Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json)
Hash identifier: Kjv8DhXLVT7f6SdONl3MDg4oOKI7o5p+FcDHRKi1bGA=
Subject key identifier: 7E:E4:B6:31:51:46:A0:D2:0E:11:CA:25:D9:8D:1C:03:55:83:62:A1
Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Certificate serial: 019A258AC0814203591C3F5EE96CB525E3AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
Manifest number: 0665
Signing time: Mon 27 Oct 2025 12:00:41 +0000
Manifest this update: Mon 27 Oct 2025 12:00:41 +0000
Manifest next update: Tue 28 Oct 2025 12:00:41 +0000
Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: s/H1rqQQE/F/ElNmTMDqEX453QB2k2a/c4C8f4mqV6o=)
2: jXqxCPk5SJyIm-cEEFcxqQgl9HU.roa (hash: 55uzcUC8JFxJT35uBCSfhKl+d0CAv18T7HkOsVb7EDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:c0:81:42:03:59:1c:3f:5e:e9:6c:b5:25:e3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72
Validity
Not Before: Oct 27 12:00:41 2025 GMT
Not After : Oct 28 12:00:41 2025 GMT
Subject: CN=7ee4b6315146a0d20e11ca25d98d1c03558362a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:15:d5:99:12:cf:54:1a:cb:79:77:e2:00:93:
4c:94:aa:79:a4:0c:f8:9e:05:8c:ce:b7:37:c8:18:
b9:d3:0b:f5:b7:3d:e9:b9:97:df:2c:e6:3e:43:e9:
19:f5:53:9b:c4:ff:c4:5b:08:85:ff:be:74:33:e1:
8b:a3:0c:27:e9:fc:14:a1:ac:97:8a:7a:e0:a2:e3:
f4:9d:44:3b:6e:04:ae:b4:90:75:7c:b2:f2:79:c9:
db:a2:7d:7f:3a:e8:08:c8:e8:7e:18:ec:2d:4a:81:
b6:46:1e:2c:87:9b:92:db:00:be:0c:e8:cf:21:3c:
05:f9:04:40:01:8e:82:dd:c0:c2:c8:0e:3a:67:0a:
b8:73:f3:d4:1f:28:6c:05:c9:35:dd:e5:9a:74:16:
85:35:33:81:22:b2:cb:bd:6e:63:27:17:5f:1b:ac:
f1:ae:dd:71:e9:1d:25:69:77:48:8c:ed:b2:0a:80:
04:95:28:4b:26:29:3a:c3:34:ce:14:2a:f1:67:04:
c0:93:46:b3:6a:b7:1f:b7:e3:a0:b9:36:c4:72:ee:
26:bb:9a:63:b8:e4:4c:84:24:95:fa:dd:db:98:b7:
08:ff:d0:9d:3e:fb:24:6e:28:f1:86:32:51:c8:00:
af:4a:62:92:28:80:92:18:74:b0:e2:1f:4b:df:d0:
1a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E4:B6:31:51:46:A0:D2:0E:11:CA:25:D9:8D:1C:03:55:83:62:A1
X509v3 Authority Key Identifier:
keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9c:34:97:b5:45:60:f1:53:a7:d7:34:c0:f0:b4:a7:5b:93:
45:2d:45:91:4d:1e:5b:49:88:1c:21:83:13:fe:b3:5e:80:ae:
21:14:29:18:c5:bf:83:f6:b3:fd:ef:c5:28:79:af:f9:cd:47:
6a:f9:a3:32:68:38:49:b8:8f:bc:e2:1d:dd:e4:56:ed:89:72:
07:14:e2:5c:28:7b:e3:96:aa:33:4e:5c:b3:1a:1e:ca:a3:03:
88:98:f8:d2:6a:12:b5:86:ef:d1:02:da:7d:65:1e:fb:78:10:
af:18:7f:5d:3b:a1:e2:58:f9:cb:a3:88:e6:01:d8:b3:92:e2:
a0:df:b7:d6:7e:72:02:28:57:ab:9a:24:4f:05:e7:34:8d:28:
f2:d4:ac:18:d8:21:1e:28:b9:b3:db:e0:3e:73:ee:5f:47:92:
bc:3f:8f:a5:28:0f:26:53:45:5a:ed:29:5b:84:bb:aa:0f:2d:
5f:00:3d:d4:7e:d7:a9:dc:7f:df:56:d1:e8:cd:99:83:67:8d:
2a:9e:e4:76:98:cd:50:b3:92:de:e8:21:55:cb:c6:7b:ec:95:
25:a7:a0:c7:75:12:cc:01:2a:95:00:f4:34:05:53:51:4a:89:
35:71:15:f9:75:3c:8a:06:cd:bb:d1:18:09:8b:f5:d4:dc:a0:
53:00:fe:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:28:11 2025 by rpki-client