Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
File: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft (raw, json)
Hash identifier: yFY/5tniIMjkeuDQnKZOFMxGrohzfQKb0hjVswmu5q4=
Subject key identifier: EC:01:B4:2B:06:A0:8B:87:61:CE:C8:A9:3C:BC:F6:3E:09:F1:57:6B
Authority key identifier: 0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
Certificate issuer: /CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Certificate serial: 019A27420A4ACC26D2E5411CCDB2E366DEA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
Manifest number: 066B
Signing time: Mon 27 Oct 2025 20:00:30 +0000
Manifest this update: Mon 27 Oct 2025 20:00:30 +0000
Manifest next update: Tue 28 Oct 2025 20:00:30 +0000
Files and hashes: 1: D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl (hash: a6xTmXqgYYKT2OKR+VXz1XCC28a8dprzId7r37XHvIc=)
2: qj9pJEL6aLQRmJQwwNdSHRT6Q7o.roa (hash: YXXU3MHXgJerIl9CeLyHeV8Hu3RdrFxQkf90wVwUCHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:42:0a:4a:cc:26:d2:e5:41:1c:cd:b2:e3:66:de:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fbfe9385e6a759f833e4f09a09f0dcfed53b3e4
Validity
Not Before: Oct 27 20:00:30 2025 GMT
Not After : Oct 28 20:00:30 2025 GMT
Subject: CN=ec01b42b06a08b8761cec8a93cbcf63e09f1576b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c6:66:dc:3c:59:a2:a7:f3:a8:03:ea:82:9d:
b0:83:3d:d5:c5:d1:90:6c:56:52:53:49:79:f9:c6:
d2:6c:9f:c6:61:95:b4:cf:0d:a5:a7:7e:ee:49:13:
34:3f:ea:58:6c:74:78:c5:70:f7:10:41:66:d2:b2:
80:7f:ef:5f:e7:52:e2:31:1b:6c:4f:0f:f4:92:94:
64:87:5e:38:22:ce:ad:63:c4:f2:4e:9f:de:01:7f:
0a:5a:ef:5c:6f:b3:56:5a:26:4d:9f:d0:19:f0:48:
29:a0:90:9a:39:dd:1d:42:14:e6:3b:12:6b:bc:3d:
08:fb:3b:57:7a:ae:f3:13:6e:5c:ea:b0:03:77:83:
7c:69:8c:4a:47:b8:78:c9:b3:8b:95:74:b3:11:ce:
09:d0:a5:61:77:8c:e2:7e:6b:06:90:12:be:a1:f6:
ba:8d:14:d4:ca:a4:6f:80:86:5d:ef:23:0a:51:ed:
d9:8c:0e:f7:1a:e9:2b:43:8b:b8:18:7d:f9:07:9e:
eb:a1:29:3a:64:be:c5:c8:94:04:7b:23:ce:44:95:
d0:d6:1b:0c:dc:5d:04:b2:ae:c5:b0:cb:8e:e8:3a:
05:14:18:df:2e:75:31:25:c9:40:45:66:be:e2:b4:
4f:2d:d5:45:7e:17:44:42:ba:f9:b4:c8:72:f9:f4:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:01:B4:2B:06:A0:8B:87:61:CE:C8:A9:3C:BC:F6:3E:09:F1:57:6B
X509v3 Authority Key Identifier:
keyid:0F:BF:E9:38:5E:6A:75:9F:83:3E:4F:09:A0:9F:0D:CF:ED:53:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2bb948-478c-4a02-a18e-d647dc8a56b6/1/D7_pOF5qdZ-DPk8JoJ8Nz-1Ts-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:97:4f:78:68:c1:6d:49:b1:0c:78:d7:ce:07:8b:3b:6b:e9:
ec:41:61:13:4e:03:d4:14:ae:2b:ca:3d:7e:05:1b:d3:ee:12:
c4:c7:8b:68:3a:7b:0c:41:dc:0c:fb:ff:47:ab:8b:09:ca:0b:
68:b9:8b:22:3d:d6:61:5a:62:29:90:76:a7:b7:d4:b7:ae:13:
92:4d:61:03:7f:1b:52:e4:0d:85:d9:cc:b7:4c:6a:3c:b9:6b:
64:bb:2f:86:02:3d:cd:da:ec:58:9f:8d:96:fe:eb:c4:00:7f:
44:ee:47:74:1b:d6:de:8e:ea:fc:00:d0:73:15:5f:2a:11:91:
75:2c:79:2d:66:2e:b6:96:f4:05:b6:8a:75:d7:78:6f:05:bc:
5f:9e:df:12:77:53:5a:8c:3a:92:85:40:d9:d5:72:d5:0d:61:
2d:05:63:b1:57:86:79:40:f1:60:95:db:1d:c0:3d:54:86:fd:
c8:e0:de:32:bb:dd:03:c8:25:ca:1d:16:cb:47:13:3a:0f:af:
16:b7:18:e2:34:50:3e:91:49:a3:0e:ec:81:e4:f3:ef:38:1e:
31:8e:fb:1d:ae:d7:95:0e:3c:42:a8:b8:ee:0c:f9:d3:52:3c:
47:76:fa:b6:17:d8:d9:56:cd:41:ae:c3:63:c8:ea:49:c7:4b:
d0:06:21:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:44:59 2025 by rpki-client