Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: 94QCV+UQ7y04Ufs8ymDAiZKXIs6yK2C7WUSQfG+8RVA=
Subject key identifier: CE:F1:F0:08:7A:E1:03:E1:06:F4:AD:D5:CC:AD:2B:CE:91:F0:03:4B
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 0199C5699ADAA4CBDB60508103C78A817A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 16C5
Signing time: Wed 08 Oct 2025 20:00:56 +0000
Manifest this update: Wed 08 Oct 2025 20:00:56 +0000
Manifest next update: Thu 09 Oct 2025 20:00:56 +0000
Files and hashes: 1: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: XpLHlkREy80p+fujGX8BPROTYr5oFgQQttxQV9awO4E=)
2: jJfOPh4XYz0bStaxv-izcSg_mmc.roa (hash: I9zOxo3FRJE3Zqu7rer6Rr4TRL9Sp9aojJllGRgbeX0=)
3: pp9HRbSEXg1Djpwq9U2x1ut0P3A.roa (hash: eLTqAfDKOrIieHKE4CKftQ8WCB5K7yV6FjmVMCdNg0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:9a:da:a4:cb:db:60:50:81:03:c7:8a:81:7a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Oct 8 20:00:56 2025 GMT
Not After : Oct 9 20:00:56 2025 GMT
Subject: CN=cef1f0087ae103e106f4add5ccad2bce91f0034b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:c6:da:42:e4:7e:60:1f:1d:c9:a3:27:8c:
3f:7c:fa:fb:62:3f:dc:5e:03:3d:2c:05:17:4c:46:
a0:94:86:3e:f8:b7:a4:0b:63:84:27:90:06:36:af:
32:9f:fc:02:c6:6a:25:92:1c:28:df:88:5b:59:3f:
1c:31:86:79:ed:8f:09:c4:e3:fd:33:a3:f4:c4:03:
c3:ec:9a:30:61:0f:1e:9e:0b:2f:d9:6a:49:1e:75:
2f:ab:28:c5:e3:5a:1b:cb:01:d8:c7:16:91:c2:62:
95:6a:f4:65:d6:53:52:05:79:46:88:f3:90:56:ce:
44:5e:a4:d6:2d:c3:bf:37:a4:17:56:9e:5b:48:43:
77:e0:8b:08:68:84:f3:a7:b3:5f:52:ae:c5:b6:d0:
96:0f:74:05:c1:d6:49:cf:25:ce:d0:75:cc:c3:5a:
e9:2c:5f:9a:68:51:d7:5e:88:38:37:2a:d2:d0:e4:
74:ea:92:43:76:66:53:52:ba:a2:d1:8d:82:87:92:
69:b5:4f:71:ae:ac:05:1c:ec:23:f1:15:f6:b2:71:
2d:a3:a2:a7:f6:83:34:52:e2:5f:23:a9:41:72:37:
2c:10:69:a6:fc:5d:f3:5f:98:37:bf:d0:48:d6:6f:
cf:17:bc:b2:4d:fb:8f:e2:13:33:24:b0:d5:3d:f8:
3f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F1:F0:08:7A:E1:03:E1:06:F4:AD:D5:CC:AD:2B:CE:91:F0:03:4B
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a4:fe:41:df:e8:e5:83:43:32:96:94:d7:1f:12:cc:a9:b2:
41:58:9b:df:de:c6:51:cb:15:6a:b0:6a:bb:df:1a:57:ab:9b:
97:b3:e4:1c:2e:df:e3:76:ad:0c:2f:36:bd:7b:0c:15:cd:4d:
c6:84:69:00:be:3e:bc:9f:6e:94:7b:ee:c7:00:ab:76:3f:94:
0a:e8:1c:8d:ea:d7:e9:4c:a9:e4:bd:66:26:7b:70:2c:15:ab:
09:3f:30:29:20:44:d3:a3:f7:cf:f0:b9:87:66:4b:0d:80:9c:
f0:6a:b7:0f:44:5f:74:5e:64:1a:f4:4b:cb:df:a8:fe:de:28:
e2:79:61:4d:81:48:82:44:a2:8d:4b:58:b1:2c:7c:4f:e5:83:
6e:ee:0d:08:c4:07:2f:d2:da:17:a2:ca:9b:a9:8f:19:2a:b1:
29:6e:1f:6c:cc:8a:a8:4f:29:db:ac:90:ec:9b:d9:0f:e1:cc:
74:50:b7:f7:97:cd:27:5d:52:28:b5:d7:53:3d:18:a4:52:41:
3a:3b:17:a8:10:e8:69:17:24:6b:71:36:41:ba:f1:90:49:b7:
58:27:e7:3d:81:3c:e1:11:08:11:7b:0b:93:50:b1:5a:bd:89:
49:ce:38:c0:8b:57:7e:a6:8a:44:78:8d:d9:53:0a:d3:c0:60:
10:6a:01:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:33:33 2025 by rpki-client