
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File: 7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier: XehW3mGRSCb+Hdui6uER2LBsovu4QnfRnnLCtYc/t0I=
Subject key identifier: D1:5A:78:39:B1:C7:79:B8:03:A3:3A:C0:64:7E:52:1B:C5:0B:F0:9D
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial: 0199FB7CA301A7F6FD9EFEF997D1130A7655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number: 054F
Signing time: Sun 19 Oct 2025 08:01:13 +0000
Manifest this update: Sun 19 Oct 2025 08:01:13 +0000
Manifest next update: Mon 20 Oct 2025 08:01:13 +0000
Files and hashes: 1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: 3eW4noi+ThmmK6QvgT6hlAvOLyFu1lCtJ7Q8ILHmSS0=)
2: jO8_WTUfYU8WgAweNsy-XdM5HxE.roa (hash: DSCWbkkOzf+/qzK5D7cI20PP8IqsbGas6Mu8jntukrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a3:01:a7:f6:fd:9e:fe:f9:97:d1:13:0a:76:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
Validity
Not Before: Oct 19 08:01:13 2025 GMT
Not After : Oct 20 08:01:13 2025 GMT
Subject: CN=d15a7839b1c779b803a33ac0647e521bc50bf09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:07:f5:98:2e:eb:23:33:bc:38:1c:66:27:
cb:13:f0:31:a1:26:10:e1:6e:eb:45:d6:ad:c1:2f:
4c:9b:94:e5:45:d7:42:5d:c0:d5:e6:6a:b2:33:66:
e5:3c:94:c2:43:91:42:9a:f6:20:8b:fe:70:73:3a:
1b:8b:b4:25:c2:63:aa:39:7c:bb:7e:20:0d:bc:be:
f2:d9:b0:ea:15:e1:7e:42:31:80:97:11:1b:e0:c9:
83:85:51:6c:91:37:a7:ce:79:33:ff:02:e4:59:2c:
7b:fa:30:da:be:43:ce:41:12:c7:ee:3c:ed:cd:9a:
fc:62:39:68:8e:63:62:35:40:99:b2:2e:66:b8:a0:
f6:65:e9:88:62:0a:07:9a:e9:ca:bf:26:36:be:d6:
9a:fa:43:f3:01:5a:5a:42:5d:e3:c9:bb:c7:7c:9a:
6a:f6:3e:95:c9:24:a5:2c:87:6f:e3:1a:08:7e:35:
7c:cb:0f:b5:57:92:27:7b:57:21:92:e0:5c:a3:7f:
14:0c:65:7b:c1:d8:a3:95:74:90:c3:10:49:e7:f8:
88:b5:9d:53:fa:03:6b:9f:60:bd:a8:3d:95:bc:78:
26:ba:7a:78:60:94:be:d6:49:36:99:43:e6:14:84:
8f:e6:29:c6:1b:ce:76:40:9f:6f:f1:6e:f6:66:5e:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5A:78:39:B1:C7:79:B8:03:A3:3A:C0:64:7E:52:1B:C5:0B:F0:9D
X509v3 Authority Key Identifier:
keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a8:36:01:2e:81:f2:b8:4d:43:49:d1:09:40:9d:02:fd:0b:
b3:67:64:3d:dd:0f:8c:b7:a7:5a:f0:0c:9c:9c:3e:fc:fd:7a:
e5:e9:4d:69:11:dc:99:d6:a9:89:6d:9d:fc:b2:e1:34:a8:19:
3d:f2:89:4a:bb:43:30:fe:db:94:29:b7:0f:08:98:ec:f6:ba:
1b:07:19:b5:37:4b:9e:54:04:16:58:67:a9:a9:6c:2f:f7:a9:
84:df:9f:e0:54:d5:71:c2:fb:d0:84:98:7e:6b:a3:a1:73:69:
40:c0:bc:91:0a:fa:a3:6d:8f:5e:4b:4f:ff:39:08:56:21:99:
8f:16:7b:de:73:91:1c:63:c8:d7:8a:6a:17:fb:df:53:a9:2f:
8c:4e:35:7e:93:bb:2a:c5:5d:3e:be:85:20:61:d4:66:3d:8f:
32:3e:ee:00:6f:66:27:26:13:6a:9f:8d:b3:ce:7e:0c:d7:0d:
50:c9:f3:a0:6d:75:73:95:fb:a8:3f:31:fc:31:2e:44:09:31:
22:42:2c:7f:fe:12:73:bf:8b:15:f6:ad:94:6e:36:14:f1:a5:
40:b0:68:83:13:e4:8e:b2:c2:02:40:54:4b:40:4b:45:35:e8:
1c:1b:85:33:45:8d:b9:42:7b:1b:77:be:1c:1d:ec:47:97:30:
32:8f:6e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:05 2025 by rpki-client