Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft (raw, json)
Hash identifier: zIHPHOBz53B+fOCvTyRP8zY3iPvS2FSgFjJDln//gWc=
Subject key identifier: F7:83:9E:64:AB:73:CA:79:DD:1E:63:47:FE:AB:D5:17:05:7F:09:46
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Certificate issuer: /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial: 0199FD6B11A666FBA435ADBBA30C19330D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
Manifest number: 0BB8
Signing time: Sun 19 Oct 2025 17:01:16 +0000
Manifest this update: Sun 19 Oct 2025 17:01:16 +0000
Manifest next update: Mon 20 Oct 2025 17:01:16 +0000
Files and hashes: 1: cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl (hash: Ln7HNueDMbJkIcvA9gRzLSK9h6RqMgYDtWzCYhQnTWw=)
2: wdIm1qCd0ObJ1xyB5TPQkFaC0YA.roa (hash: oOyNKTQaCSCE6Wpivc9w4AbPACJjW6ReZk27bCRwMBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:11:a6:66:fb:a4:35:ad:bb:a3:0c:19:33:0d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
Validity
Not Before: Oct 19 17:01:16 2025 GMT
Not After : Oct 20 17:01:16 2025 GMT
Subject: CN=f7839e64ab73ca79dd1e6347feabd517057f0946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:7a:95:2f:ae:1c:87:7f:f9:4e:e4:a3:1d:
55:14:49:40:97:35:63:26:2e:72:1d:15:6f:74:c7:
60:57:df:2d:3c:8e:ff:5a:83:dd:f3:bf:86:94:02:
e3:36:5b:9c:0a:d2:08:19:63:eb:cc:c7:92:57:e2:
3b:39:ef:ba:e0:82:1d:b3:9f:a6:98:6c:65:8b:5c:
df:06:f5:ec:16:01:84:63:32:4b:c7:bb:dc:1c:cd:
9d:64:08:86:b3:e0:de:18:68:ee:ea:fd:01:4a:a9:
59:b4:bc:50:96:b4:cd:94:ef:58:a3:5f:6e:12:03:
6a:11:ae:65:08:97:7f:e7:32:d1:6e:69:3e:f8:16:
12:68:b3:37:ad:82:47:6c:3e:ff:0e:5d:62:87:f4:
bd:1e:24:ce:b9:2e:7c:03:24:d3:22:3d:0c:11:5b:
c2:ca:d0:01:ca:7d:42:9c:3c:02:59:a0:75:79:86:
4a:db:0d:e5:02:6c:a9:55:0b:77:5c:e0:1b:97:a7:
a1:fd:74:02:26:27:1b:02:b0:61:14:d0:dd:73:c4:
30:c5:af:6c:75:4f:83:f9:5e:42:05:e5:2f:2c:00:
85:26:c7:62:43:fc:e0:5e:97:af:6b:96:20:b6:07:
0b:cd:c1:c4:3e:8d:86:9a:04:e3:a8:d2:18:06:65:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:83:9E:64:AB:73:CA:79:DD:1E:63:47:FE:AB:D5:17:05:7F:09:46
X509v3 Authority Key Identifier:
keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e5:1b:b2:9e:a8:e0:84:65:8a:98:fb:bf:a8:53:60:83:6b:
3a:a2:81:e1:09:77:1e:6e:2d:fa:bd:79:ce:9a:95:70:35:8e:
6b:b3:91:16:cd:b0:ed:4b:24:9c:66:94:2c:fc:08:6e:77:17:
c4:80:e3:dd:16:b6:6d:74:31:c4:f2:af:ac:08:7d:c9:d3:98:
a2:42:49:f5:dd:75:b2:92:c6:4f:5e:6e:7a:a8:7c:dc:03:bc:
8a:71:8b:60:2d:72:fc:30:fd:51:c8:c6:20:6e:33:99:00:1e:
00:c8:ba:47:c6:a6:3d:3d:5a:55:bb:60:31:f5:bb:39:9e:ea:
9a:ac:d9:03:45:da:07:30:55:4b:08:87:c8:70:32:ee:32:e6:
de:2b:8d:d0:a6:8b:0d:dd:ae:d9:ff:1a:8f:95:81:c8:22:cf:
78:15:2b:f1:b0:28:6d:17:9c:ab:57:f2:6f:e0:6a:96:19:a6:
17:82:dc:94:1e:62:1d:ca:00:a5:2a:f7:75:72:a6:7b:66:60:
68:c1:3e:4a:e1:9e:d6:6e:7d:f5:92:35:73:fa:de:66:f4:7c:
ce:0d:76:9d:bf:75:d8:5c:fe:66:0d:f3:3d:ca:4b:6f:49:15:
5e:a4:04:ec:74:54:e3:39:df:6b:ea:7f:3f:7a:34:22:e1:f4:
55:32:f4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:30 2025 by rpki-client