
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier: l1MckrtGOr8qplI9ei4QGP0nb24zZSZudqFdPoONwbA=
Subject key identifier: 21:26:10:87:61:2F:8F:D1:8D:E2:69:33:D0:72:E7:1C:37:2E:BC:3F
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer: /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial: 0199FEEBBDB6D64ED5229F3FF1C137D0955B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number: 1676
Signing time: Mon 20 Oct 2025 00:01:26 +0000
Manifest this update: Mon 20 Oct 2025 00:01:26 +0000
Manifest next update: Tue 21 Oct 2025 00:01:26 +0000
Files and hashes: 1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: FzgbO5RQ5H8ffS3rUFoA/7+P8TfMw8bRnuHWPXmJAW4=)
2: J9Y5qrjsI2Qtuq7klk41lQwg1og.roa (hash: NNuL/WZWhtDsn2nhsgr73rvUsNOJxUI43avvh9gIeRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:bd:b6:d6:4e:d5:22:9f:3f:f1:c1:37:d0:95:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
Validity
Not Before: Oct 20 00:01:26 2025 GMT
Not After : Oct 21 00:01:26 2025 GMT
Subject: CN=21261087612f8fd18de26933d072e71c372ebc3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d3:4a:ef:3a:9b:27:22:ec:98:39:72:4d:d3:
97:62:17:4e:18:fa:81:ed:94:b4:fd:35:67:2c:75:
50:3d:c1:69:b6:84:a5:07:9c:a8:56:2e:e1:4b:bf:
49:da:7c:db:93:77:d6:1a:f5:12:82:ae:5f:86:c7:
80:35:e0:58:5a:1b:25:9a:d3:f7:39:fb:32:4a:9b:
b6:13:db:a7:f1:f4:bb:21:35:7c:c2:a9:4e:f1:a6:
a8:06:6b:4a:cc:e9:ac:8d:36:85:f3:6b:ad:6b:e4:
5c:30:94:15:b9:51:a9:8d:18:41:2a:4a:3b:d4:9f:
86:10:e5:14:ca:ec:05:04:19:23:69:95:3f:c1:04:
b4:65:67:a0:a4:e4:3f:62:38:59:45:b6:eb:c8:57:
28:fc:39:4a:f9:fd:55:4c:c1:4f:a0:a9:be:79:fe:
d6:d4:4a:96:ad:95:fb:b1:bd:a6:a9:b6:17:74:83:
51:b4:95:01:51:2a:09:f6:46:7f:f9:7c:c6:0b:25:
9e:23:ca:5f:24:fa:1a:a9:0b:01:ba:81:12:63:6e:
bf:93:2d:ae:72:d5:9f:a9:1d:a1:0f:c2:df:e6:3e:
47:3d:e5:64:e7:60:4f:f6:03:7f:5f:5d:82:8f:74:
99:68:f1:21:c9:72:73:e9:0a:8d:fb:da:2e:9b:0b:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:26:10:87:61:2F:8F:D1:8D:E2:69:33:D0:72:E7:1C:37:2E:BC:3F
X509v3 Authority Key Identifier:
keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:39:47:e3:d2:6d:5b:26:09:28:e5:2d:9b:e4:8f:40:e8:8e:
8c:72:ca:f3:74:23:b1:cc:ce:18:07:36:19:5f:9e:de:df:25:
9f:32:42:9d:21:05:e0:5c:80:f8:10:0a:d4:fa:da:5d:37:82:
c1:fe:8f:1d:3a:b5:7b:ae:ef:1e:f0:4f:7e:2d:1a:69:3e:18:
28:22:f0:d0:b5:0c:94:41:fa:c6:76:a9:45:ca:a1:3c:7f:b7:
2a:8f:70:b7:fb:d8:38:8b:d1:d6:3a:09:d5:f7:dd:15:71:fa:
11:c3:30:41:1c:32:eb:af:69:65:71:92:98:48:de:45:f9:b7:
44:b7:99:af:86:83:b3:7e:f2:af:5c:e6:7d:b8:7c:06:69:73:
38:99:17:48:4c:4b:b6:a0:c1:9f:dc:a9:8b:71:a6:fc:19:cc:
d0:c8:36:7f:09:43:68:3a:fe:c0:57:81:af:d1:8d:59:1a:da:
3a:9f:ac:27:56:5d:ed:32:85:8e:77:38:05:d7:0e:ac:f7:90:
95:83:da:95:3b:6d:6f:86:16:3f:eb:31:cc:aa:44:27:0d:97:
64:66:d8:4b:68:9e:c3:b7:77:b3:04:2d:88:c7:b7:37:99:0d:
03:6f:fb:d3:e7:95:f7:a9:d7:a1:b4:aa:5d:61:b9:81:4a:4d:
c4:ee:19:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:53:52 2025 by rpki-client