Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
File: e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft (raw, json)
Hash identifier: /pvWt3QnyXGWr/YRPoX51mQLSnNuymkO4ebLH7m/h3U=
Subject key identifier: 7F:76:5A:83:F5:75:49:E0:D2:5B:C5:5C:8F:8C:94:C4:E0:55:AD:8B
Authority key identifier: 7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
Certificate issuer: /CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Certificate serial: 0199FF22C9C227ABAB75CAD39115378A742A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
Manifest number: 1497
Signing time: Mon 20 Oct 2025 01:01:33 +0000
Manifest this update: Mon 20 Oct 2025 01:01:33 +0000
Manifest next update: Tue 21 Oct 2025 01:01:33 +0000
Files and hashes: 1: 1coqSPvIzRCZ1S6Z5EWORCEy_NY.roa (hash: HDpNqOrJZAq1XJhPSThcDVAo56N193hVEjKsFT9RCtc=)
2: e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl (hash: jI1gMy8FH7ZWzIrJYImw9ijc2Xa0p0RP+H0wL1qkLSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:c9:c2:27:ab:ab:75:ca:d3:91:15:37:8a:74:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bc09998ce39cfdca66ecfd8dd3ac38644d3c8a6
Validity
Not Before: Oct 20 01:01:33 2025 GMT
Not After : Oct 21 01:01:33 2025 GMT
Subject: CN=7f765a83f57549e0d25bc55c8f8c94c4e055ad8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:59:72:6d:29:ac:ae:a0:d0:fd:14:cb:b7:6f:
db:76:de:8b:2d:51:bb:47:f9:fb:8b:b3:a6:cc:d2:
4b:23:84:c9:3b:c7:45:a6:8a:a5:1a:b8:2b:2b:88:
96:c8:43:a5:73:8a:40:53:fc:ae:bc:a2:64:e5:44:
dc:fe:14:26:2d:62:0f:7a:be:1b:2e:a6:b4:3a:cd:
03:cf:fe:ce:d7:e3:ff:26:e8:68:8a:70:7b:ec:b7:
d9:81:a0:af:a3:24:d8:88:a6:40:be:3f:ef:bf:46:
1f:ca:55:7e:bf:43:15:b3:29:a6:56:50:a8:d1:ac:
b7:f9:22:a8:ba:94:95:55:f1:fd:80:cb:88:2a:63:
16:56:05:aa:34:0d:ae:0a:fb:e5:c5:58:1d:e5:6e:
ef:f6:44:32:b0:11:1b:98:0f:c5:d3:d7:5e:a7:35:
d1:40:ac:6a:c5:3c:37:90:7d:ec:82:8d:44:3e:46:
c7:f4:04:9c:6c:45:44:4f:52:aa:ec:4b:65:8a:05:
98:c8:db:03:20:e0:98:d5:e8:bc:4b:b7:1e:79:f2:
fa:d0:01:c4:39:89:74:6c:f6:dd:e5:ef:f7:b9:94:
b8:83:9c:cc:92:56:7d:79:ee:7c:50:7e:bc:6b:bc:
e5:66:c6:38:b1:d2:6d:53:4b:fc:6d:ec:33:d3:8f:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:76:5A:83:F5:75:49:E0:D2:5B:C5:5C:8F:8C:94:C4:E0:55:AD:8B
X509v3 Authority Key Identifier:
keyid:7B:C0:99:98:CE:39:CF:DC:A6:6E:CF:D8:DD:3A:C3:86:44:D3:C8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8CZmM45z9ymbs_Y3TrDhkTTyKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ed65e5-f81f-4d9d-8403-22d6cd1e1a8a/1/e8CZmM45z9ymbs_Y3TrDhkTTyKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f2:9e:d5:c8:1e:b1:95:69:86:05:ee:e7:82:dc:d4:d6:63:
cd:e5:be:c2:6d:90:f5:bd:2a:cd:d8:fb:28:a5:d8:91:8c:21:
57:a2:a0:aa:97:81:d5:72:e0:5d:c4:0e:a5:4a:34:28:f9:b5:
25:5d:55:60:bb:4f:2a:b5:64:9b:87:9b:2b:88:15:94:aa:5f:
ca:9f:5b:08:54:12:53:43:16:9c:1a:95:d2:cf:d4:5e:3e:46:
ac:de:5a:90:4d:30:d8:08:41:fb:a0:bc:6e:b1:31:36:76:81:
fd:40:13:b4:f7:1e:d0:a7:0f:c2:4b:39:b5:20:85:f3:60:a2:
5c:be:af:cd:94:dd:83:97:72:1c:6b:c6:c5:ed:53:10:ea:51:
e1:5a:ea:9a:fa:37:ed:3c:e1:ac:51:90:d3:5a:e7:0b:ee:33:
ae:2f:78:8a:eb:d0:b4:a7:07:34:c2:5c:91:e3:27:81:0a:4d:
12:e8:5c:03:b1:f3:72:a0:92:4c:c7:9e:0b:1e:dd:5d:8a:89:
2e:cd:ae:5e:5f:39:76:28:03:43:1c:82:cb:c3:67:6d:a0:53:
97:42:ca:85:6d:0a:5c:da:cc:e5:16:6f:bf:d8:09:9e:7f:f0:
7d:e5:2d:77:e5:67:b1:ef:8e:4b:bb:f3:ed:d1:74:b5:96:98:
4c:39:4b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:40:47 2025 by rpki-client