Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
File: 7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json)
Hash identifier: A+zII3T39KZMtMjPwbgbTfZmU2SuWqAVnRo37FErjQc=
Subject key identifier: 67:73:7B:E9:72:7F:A4:59:62:44:52:D4:4B:3A:0B:1D:32:54:99:74
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 019A05921628A42EAE11D01BA4639927F683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
Manifest number: 0816
Signing time: Tue 21 Oct 2025 07:00:51 +0000
Manifest this update: Tue 21 Oct 2025 07:00:51 +0000
Manifest next update: Wed 22 Oct 2025 07:00:51 +0000
Files and hashes: 1: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: eTS/cMPBwKM89ECpQIB0B/xC+rAysxmoxtlp/ctGTtE=)
2: NS3PLsvPHZ5BNMXscaI6lUiQ-_0.roa (hash: ifHPopmI8C/fWhHZ7kUlh0L0Qv3UiOcYMZNGauolx84=)
3: SbkVZx35DZkFyVg9B2PgqJ5H5dY.roa (hash: hRekjjnAg6h7a7cb6mrdtQIFkMy6cN1akvAzAJVtwDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:92:16:28:a4:2e:ae:11:d0:1b:a4:63:99:27:f6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Oct 21 07:00:51 2025 GMT
Not After : Oct 22 07:00:51 2025 GMT
Subject: CN=67737be9727fa459624452d44b3a0b1d32549974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:dc:fb:ff:af:36:a4:41:79:a1:54:fe:67:
2c:ce:08:9a:f6:14:e5:1f:0f:46:67:c0:f0:8a:e0:
ec:90:35:d3:e7:50:b7:73:ca:cb:84:76:ab:87:71:
02:c4:28:42:0d:df:75:b1:51:30:98:df:3a:fd:5b:
12:d4:03:59:8b:d8:da:46:d1:df:d6:2f:32:cd:72:
cb:46:19:9a:0f:ea:a6:72:f7:05:9d:6c:05:c2:d7:
45:14:ed:85:68:3f:b7:f7:8a:a3:07:d3:3e:d5:d7:
99:0b:9a:2b:49:aa:c3:f6:a0:8a:0d:72:53:b9:2e:
53:b0:75:2e:22:e3:7c:0e:d8:bd:9e:7f:29:c4:84:
49:07:6f:57:94:13:01:04:ef:99:aa:97:b4:f8:14:
7a:0d:97:d7:36:92:ce:45:f5:6d:ab:66:69:b1:59:
d4:07:54:ef:9b:ee:22:1b:bc:aa:c0:f9:c6:30:77:
e5:a7:d6:40:2c:dc:24:62:c3:d5:5e:1f:b1:fa:2f:
b4:ca:a0:59:b4:77:b2:5a:41:be:f6:48:98:5a:31:
df:73:e9:cb:82:d7:aa:1f:c2:38:17:62:c5:b1:bd:
a6:1a:76:34:1d:01:6c:38:07:10:bc:53:fd:ce:25:
ec:09:e7:4f:91:67:78:07:83:1e:61:8a:2b:17:18:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:73:7B:E9:72:7F:A4:59:62:44:52:D4:4B:3A:0B:1D:32:54:99:74
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e5:6d:0b:0a:3b:a9:9e:fb:17:a4:f6:f0:3b:f9:b5:21:e7:
d7:68:08:cc:c3:69:6c:bc:23:50:84:de:9b:4d:2a:59:1e:d7:
80:b7:01:16:7d:a8:90:4f:48:57:d8:23:09:b7:df:c4:b7:bc:
1f:f3:69:36:de:9a:43:a6:f0:e5:07:7b:58:3b:0c:ce:f0:bc:
2d:0d:bd:36:62:5c:96:6b:00:39:24:6d:3d:5b:cb:74:95:26:
51:41:f4:8d:da:15:ca:53:e9:b1:ab:de:06:ca:c9:ea:00:18:
12:88:29:8a:cd:c6:6b:1b:e3:27:44:39:d9:9d:54:f9:9a:4a:
aa:8f:de:0a:d2:60:80:2f:ab:88:0f:40:6d:c4:61:3d:bc:31:
d9:ca:33:62:69:9f:be:a8:e7:ce:1d:71:ae:8f:f8:bf:da:3f:
1e:7b:7d:f9:bb:a1:f2:dd:31:4c:89:8d:44:67:50:d4:97:4f:
02:d9:b2:d7:cc:85:a1:fd:96:01:c6:41:54:6d:d6:d8:50:38:
31:dc:42:b4:dd:6a:5b:fb:be:66:3f:d3:2a:9a:21:0b:a6:50:
d8:d9:49:b7:d3:da:4c:8e:a8:bf:74:58:7d:1c:1d:8a:ca:7d:
0a:6b:4e:80:b9:dd:07:5a:d4:86:82:3a:5c:f4:83:a5:4d:e4:
f7:98:03:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:20:36 2025 by rpki-client