Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
File: 7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json)
Hash identifier: yyw/Rrnckf0/2DzvR5WGXl74ypx/BNczls7jlibunMA=
Subject key identifier: AD:89:72:B7:11:23:B6:59:C0:B4:4D:82:3C:4B:A5:9D:9D:D1:EE:2F
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Certificate issuer: /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial: 0199FC58EDEE5B6FFE6461A901D66D84A453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 12:01:50 +0000
Manifest this update: Sun 19 Oct 2025 12:01:50 +0000
Manifest next update: Mon 20 Oct 2025 12:01:50 +0000
Files and hashes: 1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: G8c9hLZtAa0hqxaV9dBfnONSinOU2ZDDjRCRQU/C2UQ=)
2: ZMaLoOweTuOcv_nvUbVyQTqS1mc.roa (hash: NcJ71xMcWOHUOX+wLT3smK9g9a6MiR/wNPSYjOJtrKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ed:ee:5b:6f:fe:64:61:a9:01:d6:6d:84:a4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Validity
Not Before: Oct 19 12:01:50 2025 GMT
Not After : Oct 20 12:01:50 2025 GMT
Subject: CN=ad8972b71123b659c0b44d823c4ba59d9dd1ee2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f6:cb:77:98:f3:bb:13:d5:51:db:54:94:90:
e3:39:e6:56:05:f2:fb:ef:c4:5c:95:28:a1:b8:51:
de:8b:9b:04:dd:b5:4e:49:47:68:3f:ad:f5:45:aa:
dd:5a:53:db:bc:19:9d:41:b0:f2:0e:8e:81:49:54:
0d:d0:59:39:e3:15:4c:03:d7:a8:5a:ff:9f:bf:1c:
85:55:aa:54:a3:73:cd:a6:49:0c:24:41:b9:0a:4f:
b9:b1:10:52:bd:be:95:97:b2:4b:f0:43:12:8d:1d:
d8:79:bf:3e:20:fb:d8:9a:30:81:41:3e:9c:2d:6a:
9f:d1:a7:71:f3:3a:10:15:37:91:01:4f:ca:55:ba:
2f:a5:56:53:e8:a8:31:79:65:82:51:79:2b:00:6b:
01:6b:cb:2a:16:89:01:26:80:8f:5c:9a:f8:f6:cc:
4a:f9:44:3c:98:f6:d3:21:d8:1a:69:dc:b8:e7:30:
40:3d:30:7e:25:54:52:21:d4:a9:28:5e:b9:42:6b:
a6:0d:3b:20:76:08:e7:e8:a1:9b:2a:14:39:7f:bf:
10:e9:5a:f8:fe:01:ae:b0:1d:b3:7f:c3:30:28:a4:
51:67:14:f4:46:2f:d2:bf:48:5a:93:2e:f1:17:15:
8b:8c:ba:f2:67:91:1b:ad:5b:f9:1e:6d:42:a4:af:
46:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:89:72:B7:11:23:B6:59:C0:B4:4D:82:3C:4B:A5:9D:9D:D1:EE:2F
X509v3 Authority Key Identifier:
keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:af:b6:ae:3d:7e:d9:29:d0:ec:17:69:5f:d7:95:71:53:cb:
0c:19:ee:99:14:65:88:3f:2c:d4:27:5d:a7:75:1e:6b:35:86:
2b:4f:02:86:44:e0:ac:e4:d6:0e:47:a1:66:fc:97:a0:06:6a:
ae:fc:9e:15:1b:8d:4c:82:63:d3:0f:b8:52:c1:88:b6:c5:ce:
d3:e9:97:69:23:28:77:63:f5:b1:d8:a9:37:b8:f7:8e:30:16:
6f:ab:4a:21:13:93:c9:cb:d8:45:94:b0:34:b8:cb:ae:4d:2a:
d0:92:68:3e:c1:ff:2c:1d:ac:d8:b2:a7:e0:6b:7e:c2:eb:b6:
09:c1:51:6c:aa:05:ec:b4:55:74:7f:a1:f7:1e:7e:1c:e1:82:
2c:5d:90:43:cc:78:60:ed:a4:c9:c1:2d:d2:78:d9:5f:6b:3c:
92:41:ed:16:a6:89:a3:8f:81:61:9a:dc:3e:2d:07:0d:1e:0e:
06:9c:67:14:eb:f4:9b:f0:ee:1c:94:98:0f:b5:16:ef:21:dc:
d3:27:7c:39:d1:30:34:02:9c:1c:89:91:fd:3f:7c:51:66:85:
06:87:78:d6:95:87:a7:b5:a6:59:12:ae:a4:26:0b:be:56:e3:
9c:88:24:96:14:1e:02:f0:f6:95:87:a3:59:7d:85:56:8c:17:
ec:47:5f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:01 2025 by rpki-client