Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: EzcK8d1LNeP+uCpshTxP67vrANE768SVaNB8blBF+ko=
Subject key identifier: 9A:00:E4:E6:50:0B:A1:F9:78:05:D3:DE:EF:5F:CC:0D:3C:EF:C2:1F
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 019A21E4F425FB74303B82F484526A48BE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 16FA
Signing time: Sun 26 Oct 2025 19:00:44 +0000
Manifest this update: Sun 26 Oct 2025 19:00:44 +0000
Manifest next update: Mon 27 Oct 2025 19:00:44 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: UclzLMgzBsmwVuSqUCJJCwcDBFSpSYw5a6OB9r157iI=)
2: MOwk6-gNTotPX4medNv9DwpG-nY.roa (hash: 6Jb3ucO6IvrIBpfG+RtQ1ACJyD7qIWwk6gOaPXaKjcU=)
3: YTaACXpx54gDy9xvy1Yl2SVGqRU.roa (hash: LQglYAbCThbY5IKAki5TmwIb5w2DJ6WRR1u7/db90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:f4:25:fb:74:30:3b:82:f4:84:52:6a:48:be:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Oct 26 19:00:44 2025 GMT
Not After : Oct 27 19:00:44 2025 GMT
Subject: CN=9a00e4e6500ba1f97805d3deef5fcc0d3cefc21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:39:29:16:d5:4a:ee:2a:5a:9e:c6:41:65:
67:b1:02:00:81:f2:d4:b4:90:62:24:cb:11:a3:cc:
3d:98:a3:c4:31:80:6f:45:b4:54:3c:ff:3e:4e:15:
7a:6e:c8:5b:34:04:c2:db:23:96:a7:15:ee:46:26:
95:9f:37:9b:02:24:25:ab:fd:62:55:f9:73:db:d2:
63:fa:17:bf:0c:b2:82:d9:b0:af:56:d6:9c:db:30:
c7:e3:4c:32:ec:7f:76:f6:8b:44:7c:f3:58:0f:21:
8d:63:a1:d1:57:4a:ed:53:3a:99:57:92:4b:a5:8b:
14:b0:c3:78:5d:45:fc:05:e9:0c:39:79:93:5d:a7:
bf:47:ec:bb:ab:69:60:33:cf:c8:9e:73:71:94:80:
42:1c:0f:fe:d5:92:a0:c5:5a:37:fa:e3:a3:44:60:
76:21:af:3b:c4:25:97:83:3d:0c:e8:9a:ad:9a:8b:
8c:3b:99:ce:82:5c:36:e4:95:8e:e5:53:c5:15:f1:
15:2a:00:ee:9e:3a:58:d3:dc:fb:6f:09:a0:c6:ec:
df:4a:db:7c:eb:65:c1:ca:cd:3c:ed:b6:34:3a:d6:
4a:7f:af:fe:8b:8d:00:94:3f:b8:95:61:f6:95:5e:
44:92:8d:d9:ba:0e:3b:71:9b:79:65:ee:a3:8e:9e:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:00:E4:E6:50:0B:A1:F9:78:05:D3:DE:EF:5F:CC:0D:3C:EF:C2:1F
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:12:0a:1a:63:82:91:3d:52:70:a9:88:b5:1c:3e:c9:88:d4:
64:f2:1c:58:96:09:ca:d7:46:19:93:15:66:aa:6e:41:60:01:
56:50:f4:49:12:55:59:0b:fd:fd:ef:71:03:82:89:f1:eb:2a:
17:36:50:d4:bc:50:5b:20:49:fc:d2:fe:74:dd:61:37:10:3d:
e2:fd:bf:2e:0a:10:50:df:5b:e6:2e:de:7e:86:81:21:af:1e:
3e:da:26:b4:a5:af:20:52:87:3f:ae:25:14:71:b3:b8:fc:fe:
cf:3b:56:af:18:3c:c2:d5:11:c1:68:95:75:30:e0:9f:ce:e9:
03:a4:c7:2c:cc:ea:d8:23:e8:68:05:02:48:d9:ab:4e:b3:d4:
18:6b:b0:aa:cb:0a:00:53:e1:7f:2d:55:77:ed:11:79:32:81:
4f:bd:8e:79:47:77:c8:cc:dd:10:a6:f8:59:be:52:54:e0:a9:
a6:a8:f6:d1:15:10:c2:9e:c6:15:de:b6:7a:3c:a2:da:0c:07:
64:3c:56:f4:9e:08:67:2f:0c:e0:f6:37:ec:bc:cf:9a:5f:9f:
f3:65:ab:85:b9:15:59:3d:e6:86:4f:95:a3:23:e4:e5:71:eb:
fa:b8:db:f5:23:e0:78:d4:32:79:09:8e:a8:e6:9f:6a:33:be:
2a:f9:d2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:44 2025 by rpki-client