Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
File: 7PfKn_r-cqMJZvfkPZK1jndM50E.mft (raw, json)
Hash identifier: u4YD8RzLse/Rr9Tc0d3SDmDM/6Nufa0VaMAwa+3rn5Q=
Subject key identifier: 8C:86:1F:4B:75:58:16:49:40:F5:16:29:6C:DD:F2:BF:63:0D:43:55
Authority key identifier: EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
Certificate issuer: /CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Certificate serial: 019A13F2A1FBCB33009DE654844C8E6E266D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
Manifest number: 11ED
Signing time: Fri 24 Oct 2025 02:00:59 +0000
Manifest this update: Fri 24 Oct 2025 02:00:59 +0000
Manifest next update: Sat 25 Oct 2025 02:00:59 +0000
Files and hashes: 1: 7PfKn_r-cqMJZvfkPZK1jndM50E.crl (hash: wmP0wVsXLlwf6fIHs+vCM8h9GA8e2M2wgXmdleZYR6E=)
2: j-wumpm8bgZz2aXq3WW1uyM7CGA.roa (hash: sbRRHDlTVstpRJS8Rp0RxMYJ2O6mjuNLI+lW12IAgE4=)
3: rxB_SKD05flXCVb5a9Y1L-kYSOM.roa (hash: xxBSeAniUfhkRNjna0RuKk7EzeOrdkzGj8pWxibPVsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:f2:a1:fb:cb:33:00:9d:e6:54:84:4c:8e:6e:26:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Validity
Not Before: Oct 24 02:00:59 2025 GMT
Not After : Oct 25 02:00:59 2025 GMT
Subject: CN=8c861f4b7558164940f516296cddf2bf630d4355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:9b:c6:70:2f:15:69:4f:e9:0b:5b:b8:5b:
bd:09:ae:d3:45:b0:2d:8b:46:ba:fa:63:74:60:82:
b9:99:09:63:98:a0:88:65:98:8c:de:d8:78:a0:bc:
ea:96:7d:59:92:5b:43:da:5b:17:f7:62:de:dd:0c:
cf:67:06:a7:71:db:af:2f:cb:aa:01:65:b0:37:91:
39:33:ce:5f:4a:e4:9d:80:a3:fd:fe:9d:20:25:b4:
20:77:ba:e6:3f:9b:37:7f:bd:90:27:70:29:bf:64:
19:30:cf:9b:57:d6:ff:14:31:e0:03:98:08:ce:63:
0f:c6:8e:ea:11:ac:ae:cb:9f:a5:d6:23:c3:f5:87:
b7:bd:48:01:48:e1:a3:cc:c2:ee:dd:8f:12:4f:5c:
4a:11:90:92:2d:88:dc:07:11:4b:6b:3c:9b:f6:00:
ce:5b:6b:57:a3:6a:40:f7:04:f4:4a:bc:64:13:59:
1a:52:f4:fc:ca:96:5c:80:fa:82:59:df:d3:2e:34:
a5:e7:f5:e8:34:e5:cc:a1:74:a5:87:70:8f:50:38:
4e:4a:6b:e7:1d:b8:7a:bf:68:d3:9d:2a:3c:59:86:
53:75:2b:78:68:04:31:81:4c:53:5e:c9:12:78:96:
bc:d3:9d:f7:39:cf:84:12:5a:01:01:80:b1:bb:ba:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:86:1F:4B:75:58:16:49:40:F5:16:29:6C:DD:F2:BF:63:0D:43:55
X509v3 Authority Key Identifier:
keyid:EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7f:12:8d:fe:b7:09:02:07:35:1d:c8:f5:1b:8a:33:74:fe:
fe:02:e7:16:9f:d9:db:3d:9e:10:ac:c6:27:9d:30:da:93:35:
54:26:0a:f8:82:9d:ee:52:ea:28:04:bd:21:64:2f:43:04:ab:
bf:c3:6f:e2:3d:31:05:92:fe:08:e9:a4:54:06:22:8f:4b:88:
ea:1a:96:a1:da:b0:c2:21:0b:82:97:a4:35:7a:eb:e1:68:45:
fa:b4:8d:ed:6e:52:b7:72:96:11:a5:1b:42:45:19:08:1b:5f:
23:08:30:a9:ef:47:b3:e8:c4:5c:3c:1c:e8:36:6f:de:0e:be:
60:40:65:c2:14:a7:f1:e0:2e:b3:7c:25:af:71:5c:1c:45:3f:
e2:6a:0b:8a:49:95:e1:99:01:03:de:8e:29:49:02:15:e3:bf:
30:02:98:c7:dd:95:5c:74:13:2b:af:0b:ab:72:f1:e0:6f:67:
b6:c8:89:c5:aa:6e:4c:f3:d8:78:b1:9d:a4:60:31:44:07:34:
41:d6:38:79:b7:d1:4a:a0:a1:1b:70:e8:ac:a8:51:db:af:1d:
71:25:9c:ed:b6:e7:28:56:d0:d6:23:02:2a:71:db:f7:fc:44:
13:33:e8:68:b7:ce:1c:43:83:7b:ad:a8:d4:30:c1:d5:27:b1:
ae:04:e9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 08:44:32 2025 by rpki-client