Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: YAOfGTr+AIY7bJusJtEfuJEiv+prTGGDfe0gbP6wTpI=
Subject key identifier: 9B:77:87:83:CD:67:CE:FC:0C:B7:BB:D3:06:3D:86:A5:0E:5D:FD:C2
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 0199FCC69380E3EE43A56EF85BBDE13926ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 0EB7
Signing time: Sun 19 Oct 2025 14:01:36 +0000
Manifest this update: Sun 19 Oct 2025 14:01:36 +0000
Manifest next update: Mon 20 Oct 2025 14:01:36 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: xfgYTjTGcBkX5iEC24TSt3A29TLVGxFkE0QDEd1hA7s=)
2: LW4-Oe35V5eJKzg68ztfFqGhSFg.roa (hash: D73s/rG3IJUbtI4RHRwuGNv/eWQmd3ddtUaorKL1EVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:93:80:e3:ee:43:a5:6e:f8:5b:bd:e1:39:26:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Oct 19 14:01:36 2025 GMT
Not After : Oct 20 14:01:36 2025 GMT
Subject: CN=9b778783cd67cefc0cb7bbd3063d86a50e5dfdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5a:a7:15:a1:fb:bf:c5:e3:89:7d:63:67:3a:
e4:2d:44:be:3e:c8:7a:da:0b:f2:71:b8:b9:e3:82:
42:51:7e:15:3b:04:1f:39:ed:a8:89:0f:5e:fe:7b:
ec:51:6b:c1:e3:94:0d:62:0a:4a:a0:71:41:5f:da:
a3:2d:d3:30:ae:a7:dc:78:4c:8c:ee:61:b7:b3:dd:
8d:bc:87:77:fd:8c:6b:2e:bc:cd:5a:82:2f:3b:46:
5a:62:83:a4:c8:4a:e8:15:d6:4f:95:35:a1:60:c1:
01:cc:3f:91:0e:d8:98:8b:3c:e0:f0:c7:46:4a:80:
e0:5f:bb:27:cd:31:6f:02:8f:ba:f7:85:ea:b0:ad:
dd:c6:b3:c8:eb:45:ad:d2:e0:e5:41:d4:9f:9c:32:
52:c5:f0:34:a7:16:8a:c1:24:5f:ce:65:db:0a:ac:
e2:1e:72:e4:bd:08:c9:e5:95:60:68:6f:a5:ca:0f:
53:6f:ab:13:24:e4:c4:4d:0b:84:e2:71:42:9b:d7:
d0:d2:f3:1e:2f:2f:06:30:37:e3:f8:9b:e2:f1:dc:
3e:f9:13:76:9e:de:2e:fa:d9:69:f9:53:05:35:6c:
50:41:1c:6d:82:44:a6:dd:b9:f6:d5:b9:29:d5:7f:
67:6f:4b:6a:72:38:fd:9c:e3:9d:22:61:c5:71:e2:
e4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:77:87:83:CD:67:CE:FC:0C:B7:BB:D3:06:3D:86:A5:0E:5D:FD:C2
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2e:b3:ec:22:d1:16:5f:e6:91:e9:5c:64:7a:89:18:95:c6:
ad:77:25:52:42:1e:d8:37:dd:8c:b5:2c:25:71:56:8e:b5:ca:
d5:b2:e0:ec:3c:5e:05:d9:d8:73:84:ea:9e:9d:cb:a5:24:18:
63:c6:ee:ec:73:e2:29:ff:1a:dc:c7:e5:c1:59:9f:91:06:0b:
88:d6:4b:58:29:95:e7:0f:27:03:da:2b:c0:34:c8:22:37:06:
1b:1d:08:92:7c:48:f1:fa:1f:48:8b:2b:68:ec:36:c3:14:9f:
80:32:ac:c3:e3:ed:40:f0:a4:8d:9c:b8:14:03:41:73:7a:d8:
e6:62:9b:4f:78:ef:dc:d6:4c:97:25:ae:3e:6b:8e:f9:ed:73:
04:2f:ad:ff:f4:70:d7:a6:9b:0c:7d:27:57:6b:f8:07:17:5b:
2a:59:cb:fc:95:b4:8d:2c:d1:a8:49:e3:25:1e:97:84:fa:7d:
74:ff:9f:3d:b0:82:6d:b2:02:14:ad:62:8f:0f:c4:b6:a7:b0:
93:98:1a:32:f6:3a:ce:53:f9:e5:a3:5d:e6:e1:c4:be:17:fd:
1a:4d:24:45:ad:7f:1f:b4:2d:39:2a:43:0c:ea:00:9f:63:08:
58:9f:f2:14:c7:a4:81:7c:59:b7:b4:4b:e5:2e:24:e3:4a:bf:
eb:0f:3c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:52 2025 by rpki-client