Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
File: 7Sj1d0agBa51qPX56S99ItYcjTQ.mft (raw, json)
Hash identifier: vNNVEhwbbys5W2Y7105ujhtP4IY1LvyJYNIbRzcmp6Q=
Subject key identifier: 93:5A:7F:E8:B0:81:06:26:2A:02:DF:04:59:7E:36:F3:13:8B:20:12
Authority key identifier: ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
Certificate issuer: /CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Certificate serial: 019A28C29486543B3AD429FC95B83182ABFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
Manifest number: 0837
Signing time: Tue 28 Oct 2025 03:00:31 +0000
Manifest this update: Tue 28 Oct 2025 03:00:31 +0000
Manifest next update: Wed 29 Oct 2025 03:00:31 +0000
Files and hashes: 1: 7Sj1d0agBa51qPX56S99ItYcjTQ.crl (hash: oVA6fvvG0w4apZBnyW8Aws98mRGYfkIC7A7OUl8C/lM=)
2: ULNxJvM-wJGOuJON7ivPOpKjWvM.roa (hash: 4PAm04+UjI196vMzGXZVMv+MQU5u1QViV4G3soVxN0g=)
3: qk0RdqiwIc4Pk8WjRSXETbEeD3w.roa (hash: CT5EukhWBYETi8Vaj273DWcEqR9wWanbCPEBswUNZM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:94:86:54:3b:3a:d4:29:fc:95:b8:31:82:ab:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed28f57746a005ae75a8f5f9e92f7d22d61c8d34
Validity
Not Before: Oct 28 03:00:31 2025 GMT
Not After : Oct 29 03:00:31 2025 GMT
Subject: CN=935a7fe8b08106262a02df04597e36f3138b2012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:39:2e:8a:ea:51:fe:4e:c4:a3:4f:c6:42:cb:
e9:16:a9:19:8a:46:63:52:ed:cb:71:da:41:38:6f:
d7:32:cf:f2:c4:cf:ae:54:ab:6d:0c:2a:77:d0:b3:
d9:62:f2:3f:1b:e7:f6:c5:74:7e:ae:f3:84:58:df:
d8:8e:11:a2:c5:f0:50:a6:d5:9e:0b:42:40:34:96:
de:35:4e:c3:6b:75:bf:05:ea:da:0f:db:d5:81:83:
bf:80:43:78:ac:e6:5f:bb:24:11:55:70:ff:e4:73:
a7:72:17:83:97:dd:63:5c:d6:18:03:c1:82:42:a8:
af:bc:88:bf:f5:ef:6a:76:ba:74:cc:ae:9d:a0:05:
0a:e3:93:53:bb:82:d3:7d:b7:ab:aa:bd:f1:78:e7:
f0:74:c8:64:a8:5c:fd:bb:59:53:12:0e:c2:8f:fa:
b4:6c:26:d4:e0:d5:4b:45:3b:49:ee:d7:3d:c3:b3:
89:43:8a:7c:7c:4c:80:20:dc:1c:b8:54:cf:22:31:
12:e3:e5:35:dc:46:4e:11:3f:bb:36:12:00:0d:50:
c0:5e:c9:89:1b:ac:d1:d6:8f:60:3c:e5:a9:35:ba:
f7:55:8d:43:c5:d4:82:c9:53:c9:9b:fd:cf:1f:75:
68:5f:bf:b0:97:d0:29:0c:6d:99:8c:98:78:6a:27:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5A:7F:E8:B0:81:06:26:2A:02:DF:04:59:7E:36:F3:13:8B:20:12
X509v3 Authority Key Identifier:
keyid:ED:28:F5:77:46:A0:05:AE:75:A8:F5:F9:E9:2F:7D:22:D6:1C:8D:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Sj1d0agBa51qPX56S99ItYcjTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/753208-a5a4-4b71-8e74-a7eb38d48c78/1/7Sj1d0agBa51qPX56S99ItYcjTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:76:3a:63:b2:a0:78:eb:84:97:cd:f6:c9:bc:42:cb:6c:1b:
7a:67:9d:f6:f9:05:3d:07:2c:08:e3:ec:de:d7:fb:c1:a7:54:
ac:75:69:7b:a3:f0:ca:9f:f5:2f:b5:f0:76:d1:aa:5c:9b:fc:
f9:3e:93:07:a7:c7:16:5e:ef:86:c5:1d:76:93:dd:49:a7:0c:
07:cc:d3:92:d2:60:f9:45:34:d8:03:58:f7:73:ca:7b:71:d7:
eb:0f:42:cc:91:4a:87:c8:8d:cc:2f:6d:13:5c:92:04:26:e6:
ff:cd:2a:2b:be:5e:34:75:78:7f:e0:d7:2e:a6:4b:fb:45:36:
cd:7d:fb:fa:f5:ac:c8:f0:18:98:4d:ea:33:c3:fa:08:0e:ce:
46:7c:ab:0f:5b:a3:0a:aa:23:ab:81:1e:26:e9:58:97:ad:0c:
35:9f:f1:50:3b:a8:e7:2d:50:a6:f5:99:6e:9e:a3:7c:4a:09:
39:c9:ea:de:51:46:1b:75:50:93:fa:4f:ad:94:55:ef:cc:c5:
08:f8:a8:35:23:2a:63:dc:8c:2e:30:4b:27:6b:8d:da:55:84:
d8:c9:30:72:86:b5:35:8f:88:f0:0e:34:05:95:0a:15:bd:dc:
30:2b:68:d6:25:92:9c:cc:87:2a:4b:62:e4:5d:0f:08:c6:53:
b2:cf:b5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 07:14:42 2025 by rpki-client