Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
File: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft (raw, json)
Hash identifier: znfyop4iTkixzjw0PmE0codSbsb5/qHguZ9JWK03TpQ=
Subject key identifier: 2C:9E:9D:AA:80:17:CC:23:AE:D7:02:68:66:2C:F4:56:49:EA:CD:29
Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
Certificate issuer: /CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Certificate serial: 019A2AE7D689E51866B5F0359FBFAEC33B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 13:00:28 +0000
Manifest this update: Tue 28 Oct 2025 13:00:28 +0000
Manifest next update: Wed 29 Oct 2025 13:00:28 +0000
Files and hashes: 1: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl (hash: mjHzMIcLejy0lyPylkcdzc47p8Ey943El8XX9GSBT5w=)
2: wzZnZqQVK_Z4mBu6T59L4a0o0-w.roa (hash: bjMUZxA43ldHX1PFJUIjXjtsR4ch9O8R/snu05/5Ez0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:e7:d6:89:e5:18:66:b5:f0:35:9f:bf:ae:c3:3b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Validity
Not Before: Oct 28 13:00:28 2025 GMT
Not After : Oct 29 13:00:28 2025 GMT
Subject: CN=2c9e9daa8017cc23aed70268662cf45649eacd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:c6:5b:3e:25:31:48:60:9b:35:41:4a:aa:
d4:e0:f1:e3:bf:3d:2d:d9:84:9f:80:7a:df:3c:b6:
9e:59:dc:4a:4b:45:ed:1b:e5:f0:4e:eb:1d:1f:e4:
91:7d:30:44:fb:09:00:5a:fa:1a:11:1e:68:8e:c4:
b5:22:bd:0c:19:17:c9:87:61:95:7d:fc:50:fe:74:
5e:98:02:16:4b:24:58:92:cf:cf:6a:ca:52:24:6c:
84:0b:bd:56:b4:87:59:b2:7b:c7:6a:bd:b9:8e:f1:
3c:96:df:1e:04:1d:32:d2:60:c0:ab:7e:df:cb:1e:
2d:70:c4:1d:c7:71:46:a0:59:31:35:50:76:6e:27:
36:b7:5c:af:8d:db:28:62:22:b3:17:5c:4d:73:45:
2b:3e:8d:68:61:10:9d:58:27:d3:f6:2d:cf:95:f1:
bb:68:fd:96:0f:39:14:23:94:36:b3:8b:c1:d1:6c:
46:97:70:d8:04:51:0d:7f:44:7a:aa:41:45:87:6d:
24:07:25:b6:9e:11:0c:e4:99:60:d2:6a:78:a6:79:
7a:6e:07:a1:2d:80:61:9b:41:f0:99:a7:c1:f2:81:
71:28:cf:80:f7:ef:09:02:68:ab:bc:fd:9b:06:7a:
0b:96:94:eb:66:65:23:da:a4:8c:25:ea:3d:0e:6a:
12:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9E:9D:AA:80:17:CC:23:AE:D7:02:68:66:2C:F4:56:49:EA:CD:29
X509v3 Authority Key Identifier:
keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b6:a7:93:7c:4d:0b:db:7c:45:fb:e3:3a:41:b5:e1:53:2b:
b3:18:c9:78:2c:d4:fd:be:ff:0a:e1:1b:49:25:fe:73:f0:5f:
f8:57:98:2c:f6:f4:c4:fa:bf:f0:bd:a3:2d:d9:30:5e:68:72:
b1:1b:a9:f5:42:90:cc:f7:ca:13:62:f5:f8:88:a0:2d:c7:62:
03:97:ee:e2:f6:f2:84:97:82:31:c1:6b:63:e7:84:43:20:03:
3b:79:22:54:6e:1a:2f:6b:1a:19:1d:74:47:45:af:3d:09:2d:
08:a8:74:26:5a:ef:93:68:64:87:7d:dd:64:5a:51:b2:55:9a:
1b:df:80:17:ea:a7:06:2a:c1:70:03:ef:7b:62:10:0e:0d:3c:
d1:d9:23:3c:84:e2:2d:9b:9d:c0:68:6b:39:73:c5:d7:1d:89:
ac:89:f3:61:dc:f6:72:12:58:70:a2:61:32:c5:36:b9:7b:56:
e4:fe:b6:98:cd:2d:bf:71:8f:6f:c1:22:12:87:5b:03:5d:ed:
a1:cc:e8:5f:7f:07:63:6f:a4:84:ab:aa:4b:10:79:da:78:18:
84:42:fe:f5:b8:c6:70:02:4e:bd:06:dc:12:19:a5:44:fb:d3:
11:45:60:72:f2:21:44:42:e2:15:3d:4e:c6:15:de:a2:31:02:
c3:01:fe:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:07:36 2025 by rpki-client