Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier: itC7OmU+vLbYA1ISLQ2loo62E5S6YZiwlCIBWPc2OIo=
Subject key identifier: 17:5D:10:BF:62:2F:06:A1:8C:10:E6:A4:98:B3:95:DD:13:1B:76:4A
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial: 0199FCFD1954A625E4B90BC9A8C3FFFD53D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 15:01:09 +0000
Manifest this update: Sun 19 Oct 2025 15:01:09 +0000
Manifest next update: Mon 20 Oct 2025 15:01:09 +0000
Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: nVeyIV71MamPO49wVS9oF8+nsRV5vcYtUVWAUTRZ7sM=)
2: RaAEl3d_JRDv1Gh70YgnmuhGt2U.roa (hash: YfWCdAfvoB99C3m3pYbHWHqNvMIlHgsog7DBtbldBro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:19:54:a6:25:e4:b9:0b:c9:a8:c3:ff:fd:53:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Validity
Not Before: Oct 19 15:01:09 2025 GMT
Not After : Oct 20 15:01:09 2025 GMT
Subject: CN=175d10bf622f06a18c10e6a498b395dd131b764a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:02:cd:16:78:ab:7b:9f:44:4b:84:5a:e9:5a:
3d:a1:1c:6f:0e:dc:e6:25:7f:18:7a:27:0c:8f:d8:
1c:9b:38:84:c3:da:72:43:d3:20:72:1b:dd:57:bb:
98:29:01:f5:8a:5e:fc:ac:ae:a5:a0:82:26:ed:48:
de:ff:f7:44:a7:d1:b4:79:f9:ae:9b:a0:28:1f:66:
4f:71:36:64:f8:0e:12:86:b0:90:d7:a5:b4:4e:7e:
b5:37:54:46:a0:45:ff:f7:40:e9:9f:5a:2c:11:f5:
cb:6f:70:c9:ea:b2:01:0c:f0:f0:5f:ea:80:8b:b8:
f3:a2:a4:f8:bc:87:7a:57:d4:2e:1c:d2:94:4c:7e:
81:02:75:cd:19:c9:cc:21:9f:6f:40:af:3e:85:d3:
79:0c:af:37:54:1d:92:16:98:82:26:9e:39:01:a6:
ba:75:e5:f5:a0:30:e0:ac:82:28:db:0b:02:0c:57:
63:19:69:dc:ae:cd:26:6e:4c:aa:63:1f:96:eb:dd:
4a:50:1d:e9:45:61:45:f0:06:29:b8:1b:60:1f:40:
c7:1d:5d:f4:81:04:34:69:5b:92:82:69:81:56:63:
5e:dc:3e:85:60:db:c3:e3:52:4c:01:6f:a0:28:8f:
f9:26:56:ab:87:bd:6f:11:a6:44:e6:29:55:e8:11:
b6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5D:10:BF:62:2F:06:A1:8C:10:E6:A4:98:B3:95:DD:13:1B:76:4A
X509v3 Authority Key Identifier:
keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:87:96:2d:f1:42:52:6c:9b:fe:fd:37:2e:9e:83:d7:4a:c4:
53:3e:73:80:0b:0c:0e:31:a5:d2:8a:d1:c5:32:66:1f:93:47:
34:20:8e:e7:ba:b8:89:0f:f0:0d:f1:7e:c8:c1:75:80:d4:f6:
73:99:69:18:5e:25:52:a7:f4:d7:5d:f6:9e:74:12:c7:42:a2:
2c:52:ed:76:31:69:d1:e8:c5:de:6f:34:3e:72:22:de:46:0b:
b3:04:c8:ab:03:3e:88:98:17:c8:9f:59:9c:17:7c:bb:7e:43:
63:23:82:93:95:50:20:d7:d7:5d:46:8c:07:10:31:85:bd:31:
18:6e:71:cf:01:78:38:69:6b:b2:10:95:99:6b:29:77:a9:ba:
12:ad:ac:d0:dc:81:2b:bd:fa:f4:37:81:3a:65:e9:6f:13:fe:
e4:77:4a:fb:ba:df:30:43:e3:cd:fc:f9:14:51:ed:92:5b:60:
92:aa:cd:a8:5f:ed:5e:34:e6:d3:fb:8b:21:51:1c:bc:0d:41:
73:94:7b:14:97:cc:2e:71:7b:6e:b7:ff:c2:de:b7:fc:22:82:
d3:98:12:d8:b1:9e:a8:8c:0f:3c:97:b7:e2:3e:69:d2:e7:e8:
48:12:18:35:e1:57:57:2b:fd:35:ca:88:65:a9:02:38:27:99:
81:14:f5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:42 2025 by rpki-client