Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
File: t7wa3782Jkj8Y1wzMvODvLwB53Q.mft (raw, json)
Hash identifier: 44qouVJ4Eegxaa4qu05Lb852IiHMmyMJOel2TCizwuU=
Subject key identifier: F0:3A:4C:A8:B0:8C:A0:B0:89:AF:FE:71:9E:99:FB:91:74:21:30:6A
Authority key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
Certificate issuer: /CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Certificate serial: 0199FF22DE9B0313C76F8F318D8849E07787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 01:01:39 +0000
Manifest this update: Mon 20 Oct 2025 01:01:39 +0000
Manifest next update: Tue 21 Oct 2025 01:01:39 +0000
Files and hashes: 1: 696z34QMsC6_vR7KEfwUSvQdpWY.roa (hash: yNhDUKimDD5hTy/VhafEDO3vPLqIP7iVfa9gPXqtn9I=)
2: t7wa3782Jkj8Y1wzMvODvLwB53Q.crl (hash: qTWac8Aomu8WV9mLWl9RU8G4Tnai+OxgeBFwdeBkW9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:de:9b:03:13:c7:6f:8f:31:8d:88:49:e0:77:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Validity
Not Before: Oct 20 01:01:39 2025 GMT
Not After : Oct 21 01:01:39 2025 GMT
Subject: CN=f03a4ca8b08ca0b089affe719e99fb917421306a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:b5:a0:5c:d9:2d:d1:77:8b:fd:16:95:13:
03:2c:2a:bb:ff:f5:4f:10:32:3d:a7:a7:7c:be:b0:
cd:65:4e:3a:59:0b:d5:72:6c:e9:7f:56:e0:85:11:
be:d2:97:a2:0d:92:81:63:6d:09:57:f4:4e:9f:04:
4f:a4:8c:6f:44:08:89:f0:03:c5:41:f6:23:63:bb:
cb:15:b4:fe:1a:4b:44:e0:68:fa:cb:80:c0:aa:f1:
27:af:94:a4:40:6a:71:63:83:6b:ad:c3:05:9d:5f:
42:66:a1:5d:48:38:d3:15:cd:4a:4d:96:74:e1:16:
29:ba:53:7d:75:04:cb:56:70:a1:d5:9b:8f:a5:f3:
83:41:1e:92:06:d8:3c:7c:66:c7:fa:6e:8b:7e:69:
a6:a4:1a:bf:7b:95:9b:87:d9:40:3f:6b:4c:b7:33:
92:5f:ff:c3:c1:85:b3:14:73:87:73:34:76:fb:26:
f2:6a:8e:9b:85:6e:8e:24:bb:a7:c0:a7:67:fd:c2:
10:8e:b9:b3:71:af:32:94:cb:c5:f3:27:e3:dd:2f:
85:cd:e6:9e:df:aa:a1:4a:10:90:4d:80:e9:56:9a:
c0:4d:1d:79:36:98:db:c8:73:a5:95:ff:97:fc:7a:
f3:94:b3:c6:a3:99:74:61:cb:3e:e0:b0:6d:01:bb:
71:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3A:4C:A8:B0:8C:A0:B0:89:AF:FE:71:9E:99:FB:91:74:21:30:6A
X509v3 Authority Key Identifier:
keyid:B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b3:27:ab:25:ef:c1:33:b9:bd:9d:3e:98:28:59:64:f5:96:
14:21:fe:dc:32:2a:1c:49:76:0e:e9:19:28:c2:2c:c3:86:a6:
36:7a:69:c5:9f:d8:1d:0b:ae:26:3b:51:3b:af:bd:ac:5f:ac:
eb:67:01:a3:23:3a:f2:94:5a:83:29:76:72:16:f0:0f:07:19:
b2:e4:f2:fa:04:72:d1:3c:c6:61:b8:ab:01:e5:96:42:2e:b4:
8d:5f:d4:4a:0d:16:77:a2:a3:8a:b0:62:b1:04:7c:1d:7a:9a:
42:23:63:4e:19:9a:6f:a9:a1:a6:5c:16:72:84:f6:ee:06:d7:
5f:70:f0:64:22:9c:a5:23:de:fa:c9:8c:73:6b:eb:0e:07:b2:
f9:cd:ca:31:87:d5:9b:79:86:ee:7f:cd:b5:fa:e3:e8:68:a1:
a5:61:38:d9:6b:bb:dd:55:7b:e2:9d:e0:7e:72:ac:86:2d:63:
d1:d9:68:1e:d2:9b:19:dc:69:bb:1f:42:7b:bc:12:d0:8c:3a:
c6:98:20:77:8e:4d:4b:06:1c:f0:40:d5:04:a6:c8:9f:3a:b7:
97:ae:d9:0a:8e:73:5d:a3:b1:a4:42:8f:9e:54:d7:fd:68:9d:
20:df:63:7b:ee:ba:36:43:81:e0:11:d1:ef:64:50:d2:91:36:
fe:50:71:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:42:36 2025 by rpki-client