Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
File: 7UZMdsAZSPh-BOL8X1FnArOQdFY.mft (raw, json)
Hash identifier: VqVBF8kFWlT7ObSFZbISvkdgwZIix2d1yCUUztxJ3ZE=
Subject key identifier: 7A:21:FF:97:4D:93:CD:7F:F4:62:C0:19:A7:F6:D6:D9:9C:DA:30:FE
Authority key identifier: ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
Certificate issuer: /CN=ed464c76c01948f87e04e2fc5f516702b3907456
Certificate serial: 0199FB7CEFC8D44F62A8FBA4F4D7FBA93755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
Manifest number: 01E7
Signing time: Sun 19 Oct 2025 08:01:32 +0000
Manifest this update: Sun 19 Oct 2025 08:01:32 +0000
Manifest next update: Mon 20 Oct 2025 08:01:32 +0000
Files and hashes: 1: 7UZMdsAZSPh-BOL8X1FnArOQdFY.crl (hash: QwkKxJJhkscet2WqDFhhYGQ7H4wsqEaM7ytdfT5kTAE=)
2: Qd4xLNuf8FHve_ofdQYaBbYBiP0.roa (hash: 3fGg/QzwtWBuRFf4qS9VlLnxS+SRPgYbqGTG0ZfBI7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ef:c8:d4:4f:62:a8:fb:a4:f4:d7:fb:a9:37:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed464c76c01948f87e04e2fc5f516702b3907456
Validity
Not Before: Oct 19 08:01:32 2025 GMT
Not After : Oct 20 08:01:32 2025 GMT
Subject: CN=7a21ff974d93cd7ff462c019a7f6d6d99cda30fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:14:58:72:d5:76:0b:ba:10:06:de:e3:e5:
45:9c:87:7b:b3:aa:11:89:1a:7c:19:07:ad:f4:23:
0d:be:17:c8:7f:a6:86:5d:ac:10:98:23:96:2a:a0:
3b:78:db:0a:32:e3:cc:8d:7a:7f:75:95:4f:e4:98:
74:6f:f7:02:cf:e0:1f:85:cf:ba:62:8b:c6:97:ce:
72:d5:69:11:f3:4e:f0:86:cf:3e:8f:57:bd:2a:4a:
a2:bf:c1:8e:68:d5:8c:48:93:18:b3:53:89:ff:b4:
aa:3e:6f:e1:4b:a3:71:cf:0a:f7:f7:4d:a2:8d:7b:
70:7e:19:03:73:e7:31:40:2c:18:bb:5a:51:ae:d3:
68:c4:47:2a:67:bc:6d:e7:b4:ef:87:e7:42:24:f6:
32:0f:b5:32:70:32:41:de:ec:77:62:ea:60:47:03:
14:b5:b3:7d:4d:66:92:a5:51:06:06:f9:35:01:6e:
3a:ec:9b:d9:27:58:13:d7:f6:58:6e:3b:c4:c5:6b:
94:2e:5d:c5:d4:2f:4c:41:7e:b6:1b:97:78:d3:73:
6b:29:3c:f3:e8:8d:c1:0b:99:2e:f9:5b:1d:1a:5e:
41:6e:dc:83:0a:00:b4:0c:45:37:fe:be:96:07:fb:
9c:a5:fc:4d:9a:a2:43:b4:f6:96:8d:8e:c7:4e:16:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:21:FF:97:4D:93:CD:7F:F4:62:C0:19:A7:F6:D6:D9:9C:DA:30:FE
X509v3 Authority Key Identifier:
keyid:ED:46:4C:76:C0:19:48:F8:7E:04:E2:FC:5F:51:67:02:B3:90:74:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UZMdsAZSPh-BOL8X1FnArOQdFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/e4db50-746e-45f4-964d-3857ec5cb1db/1/7UZMdsAZSPh-BOL8X1FnArOQdFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:67:b3:10:de:df:0c:c2:ec:68:e6:ac:65:e1:46:2d:ba:22:
ca:fa:97:96:32:4b:29:3d:e2:bb:7c:d4:af:a5:4c:55:da:7e:
ab:19:80:13:9a:0a:e6:77:78:ec:b3:63:a8:03:07:eb:f2:0e:
2e:83:64:5c:22:30:f8:da:9b:a4:50:dd:04:6f:5e:44:3a:23:
3a:96:f1:c0:ce:f1:da:7f:42:2c:65:b3:92:4a:e7:5a:33:59:
50:6c:ce:b5:b0:e0:35:47:2d:f3:33:bc:4b:d1:0d:72:9f:2e:
f7:d7:83:05:07:73:c6:3b:38:24:96:ba:40:31:04:e4:a3:c1:
27:4f:74:ea:ea:4e:69:5c:af:c2:dd:d1:86:99:47:73:18:c7:
cb:81:9f:65:01:62:d1:e7:11:3b:02:ff:a2:8a:9c:f1:da:49:
aa:a4:9e:a9:d1:e6:14:c7:e3:0f:02:8e:1e:d9:19:78:cc:ac:
e5:d0:cd:ee:de:ed:78:64:2d:17:c6:8a:7a:37:f7:6a:f3:10:
49:3f:39:77:a8:9f:a6:8d:5c:cd:bc:df:ec:be:8b:4f:4a:4f:
6b:e2:4f:86:1e:14:7e:7b:d3:1b:65:a5:1d:11:ee:b2:f5:7a:
4f:c9:5d:6d:15:65:fc:fd:4a:e3:13:86:a3:78:68:cb:29:c4:
78:f3:67:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:19 2025 by rpki-client