Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File: 7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier: ip2A9P6Vupkv4VFlnlolK4lBnRGnGr8oEYB0dttdYSc=
Subject key identifier: C2:51:A8:9E:98:28:49:FA:A2:A9:96:9A:F0:1E:0D:49:4B:76:A5:98
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer: /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial: 0199FB7C88D6F7824E663B620A2056CB6BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 08:01:06 +0000
Manifest this update: Sun 19 Oct 2025 08:01:06 +0000
Manifest next update: Mon 20 Oct 2025 08:01:06 +0000
Files and hashes: 1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: 3HL7hPpmpc/LcBqO5seT1wmJMrSiZKojNOlhBA1Uo3k=)
2: 9zc3UK9Q2NW5kQioYk692gU-YJI.roa (hash: BBodVy2RZip9O+WWUTv52ptxLTbUw/7auCFYyPArRAA=)
3: UQ_3RuYAdJoYpjdqceJNmc5aoug.roa (hash: q3FXkXKtZ8hFVmAvp+UOJxjM7FKEfq7BOOg+5WvlLx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:88:d6:f7:82:4e:66:3b:62:0a:20:56:cb:6b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Validity
Not Before: Oct 19 08:01:06 2025 GMT
Not After : Oct 20 08:01:06 2025 GMT
Subject: CN=c251a89e982849faa2a9969af01e0d494b76a598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:aa:68:cc:02:70:b0:db:80:76:84:1f:9b:
5e:db:b8:6a:50:e0:1a:cc:35:12:83:0c:5a:40:5c:
09:d6:96:db:a2:05:18:24:97:52:d2:4a:1a:89:80:
07:f7:0d:4d:a6:69:3e:3d:fa:7f:0e:ea:ec:5c:05:
93:62:1e:be:6c:db:fa:21:d8:69:6c:02:32:bc:55:
6a:6c:c6:10:ef:f8:6c:22:a2:e9:d5:66:7b:12:8c:
7e:5a:b4:95:fa:82:b2:30:b6:9f:0d:54:f2:fb:1e:
a2:a9:28:38:f8:7e:39:da:c7:b4:00:91:41:ee:ed:
1f:d6:b5:5a:61:b6:96:1d:04:99:ef:d8:3c:cc:a8:
31:da:4e:76:03:b6:b7:94:4f:e7:b1:35:02:99:3b:
af:18:d1:f8:a4:d8:b9:79:c3:cf:c7:91:b0:e4:b5:
a8:bc:32:0e:1f:9e:62:43:ad:65:77:24:96:f0:57:
15:81:6f:d5:c5:46:5a:2e:af:76:16:db:f4:7b:89:
07:f4:20:c3:5d:44:5d:8e:fd:ce:b9:60:a9:f5:7a:
e6:89:e1:f9:5f:9e:1b:0b:2c:44:8f:d7:28:15:95:
c0:b2:f9:a4:0d:a3:bd:01:43:04:0d:41:b8:f7:a9:
80:5f:e8:d8:bd:9b:3f:5a:7a:42:54:00:79:7a:97:
f1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:51:A8:9E:98:28:49:FA:A2:A9:96:9A:F0:1E:0D:49:4B:76:A5:98
X509v3 Authority Key Identifier:
keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ce:39:d5:6f:74:cf:5e:bd:bc:eb:57:da:c2:a8:ca:87:55:
25:d3:76:99:90:7c:4b:a3:f5:fe:5b:e1:21:27:63:f7:2d:23:
46:ca:e6:89:50:9a:d9:7f:f8:cd:23:38:51:db:6d:02:ee:69:
d4:9a:27:ba:4f:2c:5a:63:17:e4:a0:4e:bf:14:31:0c:2f:89:
b5:ea:17:6e:51:30:39:1d:8e:59:28:71:4c:77:a1:e6:d5:1f:
1a:b4:92:99:34:5c:00:c7:73:bf:0c:2d:d4:f5:80:59:6f:8a:
0d:fc:47:df:d7:f4:ba:eb:c3:5d:2f:da:47:58:d8:48:09:05:
c1:a8:40:68:b6:dc:e2:5e:f7:20:2a:b3:dc:84:16:ea:a8:86:
c8:00:29:f0:af:54:12:2e:82:ab:1b:31:c5:c4:9b:fa:86:6f:
63:0b:0c:a4:d1:c8:2e:8a:7d:56:09:73:36:14:12:2f:e5:85:
60:de:56:ee:d8:b1:36:07:c6:e0:0f:6c:44:65:17:ae:01:74:
c6:22:9c:9b:2a:a6:8c:42:eb:99:49:5b:5d:55:80:b8:d8:7a:
ce:14:3d:3f:ec:c4:5d:c9:6b:40:44:b0:59:7b:58:d9:5f:ba:
7b:c0:b6:7b:1d:16:bb:a2:9b:d9:4f:cb:0f:de:f2:52:07:78:
5b:c7:f8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:51:59 2025 by rpki-client