Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
File: 7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json)
Hash identifier: j36sDj+6c013oOZHxK+NqqEQ2FOr3NpHJWQHdPCXmYo=
Subject key identifier: 8C:32:46:32:11:DC:78:92:C2:42:F8:2B:0B:36:61:BA:D5:F9:40:5E
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 0199FD6B2A388DE619C8A985DDCC190C5B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
Manifest number: 059A
Signing time: Sun 19 Oct 2025 17:01:22 +0000
Manifest this update: Sun 19 Oct 2025 17:01:22 +0000
Manifest next update: Mon 20 Oct 2025 17:01:22 +0000
Files and hashes: 1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: wFZDVn13j/WWz6zVA/tfYeEVccw6+X+mngw6/8GQHv0=)
2: U8r0tQi-zyaqXWj1BP7VR1CSQio.roa (hash: 2sAYuzHl5HIba+FILh2Jc5dn+E3yhGsj+/+0I47tVzI=)
3: gWV79z64-K00_T5p42GewWgp3cA.roa (hash: WMmpO9e9AU6ZoJLpGqYgkYyyLRC76igWs/Qlt0mpVE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:2a:38:8d:e6:19:c8:a9:85:dd:cc:19:0c:5b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: Oct 19 17:01:22 2025 GMT
Not After : Oct 20 17:01:22 2025 GMT
Subject: CN=8c32463211dc7892c242f82b0b3661bad5f9405e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:90:73:a0:fc:17:13:79:50:ef:08:80:cf:6b:
4a:2c:9b:a0:1d:62:4d:66:7c:cd:85:75:d6:21:c5:
06:eb:3c:10:4a:10:62:ec:96:90:69:a2:93:c4:3b:
08:f8:6b:04:73:b5:f7:9d:46:11:cb:b3:68:1b:9b:
a8:86:b3:0d:a0:df:9c:77:ab:4c:3f:de:4a:b4:95:
65:17:27:ed:81:10:76:c9:28:67:04:5c:b8:14:a4:
09:33:c1:2a:c4:59:4f:9e:e9:94:bc:47:e6:15:80:
80:bc:c3:d7:4c:87:5d:4b:47:37:e1:90:70:c7:84:
0a:c4:5e:1e:33:89:7d:b5:b0:77:80:6b:40:83:28:
15:69:27:80:22:83:bd:95:34:97:f9:e3:d0:95:2a:
b7:74:3a:71:23:69:5e:88:53:7e:f7:59:48:11:02:
77:3a:e2:c3:2e:cb:79:31:17:50:ca:03:4c:38:b9:
7a:e7:b1:79:30:2c:cc:f2:77:36:c8:43:88:e8:57:
10:76:ea:84:e5:86:54:55:09:03:d7:43:55:7a:32:
7d:5b:2d:b7:0a:c7:e2:8d:8a:51:bf:99:ae:fc:b5:
e1:1c:47:06:20:96:8a:1d:69:32:c7:47:6f:af:66:
cc:36:d3:5e:a5:71:77:ea:d3:b5:66:e9:cd:36:51:
c6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:32:46:32:11:DC:78:92:C2:42:F8:2B:0B:36:61:BA:D5:F9:40:5E
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:43:07:ac:dd:44:0f:c7:e3:14:6c:79:10:4b:3e:b3:ae:f6:
f3:64:71:51:a6:ab:06:69:48:90:f3:d2:64:ed:75:8d:30:a2:
e5:88:1b:91:d7:67:3d:8d:21:8e:a8:a9:2c:f3:0e:5a:50:9b:
f9:74:9a:0e:db:66:bd:48:c9:df:9e:9e:a5:0d:21:65:9a:aa:
48:a5:10:02:81:cc:3b:d3:ea:98:a4:df:55:f6:d3:df:15:c9:
24:0d:cb:a4:ec:7a:bb:95:b4:2b:cb:67:fa:57:91:f1:55:ec:
85:28:08:9e:0e:1d:83:2b:a3:05:a3:92:9e:bf:03:3f:d8:34:
32:98:a8:05:ad:8d:c8:0b:e1:58:64:24:8a:4d:fd:cd:f6:35:
d7:5d:ba:d5:af:83:49:67:05:61:a7:5d:f1:e6:8c:46:69:0f:
b7:6f:15:bb:93:0f:bd:f0:5e:4d:c5:d7:d8:f7:a5:04:a0:63:
5a:28:b2:f7:af:1f:6b:8e:26:3f:e8:6a:df:bb:28:88:f8:b5:
24:8b:61:83:54:3f:c9:34:93:cf:85:10:6a:b7:87:86:3f:cf:
aa:36:7c:49:9f:d1:74:1f:47:4a:cb:4e:4b:c9:1f:db:dc:28:
62:d7:39:a0:54:25:d3:3b:42:d7:2d:b8:29:15:2e:e1:0d:eb:
4a:90:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:14:39 2025 by rpki-client