Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File: 7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier: P56PSDVNHSJKIEE88iGeR7dgKRTeNnLj8keDnZghGhs=
Subject key identifier: 37:53:D4:22:B5:9B:01:C3:52:73:90:D8:C2:D7:25:BF:00:27:E7:78
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer: /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial: 0199C569AD180293F5BC9B3C9B8D5A6D0B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number: 16C5
Signing time: Wed 08 Oct 2025 20:01:00 +0000
Manifest this update: Wed 08 Oct 2025 20:01:00 +0000
Manifest next update: Thu 09 Oct 2025 20:01:00 +0000
Files and hashes: 1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: MAxBQg0DSjk3DgZjEPKZprk4eDRjVu2M6nur4L9hhmk=)
2: 9zc3UK9Q2NW5kQioYk692gU-YJI.roa (hash: BBodVy2RZip9O+WWUTv52ptxLTbUw/7auCFYyPArRAA=)
3: UQ_3RuYAdJoYpjdqceJNmc5aoug.roa (hash: q3FXkXKtZ8hFVmAvp+UOJxjM7FKEfq7BOOg+5WvlLx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:69:ad:18:02:93:f5:bc:9b:3c:9b:8d:5a:6d:0b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Validity
Not Before: Oct 8 20:01:00 2025 GMT
Not After : Oct 9 20:01:00 2025 GMT
Subject: CN=3753d422b59b01c3527390d8c2d725bf0027e778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:c9:77:46:bc:40:e2:25:9d:e1:53:a2:bc:
76:07:c1:ec:44:f2:9b:c7:d3:d9:f4:12:5d:69:23:
42:cb:d9:96:1e:c8:1f:91:be:e9:d6:d0:ef:f8:a6:
b5:4a:e9:8d:89:fe:44:ff:04:97:37:88:dd:1e:58:
d8:74:98:4d:0b:f0:a6:00:a5:25:2b:42:40:58:8d:
53:1c:16:2f:b8:b2:dd:8b:11:cf:cd:c5:33:31:92:
c1:df:81:02:b9:ca:9c:e2:35:23:4d:53:12:1a:db:
93:c6:f8:9e:be:f4:7e:15:da:5d:cd:cf:ff:79:83:
58:63:ea:0a:8a:d9:a8:42:93:27:49:47:4d:3d:ae:
6f:16:28:95:84:62:76:d1:fa:dc:63:59:a4:9a:6f:
1b:de:39:af:31:68:32:e2:86:ca:cb:31:d8:e3:a3:
ac:fe:64:41:d0:ae:50:5f:51:a1:4e:ec:77:dc:23:
7e:04:7a:32:32:8b:8b:cb:3f:00:ec:0e:f6:6d:88:
b4:5a:7d:70:25:9f:e5:c6:e6:a6:74:77:e7:4f:e8:
35:99:e2:93:60:4f:ea:68:89:6e:a6:0c:4f:e3:38:
3b:bf:ac:84:aa:9b:9f:8f:0f:47:30:e7:fb:a7:02:
7d:fe:6c:83:a3:12:2c:40:0e:3f:45:fa:4d:9e:47:
e1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:53:D4:22:B5:9B:01:C3:52:73:90:D8:C2:D7:25:BF:00:27:E7:78
X509v3 Authority Key Identifier:
keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:a9:e7:cf:63:c1:53:bd:f2:4c:7c:85:e5:ca:04:9d:84:b8:
d5:ec:cf:9a:5e:e8:37:82:30:99:0a:01:bc:e7:57:1b:f8:2e:
52:4e:06:0a:23:fd:4a:2e:bc:9f:dd:e4:bf:39:a8:ca:e9:cc:
ee:9d:3a:ae:74:07:f1:ea:13:14:94:38:18:1c:78:0a:02:47:
d8:8b:c0:04:8e:ee:a3:9f:48:d3:7c:ee:e3:8b:b7:58:e8:6d:
33:33:43:7b:27:bc:d3:52:2e:a2:50:18:ab:81:55:f9:a3:f8:
35:dc:b8:34:17:c5:87:d2:22:1b:80:55:1d:e6:c8:26:40:89:
3a:51:a9:2d:ed:c0:26:99:cc:5f:d5:e3:dd:27:41:9a:4b:86:
4f:28:67:82:d6:30:fe:3d:bb:d0:53:ad:6c:85:f3:1b:28:43:
3b:e5:a9:91:8b:c7:aa:07:6f:90:c5:f8:c6:d8:87:54:09:9e:
f1:e2:8f:e8:06:c0:60:b0:3f:d1:1b:aa:21:25:45:e7:6a:3f:
7d:b8:29:6a:a4:23:08:37:51:97:e6:9d:d7:0d:d2:c7:6d:6e:
27:3e:2c:6d:9b:3d:21:1e:72:5c:63:cc:b6:8a:55:d6:f6:55:
6a:50:a7:20:6d:f7:15:83:38:61:ac:ca:90:2f:98:7e:a1:ba:
e6:e1:7b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:33:47 2025 by rpki-client