Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
File: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft (raw, json)
Hash identifier: JoDWbUoO1XB+r9Qq6hqqVQucy1EvdD+Ds8m4VxOhpo4=
Subject key identifier: 68:17:E6:46:35:DE:73:68:63:98:DF:37:25:BA:80:29:D4:6D:77:44
Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
Certificate issuer: /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Certificate serial: 0199FCC6C797ADDDA35DD5CAD2BBEA18DF60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
Manifest number: 063F
Signing time: Sun 19 Oct 2025 14:01:49 +0000
Manifest this update: Sun 19 Oct 2025 14:01:49 +0000
Manifest next update: Mon 20 Oct 2025 14:01:49 +0000
Files and hashes: 1: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl (hash: QgSSPVEpr5d4SgQKrPtIug3rLrwATxBoi/xiJTWGAVk=)
2: eVimXbeUG-mEaqJ8wWvzirp1aiE.roa (hash: O9VHdGh9iSLdn0Tv56KJfU/KKXIBvl+hkZsad3bOt5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c7:97:ad:dd:a3:5d:d5:ca:d2:bb:ea:18:df:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Validity
Not Before: Oct 19 14:01:49 2025 GMT
Not After : Oct 20 14:01:49 2025 GMT
Subject: CN=6817e64635de73686398df3725ba8029d46d7744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:ef:bd:2a:14:d1:63:5b:c8:30:98:b9:95:
9e:6d:7a:89:1e:a9:78:06:eb:0b:f5:36:ac:14:63:
c1:b8:43:79:ae:e0:87:24:4e:e7:51:51:6c:74:cc:
e2:81:51:2c:ae:fb:d2:c5:c7:b0:32:47:54:3e:ca:
9b:56:ee:9b:0e:9d:90:7b:03:f7:ae:f0:48:c6:50:
e9:9e:b1:3a:70:f7:4c:c4:99:8c:a3:4f:bb:c2:1d:
c8:93:4e:a4:40:f8:0e:ca:26:9d:d6:b6:d2:a3:ac:
90:5a:d9:10:f9:81:51:cc:ba:0d:75:c7:b5:0c:87:
a5:b3:bd:3f:fe:42:72:af:50:be:9e:72:1a:3a:8a:
e8:eb:42:ed:6c:d6:32:1c:86:ce:bc:8e:d7:93:af:
21:87:77:19:96:79:33:1f:9a:68:2e:6d:a4:a7:27:
ff:55:c5:21:11:46:a5:a4:8b:06:33:ee:58:ad:a9:
57:61:dc:5e:e7:d2:d4:b4:87:b5:1a:df:3b:34:f7:
cf:12:ef:b7:b6:0b:11:76:e2:75:80:35:c0:db:59:
1c:ec:78:32:84:dd:30:57:77:72:8b:79:63:67:3c:
b4:86:b8:76:55:dc:15:f7:d9:32:eb:88:e5:11:f3:
f1:83:93:ad:a6:d8:52:11:6a:bd:2a:d0:c8:20:76:
34:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:17:E6:46:35:DE:73:68:63:98:DF:37:25:BA:80:29:D4:6D:77:44
X509v3 Authority Key Identifier:
keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6d:23:8b:8c:41:95:c4:5d:a9:e7:c9:6f:17:ac:95:87:2b:
68:8f:fc:e0:52:db:4c:48:54:26:a0:31:c6:f2:37:fd:24:b1:
6e:57:72:19:8e:a4:b0:98:92:2f:b3:5f:38:b0:e1:7d:a5:f0:
b6:eb:b4:88:20:35:22:d3:8d:46:5c:db:9a:7c:21:48:62:0f:
98:ce:36:65:f0:0d:e1:4e:fd:42:16:8e:f0:9d:23:f8:32:b8:
62:16:08:00:ff:38:50:d4:9d:09:2f:b5:b8:87:0f:4a:fa:3a:
9d:91:3b:cd:b0:c1:01:9e:74:cc:6a:11:fe:a6:6c:cd:75:d9:
62:bf:90:29:0e:70:de:44:d9:3f:25:97:a3:f2:2e:82:4a:42:
9c:b4:97:66:44:75:46:fb:ea:7f:4a:dc:14:b2:96:a2:6e:b0:
7c:76:18:db:bd:eb:04:b5:7c:3a:b2:8b:5b:50:c2:ce:fb:32:
f3:8c:77:a8:f2:1f:d8:3e:f0:56:74:5e:d4:08:b6:ed:ae:1c:
5c:88:f2:10:6c:a1:80:5d:5d:aa:38:4f:39:55:7b:84:2a:71:
e4:7c:ec:ef:cf:e4:41:91:03:c7:63:a3:ed:6e:dc:47:a4:d8:
bc:85:39:f7:6d:db:90:45:67:db:e6:3c:e0:53:d7:fa:07:33:
42:dc:f7:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:33 2025 by rpki-client