:b3:a2:4a:e7:aa:19:d5:
bf:8f:0b:d2:91:eb:29:a0:68:9e:33:79:79:e7:99:
04:32:38:60:5a:8c:b1:56:56:03:30:10:2b:0a:3b:
b9:76:dc:0c:93:5c:62:a8:2d:df:7e:8c:38:1a:a4:
a3:ca:f8:b6:35:8c:f7:c6:38:c9:a6:e3:9b:65:5e:
f5:1a:33:fa:0b:83:31:12:76:1f:81:64:ea:62:67:
27:08:8c:3f:55:bd:63:1a:b9:be:8e:e9:d1:df:1a:
d0:ce:3b:70:ad:57:16:2a:57:67:dd:b6:2f:33:af:
d8:2e:b8:f2:9f:7c:6f:a0:76:9c:65:ee:21:bb:76:
60:59:99:77:ca:18:bd:f9:57:58:16:60:6e:af:14:
8c:46:5e:55:79:9e:20:9f:e1:76:9e:b5:bc:c3:04:
9a:42:94:a9:c0:21:da:bf:9f:3b:fe:82:82:16:78:
b7:0e:f8:a3:44:48:70:0f:7f:99:54:73:98:60:88:
8b:15:e6:ec:aa:17:a0:ff:c1:87:b6:34:b5:d3:07:
26:c0:c4:61:92:46:70:44:55:15:09:fb:d2:19:b4:
ac:70:3d:9a:33:bd:9d:2c:5c:c2:75:b0:72:3c:56:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0B:FD:C3:AA:D3:93:BD:DC:B0:76:05:9B:1C:2B:80:82:28:19:A3
X509v3 Authority Key Identifier:
keyid:EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ef:1a:8c:0e:34:4e:31:4e:0a:84:c9:52:28:ae:38:56:30:
95:e4:3e:af:60:9b:10:68:5a:22:15:4c:20:3e:3f:b8:0c:93:
18:bb:53:c6:54:e2:8a:12:b1:ef:96:88:1c:e9:a5:80:47:66:
3f:d3:e9:bd:27:7d:93:fb:ef:12:0e:6f:eb:bb:de:c3:8e:d2:
a9:39:5a:78:0c:91:d7:87:51:28:81:91:1b:9f:ef:02:16:88:
cc:46:03:f5:44:be:e8:e6:de:ff:96:aa:30:c6:bf:09:33:1f:
ac:b7:10:4e:1c:b8:2a:df:6e:22:db:06:44:1d:3a:f2:35:5b:
6c:fc:82:62:8b:4b:10:03:a2:ca:60:0d:ae:5f:92:be:c4:27:
6d:8a:12:58:1d:db:5d:3b:7f:bd:ce:03:48:53:56:5b:f2:a0:
e3:c8:14:bc:33:dc:f7:a4:23:5b:2b:b7:3a:23:4c:69:48:27:
c6:b0:57:f6:2f:1c:76:ee:b1:30:2f:15:47:3a:05:0e:f6:f9:
4b:cf:98:c1:c9:f7:03:d6:75:62:f8:21:83:75:07:a9:c8:e4:
bc:1c:df:e5:30:0b:9d:81:60:23:1c:ad:54:48:33:e0:ea:b9:
c7:dd:0d:ef:24:84:92:dc:a2:28:ad:23:95:12:3d:f4:f1:67:
5d:1c:d2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:00 2025 by rpki-client