Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
File: IS7ROxq32gkK7kL2rt3f27FWpfg.mft (raw, json)
Hash identifier: cfE2C0A17p3yJtKpfSNeXZ2tKpDPJuirbsn4wFaJLPA=
Subject key identifier: EE:B9:98:41:73:A3:A5:F1:F5:63:D5:77:DB:85:ED:E8:7C:5F:78:FF
Authority key identifier: 21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
Certificate issuer: /CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Certificate serial: 0199FAD83FCB47EAC29DF606982D81A30211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
Manifest number: 0EF9
Signing time: Sun 19 Oct 2025 05:01:39 +0000
Manifest this update: Sun 19 Oct 2025 05:01:39 +0000
Manifest next update: Mon 20 Oct 2025 05:01:39 +0000
Files and hashes: 1: IS7ROxq32gkK7kL2rt3f27FWpfg.crl (hash: koo9zCm90I0F5GpCNmriAeulSYiOzqAugm4DwMhlcBg=)
2: pYYF24wF2qUQt0FJlZ3YB5wUYkU.roa (hash: zEnazzlJdeIGpPAdwwnulmZqiWyOGMOyiwVZOjKNgZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:3f:cb:47:ea:c2:9d:f6:06:98:2d:81:a3:02:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212ed13b1ab7da090aee42f6aedddfdbb156a5f8
Validity
Not Before: Oct 19 05:01:39 2025 GMT
Not After : Oct 20 05:01:39 2025 GMT
Subject: CN=eeb9984173a3a5f1f563d577db85ede87c5f78ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:f8:81:17:e9:95:f0:03:56:98:2e:02:0b:
f7:4c:e7:43:44:2a:a5:c9:68:47:c2:e8:99:e6:ad:
09:33:2a:08:f4:23:72:cc:8b:a7:d6:4e:32:d5:be:
e5:42:43:31:f3:ac:fe:8b:11:cd:b9:f2:df:2c:56:
43:c0:67:af:c0:d3:b3:d7:64:ee:1b:f7:aa:9e:69:
d3:2d:60:9f:6f:f8:f6:2e:2a:00:a4:15:8b:4a:83:
09:37:ab:c3:69:d8:39:85:18:4c:ff:44:50:f9:20:
27:a5:09:30:43:93:9d:80:b5:fd:e4:fc:4d:a4:c4:
dc:7a:63:7f:c4:04:ff:45:c3:75:e5:96:2d:94:14:
bb:8f:2b:5d:bc:57:04:95:0a:0e:78:a0:cf:2f:89:
f7:91:2e:2f:df:8b:a8:47:60:2b:ea:dd:e9:b4:ae:
33:62:60:ed:d0:ac:c8:2d:25:92:73:7c:53:14:ed:
56:fd:88:bd:13:7b:19:93:36:3a:7a:8e:29:ec:59:
12:2e:dc:0a:20:bc:bb:4f:fa:f0:62:a9:04:38:5c:
5e:66:98:cb:19:3f:4a:fc:b6:62:8c:62:0c:35:68:
1b:9f:c9:59:8d:36:95:04:0f:05:da:54:44:fd:6e:
30:ea:11:12:10:7b:3b:c5:0f:f5:ed:41:ce:8e:26:
05:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B9:98:41:73:A3:A5:F1:F5:63:D5:77:DB:85:ED:E8:7C:5F:78:FF
X509v3 Authority Key Identifier:
keyid:21:2E:D1:3B:1A:B7:DA:09:0A:EE:42:F6:AE:DD:DF:DB:B1:56:A5:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS7ROxq32gkK7kL2rt3f27FWpfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/726869-bd53-4d75-b7e2-34349331d104/1/IS7ROxq32gkK7kL2rt3f27FWpfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:33:19:fc:cb:5b:11:05:aa:73:d7:a4:74:98:f9:38:39:7b:
58:e7:af:e1:ff:46:4d:3c:0b:ef:bf:33:03:33:80:97:b7:1f:
2a:3b:de:e1:dc:ca:30:91:1b:0f:de:4c:c8:08:83:11:fa:ef:
70:df:04:ab:ca:25:00:2f:72:8a:7a:93:fc:49:d5:ad:45:18:
c0:12:b2:aa:2e:a6:5d:a5:58:61:60:8f:18:84:13:a9:a9:de:
55:43:ff:07:36:cb:6b:f1:ff:1f:5a:9c:31:41:4c:96:f0:af:
a0:63:6a:96:be:e9:f3:3f:df:59:a9:58:18:98:0d:15:6a:e0:
4c:3c:fb:71:a4:45:a6:42:8c:1f:ab:b1:3c:3e:49:ae:23:32:
1f:f4:2f:ef:be:aa:9e:c0:dd:df:84:96:18:72:ba:8e:cb:0d:
e9:bd:dc:d5:1f:c9:ad:32:79:50:66:70:9b:7a:60:e4:61:83:
f2:ed:a2:9c:3d:27:b6:54:a7:36:ba:58:af:f4:8b:fd:a2:4a:
a3:04:da:41:2f:d2:9e:4b:a0:fd:35:09:5b:42:1f:df:84:e4:
c6:01:0d:42:fe:7f:d1:8f:b5:ac:8a:1f:07:7e:c3:71:d8:8c:
3b:9e:16:8f:3f:e0:a5:99:ed:ea:91:83:58:d3:9c:e7:ba:74:
b4:41:e9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:53 2025 by rpki-client