Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: u5Irk+bE3StWFVpucCScukUQHVrrincDCyhCIMnqGbA=
Subject key identifier: 82:8A:57:13:66:84:CE:99:4D:55:BA:68:18:07:76:16:FE:14:8B:00
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 0199FB4614F21AACA307C4C8EBE91ACE10D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 07:01:38 +0000
Manifest this update: Sun 19 Oct 2025 07:01:38 +0000
Manifest next update: Mon 20 Oct 2025 07:01:38 +0000
Files and hashes: 1: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: lUPcbA81yRqYkWmFwDTjfg/n05F4UdPxbsBzlDJtzNM=)
2: y2IPmXUvA-hOkWs492ksc-DWCKQ.roa (hash: qKtRuRd69clPPsqawIh09HUba2GRDePDsao1bLap4SI=)
3: zrX35UZIaDQ7gsBizHdrkf-Nup0.roa (hash: YG/4j+fW6PNSItLJkk/6gbwhIYXjKk9jfgVFuX7jzdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:14:f2:1a:ac:a3:07:c4:c8:eb:e9:1a:ce:10:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Oct 19 07:01:38 2025 GMT
Not After : Oct 20 07:01:38 2025 GMT
Subject: CN=828a57136684ce994d55ba6818077616fe148b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:68:3b:f9:b6:f0:57:e7:67:5d:a6:01:7d:
ef:f3:ab:01:aa:c9:38:c8:9b:ea:8b:fe:2b:b9:46:
27:a5:81:23:79:0c:c0:46:0f:26:f6:05:bd:98:fa:
4a:82:64:ed:e9:5b:ca:46:47:ec:9e:a6:55:2e:d5:
6d:23:59:e2:c0:56:0f:7b:49:e6:19:0b:f2:f8:5d:
f7:80:d1:61:ef:6f:ca:fc:91:f7:7b:07:e1:bc:11:
8a:a4:33:e1:52:87:9a:2b:fe:7a:06:b6:51:89:f2:
da:06:da:f0:82:72:ae:16:87:4b:e7:c6:46:6e:80:
1f:fa:e9:d3:f8:7c:04:ff:79:8d:37:39:1a:ad:ed:
23:c1:ad:43:42:ef:3a:f7:bb:87:85:b0:bc:6a:a9:
d9:11:d7:3a:9e:fa:b4:93:57:21:85:63:6c:30:e3:
dc:72:34:7d:8b:53:ea:d5:41:e5:85:54:b8:0f:fb:
3f:67:f8:ab:ca:b9:b8:b0:43:bf:13:85:14:5b:ec:
35:72:f3:80:75:ed:29:88:c8:73:22:af:fb:45:db:
38:7a:57:ab:0c:20:de:63:6b:85:b6:3d:af:2e:32:
d7:1b:bc:86:68:6c:2c:83:cd:e0:e6:6c:c6:b9:a8:
00:56:af:21:fa:14:e4:e1:3d:fc:b0:b1:f6:55:91:
e2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8A:57:13:66:84:CE:99:4D:55:BA:68:18:07:76:16:FE:14:8B:00
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:c7:6d:47:b1:5f:74:be:b5:72:36:71:7d:07:05:03:75:2b:
37:bc:ca:57:85:44:59:c3:c5:09:59:e7:b9:f1:8a:ec:fa:db:
ca:4e:7e:6e:b3:c7:b8:4e:42:52:5f:00:e2:93:d3:7f:cf:c9:
ff:5a:29:a9:eb:90:11:26:b6:c1:f7:ec:c4:c4:8c:af:5a:57:
35:72:80:99:9b:a8:fe:71:86:71:62:c4:76:73:26:ad:15:e7:
1f:0b:5c:03:6a:96:26:b6:3b:25:89:7c:67:f4:d2:07:ea:f6:
61:7b:45:f2:76:dd:5e:94:8d:87:64:50:95:6c:0e:6a:ee:0a:
01:b1:32:50:4f:0b:7d:50:ce:b6:bc:c0:e5:fd:40:e1:22:bc:
c2:8a:e7:1b:70:f0:2e:09:8d:36:08:11:92:b2:41:0e:b9:92:
14:86:d9:31:23:69:eb:bc:25:5b:8b:11:c4:a2:dc:f9:52:27:
4f:26:31:ab:ac:26:e2:59:ce:ef:51:a6:60:07:38:23:72:0e:
c9:8d:5e:32:e0:7e:53:ed:90:49:27:cb:0f:20:a8:b8:6c:21:
e8:17:67:9c:6c:ea:23:43:ef:d9:df:e4:e6:8d:8c:c9:90:08:
59:d4:b7:6b:76:03:9e:9b:4e:ff:91:ff:f7:d3:51:e5:a2:85:
9f:90:b7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:57 2025 by rpki-client