Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
File: 7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json)
Hash identifier: CcQwrITTAMfgp8MJw2T++aDnTBFANulz/8D1jvoOCCw=
Subject key identifier: DD:3D:11:88:E6:79:D7:4B:3B:AB:1F:8A:B4:A4:A5:8F:16:EE:58:4A
Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
Certificate issuer: /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Certificate serial: 0199FB7C7F30783C9755D3F5343FA50D260E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
Manifest number: 1102
Signing time: Sun 19 Oct 2025 08:01:04 +0000
Manifest this update: Sun 19 Oct 2025 08:01:04 +0000
Manifest next update: Mon 20 Oct 2025 08:01:04 +0000
Files and hashes: 1: 0YnoXFsLC3L8LFSSyo3TEM6ihxM.roa (hash: 1mt7G/fO9VBU7/suzQGIUYMupKdv6yImTUBwyXrv1sk=)
2: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: HvCLg94HZHXv3ApSGHJhRMSrxM49SS1wXKMdfH8/hP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7f:30:78:3c:97:55:d3:f5:34:3f:a5:0d:26:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Validity
Not Before: Oct 19 08:01:04 2025 GMT
Not After : Oct 20 08:01:04 2025 GMT
Subject: CN=dd3d1188e679d74b3bab1f8ab4a4a58f16ee584a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d0:3d:0a:8c:94:70:27:01:c6:52:c9:ba:5d:
0f:49:de:2b:1f:c9:d2:74:33:be:9a:bd:89:23:20:
0a:e4:3f:d9:81:f1:8b:ff:d0:91:de:95:51:36:19:
15:9f:d0:4c:2f:c2:9d:1e:71:86:71:77:83:b6:27:
63:7a:e9:70:62:38:cc:32:13:c3:b9:c0:1b:ae:8c:
e5:85:1c:e0:2f:bf:08:61:b5:cd:ba:a0:c0:38:33:
da:9c:3c:f5:0f:be:82:f6:c2:30:1c:a3:cb:f5:45:
b8:1d:9f:9f:b5:4d:b0:0f:e0:aa:57:81:f7:f0:e4:
f7:3a:52:69:f2:bf:3d:81:a9:e5:a8:32:8e:17:cc:
6f:27:70:aa:61:bb:70:6e:8c:e2:c2:34:2c:51:89:
12:68:86:6f:86:c2:a4:b4:66:9c:83:04:8d:95:1c:
e1:95:e1:b5:48:a0:1c:a5:d7:7c:d0:8a:c1:dc:9b:
4c:38:b7:d5:fc:12:58:b8:5c:64:1c:c9:f5:af:e2:
e9:d3:62:62:2c:74:bc:6d:3d:8d:66:8b:6b:cd:7b:
61:da:87:45:22:11:37:db:81:b3:ea:12:70:05:a7:
38:22:5f:e7:0e:cf:35:dc:33:04:c6:4d:86:1e:48:
79:0e:dc:89:e6:2b:db:c9:a6:1f:bf:c3:50:ae:d8:
83:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3D:11:88:E6:79:D7:4B:3B:AB:1F:8A:B4:A4:A5:8F:16:EE:58:4A
X509v3 Authority Key Identifier:
keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ee:68:cc:a1:60:50:66:90:92:95:5f:e4:c0:16:83:e6:6f:
62:55:d4:f2:2b:7f:cb:f3:58:f0:8e:e7:74:4c:a0:d7:27:e1:
36:21:cf:0b:3a:ce:fd:0c:46:a1:a5:40:f4:54:d0:6e:0d:96:
4e:2a:90:71:01:50:fa:1c:70:f5:c3:db:f8:fd:b5:b4:64:01:
06:19:2e:05:49:b9:3e:82:66:5f:89:e8:27:1a:b1:96:13:87:
4d:ed:c7:ee:31:45:c7:2f:15:56:46:a8:93:29:20:50:1c:f4:
ab:72:29:6a:ab:5b:df:d4:f9:a2:3e:ce:c6:58:a5:fc:52:f0:
6f:15:04:3e:44:4c:8d:c5:65:9a:78:f5:b4:07:c2:1d:4f:58:
ef:84:ea:29:47:9f:b0:37:97:a8:f7:03:9d:7d:7e:ef:98:d9:
42:06:4e:d4:c0:a8:76:94:f9:3e:22:86:6b:bc:72:af:f3:3f:
b9:39:f9:7c:65:f4:e4:80:49:10:7e:80:2b:85:e6:91:7b:b1:
f5:91:10:7f:0f:2c:b6:0b:9b:de:c6:48:18:23:af:dc:4a:7c:
cb:95:af:d9:64:6d:43:c3:69:1f:75:40:c6:68:ba:a6:49:fd:
16:78:20:55:34:50:5e:59:7e:58:84:49:d6:34:9c:f2:13:d1:
a3:55:f6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:55 2025 by rpki-client