Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: EtAuZn7kyuYnS/t2x3Cs29/5Lvsp814Tqp0JopEfdEU=
Subject key identifier: 74:F1:D4:67:5B:42:7F:27:1F:7D:68:CA:4F:11:08:C8:6C:DC:5C:C7
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 019A251CC0ED7BEA18A71679601068EA93E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 16F8
Signing time: Mon 27 Oct 2025 10:00:32 +0000
Manifest this update: Mon 27 Oct 2025 10:00:32 +0000
Manifest next update: Tue 28 Oct 2025 10:00:32 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: iOdEbK1jGg1PV2afwuek3t79rWUh8kxUhH/5HwuSTMc=)
2: nigLCn7wWT0ueFZoLpA3hlPaWgA.roa (hash: q+VheV55aItc4rpRaaib9XdkzvuIJSEg9slh0BtNQXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:c0:ed:7b:ea:18:a7:16:79:60:10:68:ea:93:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Oct 27 10:00:32 2025 GMT
Not After : Oct 28 10:00:32 2025 GMT
Subject: CN=74f1d4675b427f271f7d68ca4f1108c86cdc5cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:a8:66:3d:f9:7d:32:b3:a8:d9:ad:e4:37:
a1:f5:b1:7a:d8:f4:11:71:8b:55:05:d9:c8:00:55:
c2:6b:1a:b6:27:d8:cd:11:d4:65:86:fa:6a:6b:86:
eb:8a:ba:ea:b5:8b:50:ce:cc:db:d5:96:63:67:b8:
e4:ce:10:a6:3d:fd:0c:12:a0:4e:ca:c2:f5:6f:2f:
51:53:d2:be:89:67:f1:61:ed:b4:61:32:5c:45:ff:
45:db:93:ee:e5:6e:37:21:03:25:66:ba:7f:be:f8:
85:2f:f3:a5:f3:59:e4:0e:0b:be:7b:ad:4c:5e:64:
04:e6:8a:dd:eb:8d:2d:d9:52:6c:98:c1:4b:e9:39:
90:e1:d3:64:e8:a8:32:7d:77:23:52:d7:a5:79:e1:
86:23:46:8c:42:9f:b0:53:ac:31:8e:23:4c:ff:32:
82:7a:17:a9:67:01:9b:9e:5c:fe:a6:b3:56:70:b6:
4a:a1:a3:c3:f6:8e:29:71:2a:61:b4:5c:81:89:5d:
40:76:39:64:63:d1:9f:81:a4:76:e5:0b:66:4f:c3:
ff:95:20:f5:8d:2d:b8:06:aa:ce:6e:b7:07:15:1f:
7b:2b:30:24:d3:01:4b:89:c2:52:4c:56:88:f4:5b:
07:6e:92:d3:77:2a:b4:20:66:bf:eb:4e:96:97:66:
00:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F1:D4:67:5B:42:7F:27:1F:7D:68:CA:4F:11:08:C8:6C:DC:5C:C7
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b0:8b:8b:e4:f6:e6:d4:4a:29:2f:c1:61:bc:c8:9c:19:c9:
41:ee:39:c0:49:a6:04:c9:98:bb:15:61:85:c2:68:27:b3:09:
6b:9b:aa:e2:9f:7d:2e:0b:17:8d:60:a7:7d:9c:87:5e:cf:1f:
d4:fb:81:3f:ec:79:69:fc:b2:47:1a:26:a7:2c:98:64:28:c8:
fb:98:91:71:da:ad:07:10:a6:22:09:9e:53:88:0e:45:3f:b2:
f8:89:bf:c9:93:ca:ca:3b:49:fe:84:e5:12:76:09:95:2f:ac:
1a:53:f3:fc:60:58:fe:16:47:ab:9a:7b:5b:8f:d8:e0:73:d6:
25:e0:1c:e9:13:37:c9:1a:c4:db:ca:61:8b:08:78:b1:29:02:
f5:aa:b5:2e:5b:fb:ce:4d:bc:3c:95:a0:be:a5:30:73:fb:f7:
04:24:d5:a8:c0:95:19:56:25:b9:16:15:70:30:06:e0:82:5e:
89:ec:1b:33:4f:54:c0:70:b3:5e:6c:ed:ed:99:d5:a8:cd:ce:
d3:72:45:37:d4:82:37:ed:d5:e1:d0:64:99:f4:c4:eb:6a:3f:
ed:26:9f:0c:59:d7:8b:15:02:9b:f8:fb:5c:b9:10:0a:bd:39:
ce:6e:19:83:85:4a:6f:1f:3c:16:c6:22:ab:2c:9c:99:b3:86:
95:e4:25:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:57:45 2025 by rpki-client