Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
File: 7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft (raw, json)
Hash identifier: lrKf1d13XSzPk+ejFp/KBF0LGhVHbiNTHFYYnwbcFbw=
Subject key identifier: 1F:34:B4:EC:85:FB:43:F1:8A:4D:70:A2:1F:EA:2C:E8:AF:1D:6E:7C
Authority key identifier: ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97
Certificate issuer: /CN=edd482c2bee8460048d82902cec9867205222997
Certificate serial: 0199FBEAA174C700AA68ADDCC294CB4CD34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: 7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl (hash: LvTSKbeHeQxyEPp6gOFFWqpuU97Wl562fBau9IAjoEE=)
2: oXNlY-oBhR7dTf9pZaxVV6POHQg.roa (hash: K1qaC6BRPPJv+auFKCvtZX9lIT9BoIVDnlW+2EVLt0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a1:74:c7:00:aa:68:ad:dc:c2:94:cb:4c:d3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd482c2bee8460048d82902cec9867205222997
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=1f34b4ec85fb43f18a4d70a21fea2ce8af1d6e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:72:5e:a4:59:04:f8:38:83:3a:c6:9b:05:
a5:29:f7:c6:1a:54:8e:6b:22:2a:8b:c9:b8:02:0d:
24:88:c8:e3:70:54:ea:3f:76:88:e2:96:19:e9:75:
43:31:9b:a8:2e:0e:10:ff:62:8d:c5:c4:28:5c:17:
bb:a3:c5:37:c4:c9:14:37:47:c5:cd:d4:c3:ae:35:
c1:20:7a:b9:ea:a6:27:f0:b6:71:19:f6:50:1b:29:
0c:cb:cd:8e:76:55:16:64:5f:d8:58:6f:e7:1c:15:
6c:64:6c:b9:db:45:31:a7:21:07:01:a0:bd:33:e4:
06:e1:7e:79:be:61:7a:df:86:91:bc:11:d4:1c:33:
38:da:cd:8b:4b:76:23:71:95:3f:f4:32:4a:6b:70:
bf:b0:52:94:13:12:d1:e5:d1:56:4c:4c:f5:2b:cf:
22:dc:ef:8d:ae:40:c9:c0:61:19:9c:f4:31:23:ba:
ed:35:b6:db:d2:37:2e:24:3b:d1:d1:0f:0d:15:24:
d7:06:cf:01:1e:10:01:d5:f0:30:b9:43:db:13:96:
c7:3e:b8:10:b3:a6:6c:68:e4:96:e9:27:c4:27:ea:
cb:83:6e:66:07:d5:9d:81:7b:1d:05:b2:0a:e9:d9:
fd:17:8d:e6:81:ec:07:b3:62:66:f0:ef:b4:26:89:
88:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:34:B4:EC:85:FB:43:F1:8A:4D:70:A2:1F:EA:2C:E8:AF:1D:6E:7C
X509v3 Authority Key Identifier:
keyid:ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1b:cd:59:56:33:83:17:29:03:22:25:74:18:2a:43:ac:c2:
d1:46:2f:cd:6a:39:85:6f:68:42:af:25:f3:01:82:de:86:5e:
b9:8e:7a:aa:66:28:49:09:52:16:6c:11:c3:1d:aa:67:3d:dd:
f4:1a:9c:67:9c:64:13:26:51:16:db:be:45:33:c5:cf:b7:e6:
e2:e3:b5:47:a8:9b:a8:75:e2:34:09:13:21:9a:1e:89:2a:77:
25:02:9f:9c:67:8c:fc:33:ab:e3:44:67:cc:0a:71:93:91:cf:
81:bc:84:e0:ea:9e:4f:05:9f:8f:8a:3e:b5:32:87:29:9b:fd:
39:05:ac:89:1d:88:4a:cf:4d:81:fd:bb:76:ce:23:4c:6c:cc:
5f:75:b1:4c:3d:14:a2:ef:d7:ab:9f:48:8b:f9:cb:0b:d1:4b:
26:0f:ce:bc:2b:3d:e7:be:64:65:30:5f:ad:cb:52:bd:4d:d9:
5d:8f:00:12:f6:2e:ab:6d:18:f3:d5:10:fe:8f:0d:3f:fb:2e:
9d:8e:7b:cb:16:40:89:49:f6:7f:84:33:7e:03:9a:60:c7:37:
07:24:27:08:1a:39:ab:27:73:18:14:fc:86:8c:12:23:29:10:
e0:d5:26:0a:54:86:f8:b2:b8:27:09:f7:93:4a:00:88:41:6a:
e0:9a:f8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:01 2025 by rpki-client