Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: Lf/kd2omltTgoxbMx+Q3buPL1f1ch3dDzfnxqk5lTXU=
Subject key identifier: 7D:1C:E1:15:01:27:49:06:D8:00:F0:84:78:D1:4C:29:F8:BF:E7:5C
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 019A0FA7D837086B8943381BB436BE7A8BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 14D5
Signing time: Thu 23 Oct 2025 06:00:49 +0000
Manifest this update: Thu 23 Oct 2025 06:00:49 +0000
Manifest next update: Fri 24 Oct 2025 06:00:49 +0000
Files and hashes: 1: 1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa (hash: P+X7bk4xVC2G2mv0GzrMdTNr5FMbR6w5BMTW58Igvfs=)
2: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: xm38dWgztmckHmCHrGXlAUezZJKTXRiLD/gUY1/FBkI=)
3: _GP8StenfvBJOKnQr7M_P7qAzf4.roa (hash: kdSVEH13j0prqXPkHz8Kr5u7PPDHiQCPmIC83dYc1oc=)
4: fzev7_a9OYyMIFNofQlw5RVoFZM.roa (hash: 10wzAQdx79ulrqhu3JqofOZW6+gKOGXZaHawTm1W9iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:a7:d8:37:08:6b:89:43:38:1b:b4:36:be:7a:8b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Oct 23 06:00:49 2025 GMT
Not After : Oct 24 06:00:49 2025 GMT
Subject: CN=7d1ce11501274906d800f08478d14c29f8bfe75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2a:8c:ff:06:99:53:d5:3d:f0:18:4b:05:00:
e2:5e:4d:34:07:a7:c1:c9:45:f8:2e:9a:ce:22:b0:
a2:42:9a:bb:ba:7b:d2:24:62:ae:56:54:6f:ea:68:
21:f1:1e:7d:fd:52:5c:a8:d5:7f:04:b8:82:b9:d3:
cc:73:86:e3:3d:4d:86:3b:b3:05:be:87:05:14:50:
ad:29:e1:3b:7e:00:b4:29:d8:e1:c5:90:d9:ce:d7:
4c:6b:e1:9c:21:22:ec:e7:65:b0:c0:2e:d8:e4:68:
7f:24:95:ae:68:96:fc:3b:51:d9:16:df:bf:78:0f:
74:04:40:1b:05:fa:0e:5b:67:9a:ad:d0:52:ec:5d:
f3:9c:d4:3a:0a:98:ce:54:fb:94:a3:0c:61:46:43:
7e:1c:69:f3:6b:04:c9:19:86:2d:ee:11:28:12:08:
21:67:d2:7d:9b:fd:19:74:b2:d7:42:e1:c1:51:8d:
42:ab:91:7a:76:74:a6:9d:61:e4:03:54:16:3d:ca:
87:1e:8f:93:bb:6c:68:a2:0f:6c:4e:d4:9f:f1:8a:
3f:ea:70:b8:09:39:11:0d:24:5a:42:10:61:2d:8d:
8c:ea:ac:82:76:0a:5d:bd:18:3e:20:9f:5a:6c:de:
14:07:4d:57:c9:78:f1:d2:a3:19:61:9f:f1:a2:e8:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:1C:E1:15:01:27:49:06:D8:00:F0:84:78:D1:4C:29:F8:BF:E7:5C
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:36:d0:f9:52:f1:2f:5e:6a:63:4e:ab:e8:d9:3c:46:1a:3e:
b9:6b:5c:b1:52:40:9d:9e:a8:45:e5:51:4d:06:12:72:02:c4:
ac:55:49:d8:7e:26:06:81:57:0d:e0:74:0a:5d:d8:85:4b:f7:
e7:00:d1:71:ee:80:96:92:6d:11:1a:6c:d8:fc:02:1a:60:56:
79:5c:16:98:c8:9b:cf:82:b9:48:0b:c3:32:38:e3:b5:80:bc:
32:6b:67:02:c3:a2:26:44:4d:9b:f7:2d:27:b9:00:a5:87:91:
90:bd:98:36:87:13:5d:d3:4c:05:ef:4a:e3:82:bb:0c:e6:5c:
40:c5:12:15:85:83:6a:da:49:fc:74:ed:23:61:13:5a:b6:40:
6b:eb:bd:07:07:14:e3:6d:25:e6:31:83:3b:ad:d5:d1:e1:a9:
3d:ad:e8:ef:25:41:4b:55:f8:ea:14:6c:8b:a9:7c:d1:4a:11:
8e:d1:c6:a6:61:0f:aa:95:41:77:33:b9:3b:85:fb:89:dc:68:
5e:ad:10:aa:d6:7f:1c:70:62:45:89:bb:d5:26:44:28:c1:93:
b2:ed:61:76:33:1c:2d:cb:c9:a3:4f:54:8a:48:1e:c5:67:f1:
47:be:a8:7b:aa:0c:5b:8a:d3:ec:89:14:61:09:93:b8:d7:24:
b8:e7:34:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 12:57:02 2025 by rpki-client