Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
File: 7CSoJiAgkayDGfDwbreW_YJCKw8.mft (raw, json)
Hash identifier: 4uLWvsTUxSN+0Cq1adMalxmODvSyfHlM4HIfXVhmEM0=
Subject key identifier: 43:A4:78:99:DF:1F:02:22:D9:CB:37:E5:4B:B4:E9:67:9D:47:68:FE
Authority key identifier: EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
Certificate issuer: /CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Certificate serial: 019A31FDE37942BC52BD8D73213F3F30AE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
Manifest number: 9E
Signing time: Wed 29 Oct 2025 22:01:53 +0000
Manifest this update: Wed 29 Oct 2025 22:01:53 +0000
Manifest next update: Thu 30 Oct 2025 22:01:53 +0000
Files and hashes: 1: 7CSoJiAgkayDGfDwbreW_YJCKw8.crl (hash: hvv4vxX66DHvla2/hzfZzzYZdpEsI8Nz8E4SFkQzogs=)
2: EH144RlS9tYegrfhZ25_cqW-gBI.roa (hash: Ttw1qNIRRS2B0AROxbo5XeY9lM7BFHJCMEp5DgGhToo=)
3: VmGXZsZgI4pvH1fCkBq8qaWgLCs.roa (hash: sTPKL68aWFgc68j11xhbS7hhl1djwaAr+lQ2FflBKks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:fd:e3:79:42:bc:52:bd:8d:73:21:3f:3f:30:ae:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Validity
Not Before: Oct 29 22:01:53 2025 GMT
Not After : Oct 30 22:01:53 2025 GMT
Subject: CN=43a47899df1f0222d9cb37e54bb4e9679d4768fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d0:99:e9:f3:7f:15:4b:c2:79:fe:4c:82:74:
ea:f3:45:82:9b:40:43:c9:da:c3:d6:02:c9:51:b8:
8e:1b:7d:df:1e:d2:d9:db:a4:0d:e9:84:e4:ff:68:
f3:c3:af:c2:1d:a9:4b:4b:2f:5a:d7:f8:02:50:96:
c0:84:fb:29:63:01:6e:5d:1a:1d:e3:c2:7e:55:ce:
d4:2f:1d:a0:86:cb:e2:ea:0a:ac:89:da:ec:21:3b:
6c:b1:cd:49:63:df:cb:d2:a5:a1:85:0c:64:3f:45:
3d:67:73:f2:36:bf:1c:63:7d:fa:ee:af:c6:35:23:
33:ae:4c:3b:84:7b:94:ee:c7:15:9f:1a:d1:77:92:
12:af:d4:4e:70:c7:fe:e1:da:ee:6b:be:e1:b8:17:
6a:6c:e3:ee:ad:d8:0a:25:a3:ba:15:67:c5:a7:ce:
5b:00:7c:a2:67:55:bb:32:85:04:ba:69:83:5f:56:
dd:53:f5:84:53:a3:af:d2:ed:74:2f:84:8f:fc:69:
ba:2a:94:b9:13:53:57:14:03:80:a8:5b:9e:3e:6e:
a0:87:09:e9:5f:b9:44:6c:43:54:23:50:68:04:b3:
cf:93:da:56:f9:83:3c:09:95:39:f8:c6:3a:17:0c:
6f:5f:cf:b3:4a:4a:b2:ff:90:a3:a5:6b:af:a3:ec:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A4:78:99:DF:1F:02:22:D9:CB:37:E5:4B:B4:E9:67:9D:47:68:FE
X509v3 Authority Key Identifier:
keyid:EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:27:3e:b4:d1:c9:e2:d9:56:03:d9:ec:8f:ab:f6:7b:ad:9d:
57:94:16:0a:77:3a:ba:07:03:60:40:a3:9e:dd:e0:50:c6:fa:
ea:00:6a:2f:2b:f3:90:50:dc:ad:9e:65:00:ea:ed:4d:71:9e:
ec:02:15:95:0f:ac:f3:d3:0e:53:86:df:fe:21:5b:b0:34:1e:
96:1a:b1:be:e6:ec:ce:7f:75:aa:0a:37:ff:9b:2d:c6:01:1c:
4d:44:18:1d:60:d8:d2:b4:b7:4e:9f:15:ab:f9:88:24:74:14:
bb:de:23:1d:13:30:2f:42:7d:45:a1:be:f4:af:41:56:f0:88:
53:1a:5d:60:88:70:ba:e9:d9:f2:41:4f:76:52:3e:d2:13:09:
81:79:0d:42:34:a1:e4:e9:34:0b:80:9d:a0:ea:45:db:5f:22:
ab:c0:5d:d0:0f:6e:96:cf:2a:a6:05:89:e8:46:a8:30:05:4a:
cf:75:3d:05:1c:fe:4b:0f:fa:71:0d:aa:d1:5a:a0:37:92:5b:
80:14:b0:3f:39:04:91:1f:7f:6a:15:a6:ef:5f:2c:91:03:2d:
fc:87:a6:f5:d9:be:b2:da:5e:c1:5f:7e:7e:2d:48:5d:dc:fc:
d5:e6:2b:b1:99:13:82:d0:42:ee:ef:98:64:e2:8c:f5:7d:21:
c3:8a:8c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 05:45:31 2025 by rpki-client