Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
File: V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft (raw, json)
Hash identifier: EeKnBJb/Lh7QBhe/O/ja06juto4vk2xdkS6gM2YYo8A=
Subject key identifier: 91:06:1F:77:1E:C6:EC:43:0B:95:A8:F1:91:9B:5D:CA:61:A4:C5:96
Authority key identifier: 57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
Certificate issuer: /CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Certificate serial: 019A32338383086324A4C1CECABF4AC08B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
Manifest number: 1690
Signing time: Wed 29 Oct 2025 23:00:28 +0000
Manifest this update: Wed 29 Oct 2025 23:00:28 +0000
Manifest next update: Thu 30 Oct 2025 23:00:28 +0000
Files and hashes: 1: V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl (hash: agtKPYh3trSXirFb4CnphycwPdw9DdiKpOg9Jfl1Pmc=)
2: We1vlMV5F0WOOHhpojHWiZ1mpOk.roa (hash: kb4mbEAAu4J7YcsoL9X19jWq28MWG1KM2kpIpY/qIwQ=)
3: uXQZBDj9ZtkXG_83Mo1I8Z6Fydw.roa (hash: SGdXI5i5fIsWQdG6sYWkGmfc2P0KTqH/WAPHrOQF1V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:33:83:83:08:63:24:a4:c1:ce:ca:bf:4a:c0:8b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Validity
Not Before: Oct 29 23:00:28 2025 GMT
Not After : Oct 30 23:00:28 2025 GMT
Subject: CN=91061f771ec6ec430b95a8f1919b5dca61a4c596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:44:c9:22:c4:a6:1b:e8:dd:44:75:0e:08:
34:1f:d1:17:04:7a:7b:96:45:77:74:96:8c:fe:01:
39:56:7a:3a:74:3d:c4:f8:ee:a1:e6:86:e8:94:4e:
4c:9f:90:ab:1b:89:33:99:7c:03:36:1c:91:fc:61:
8c:20:13:5a:14:47:8b:77:fc:82:53:bc:e2:31:3c:
77:72:aa:c8:98:76:98:f8:b8:c7:f0:79:85:bd:1d:
40:ac:b9:4c:38:f8:f3:cb:c3:93:c8:60:c1:6a:6f:
b7:03:83:bc:4f:9b:75:7a:81:e6:48:cc:97:a6:e2:
b9:8f:7f:fa:c6:70:3d:e5:9b:19:b7:64:df:71:90:
4c:fd:47:0c:ff:c8:d8:95:47:8e:3d:11:0e:bd:ff:
a6:16:ae:c6:60:75:04:9c:9c:41:9c:ec:4b:c1:3f:
03:17:11:61:07:3e:e8:54:3b:4a:70:b0:69:1b:d0:
17:6e:ab:7c:1a:77:8f:2e:da:f4:94:d5:21:96:92:
b4:4b:bd:a2:25:ad:3b:82:f9:fa:b6:64:41:3b:79:
29:00:62:0a:fd:43:49:41:b7:2f:26:94:8f:57:09:
f2:52:5e:0a:51:60:0e:9e:2a:9b:39:bf:78:98:18:
c1:61:94:5a:16:d4:e5:04:13:bd:69:90:05:ec:4e:
5a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:06:1F:77:1E:C6:EC:43:0B:95:A8:F1:91:9B:5D:CA:61:A4:C5:96
X509v3 Authority Key Identifier:
keyid:57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7e:a6:4e:9e:a6:0b:2c:7d:6c:0c:c6:c4:4d:2b:c8:b7:9b:
ba:28:f7:6e:4f:ad:69:78:b1:90:3a:4d:ae:77:be:7e:23:01:
03:ad:d0:28:67:c9:5b:c1:0c:9e:de:c3:f3:3e:f3:77:cb:c1:
40:a4:c5:a5:3f:06:86:cc:4d:30:37:7b:77:c1:b6:de:f4:5d:
a3:dc:44:be:04:ed:bb:f0:05:fb:a0:76:03:57:a3:ee:94:86:
e1:e6:9a:eb:70:c2:c2:0a:68:bd:25:60:fb:36:55:c5:fc:98:
a4:6a:99:d3:2f:7f:dc:dc:b7:25:39:36:50:58:8d:a0:ff:1e:
9a:b4:98:3b:cf:42:13:cb:23:0f:3a:5b:1e:df:c7:64:4b:fa:
81:6f:6b:44:84:3a:b1:83:30:e1:69:75:24:c6:4d:3f:6f:8c:
65:3c:2e:b9:fa:a5:d9:05:c5:65:21:d9:dd:1e:55:8a:8a:99:
a2:6e:bb:d3:bd:58:55:d6:6b:5a:28:f3:99:6b:a6:bc:91:43:
10:23:ef:eb:9f:8e:9a:21:c1:4a:ce:5c:89:cd:4d:dc:e8:df:
30:2a:6e:28:5d:f3:90:9c:4b:d6:d1:ba:ae:d3:35:87:10:56:
b1:56:54:82:e0:69:ac:15:90:b6:52:a4:d0:e3:29:0a:f5:59:
05:1b:53:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 06:40:23 2025 by rpki-client