Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
File: i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json)
Hash identifier: eSiEUfGFUFqFGAWkLq+PgTwstIeIOexpCpHzCQt5cgA=
Subject key identifier: 6D:BC:70:28:57:1F:5B:99:21:BA:62:B3:76:A0:0A:9E:FC:CE:9A:01
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Certificate issuer: /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial: 0199FBEABC3D76A6ACC6F7CA0AE579A0FD0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
Manifest number: 0907
Signing time: Sun 19 Oct 2025 10:01:28 +0000
Manifest this update: Sun 19 Oct 2025 10:01:28 +0000
Manifest next update: Mon 20 Oct 2025 10:01:28 +0000
Files and hashes: 1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: SnKHTBTDo+0gWL/wRON1bHXBb1Hf2lyKdIePo94K0AU=)
2: kpL1mBA7PiBUtfdmw6AVzfdGe84.roa (hash: X1ZTIcXTz0jbHRbURZ6ZK36qgjM4K05EqBeOsJvnW6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:bc:3d:76:a6:ac:c6:f7:ca:0a:e5:79:a0:fd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Validity
Not Before: Oct 19 10:01:28 2025 GMT
Not After : Oct 20 10:01:28 2025 GMT
Subject: CN=6dbc7028571f5b9921ba62b376a00a9efcce9a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:39:43:07:e6:ee:e3:e0:15:b9:65:23:e9:
88:25:4d:f3:6d:6b:e9:f6:e8:41:88:97:98:64:1d:
48:99:72:a2:21:bd:47:bd:d7:89:a5:4d:33:8c:b4:
5b:b1:ce:d7:b5:88:3b:7e:1f:3a:44:10:e9:f4:39:
38:b8:6a:f6:d7:ef:1a:45:3f:96:e8:d7:0e:25:24:
4b:84:63:25:33:bd:b7:34:9a:03:66:6e:c7:82:d8:
f0:b6:0c:07:e6:48:d4:d1:71:19:05:06:c8:f2:e4:
49:c8:c0:d6:54:9c:dd:e6:40:e4:65:02:2a:0a:eb:
d9:b6:84:e7:9b:09:b2:b9:21:ef:ca:f0:5c:ec:8a:
94:5e:e4:70:0a:d7:8a:ff:f8:d9:ef:59:e2:a0:e8:
22:f1:5a:87:f3:35:6d:5d:a1:26:f4:17:6e:fb:a3:
c2:0e:84:ae:3b:22:d6:de:85:86:55:33:d4:6d:f5:
69:59:13:3c:74:bf:c3:6b:c8:10:ab:30:a8:1d:e9:
c1:b2:14:32:4e:1a:27:93:19:03:33:28:ee:20:d9:
b6:eb:2e:32:46:06:8e:c4:3b:e7:cc:ca:fd:26:c6:
d7:6e:08:39:9c:c3:83:d2:bb:7c:ac:49:de:45:e3:
a5:e9:28:09:bf:2e:7b:6a:9e:8a:92:df:8a:f3:2f:
f2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:BC:70:28:57:1F:5B:99:21:BA:62:B3:76:A0:0A:9E:FC:CE:9A:01
X509v3 Authority Key Identifier:
keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e2:b1:c0:75:f8:d9:aa:b7:eb:05:48:34:8f:13:c8:2b:ba:
5a:28:e0:b2:32:d6:8a:1e:4d:9a:5f:e6:5c:4e:0f:ab:be:f8:
7e:0a:bc:da:27:96:29:7d:cc:88:2e:97:28:ba:b5:f9:5e:2e:
52:59:af:2f:e2:ae:b0:3e:99:6f:56:ab:e0:ce:d5:09:68:82:
bb:b4:ec:25:55:0b:7d:56:2a:e8:d8:20:86:44:f4:33:7e:d2:
82:bf:0d:f7:42:3a:46:c0:6d:dc:ff:85:03:bc:34:82:8b:c5:
cf:0c:99:0e:33:59:01:7d:97:5b:8e:c7:8a:67:e6:63:2b:a8:
5e:38:10:65:0f:82:58:f3:47:9b:e5:46:4a:79:6f:9c:6e:a1:
98:a2:86:75:29:e4:2b:2e:16:61:f9:d6:5a:f6:56:ec:58:0c:
c4:47:08:8b:0a:df:c4:3b:83:35:c8:8e:f6:2c:88:be:5c:53:
13:f6:cc:5f:a1:0e:8d:70:c4:63:c7:36:01:19:e7:d9:82:91:
d5:c7:50:f9:34:a6:40:14:93:95:de:88:48:be:29:47:69:9c:
14:9b:75:e1:2a:c1:14:b5:ea:0f:f9:9c:06:8c:c3:83:dc:07:
15:92:df:63:4a:05:31:d9:04:da:ee:60:0e:a6:f6:f3:ee:83:
e6:ba:c9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:41 2025 by rpki-client