Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: xOFd9w9SB+qVU8xLw5hqM8/4pjmpZ8HbmPz0gHrnhFM=
Subject key identifier: 99:4C:75:F5:9E:29:DA:C0:95:58:47:47:B6:3F:66:CF:97:5A:45:4F
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 019A1F1A4BFD3FD6D7F9EE1B49F950BA5A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 1710
Signing time: Sun 26 Oct 2025 06:00:08 +0000
Manifest this update: Sun 26 Oct 2025 06:00:08 +0000
Manifest next update: Mon 27 Oct 2025 06:00:08 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: 5II2PM1b+GdPAo9TH1rGfVM8CZolTx+t2iu/nDgJGj4=)
2: EhgF2mlZkTj1FsMim3C6v7cm_Vw.roa (hash: AvgglEwZVk2/q4AkVtm47F0tRAyngMt6ySeFX4JReQo=)
3: MiQ5lO70RTIllrRi3q-oV9hjYQY.roa (hash: bCltxRSzrKGlzGDkjY4BpBmmHNltm/4kHnZFojNlryM=)
4: USr1BZseWrfiddVmQ3oagoYeVS8.roa (hash: fHK4bL/1/KZuBDBsjanJjPnUX5OQraHpiXiVTlsikY0=)
5: YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa (hash: fh8nT5vZdM5ZHaPxQ043knM/D5f5HwhE2yBZCYzTFqQ=)
6: afEdQgqnbCftaot9zEVr5N_KEik.roa (hash: Lhf9vxXJqsESp4nJxNUJAzjKFEVMzT7S69LVaasmd6w=)
7: rELj50bmqX-dlIZz4LmRngTG7Ls.roa (hash: Dvzjy4JJ4c7OB88K3L17CIigy3BXYYRK2W4QmjOw5Z0=)
8: tzvqdjfI-5GkWfLXDw0rhlyGwjE.roa (hash: WRtCEE9bn80NcIoJC83Nzrz1w5Lqw7rz3krWgHW5q2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:4b:fd:3f:d6:d7:f9:ee:1b:49:f9:50:ba:5a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Oct 26 06:00:08 2025 GMT
Not After : Oct 27 06:00:08 2025 GMT
Subject: CN=994c75f59e29dac095584747b63f66cf975a454f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7c:03:85:9f:51:1d:bc:1e:f1:d0:1a:4a:f6:
87:ff:6b:ee:b5:7c:68:12:8e:52:c6:67:c6:e5:bb:
e6:bd:bb:c8:3b:4f:45:4b:14:26:d2:9e:9f:15:0a:
30:9c:28:49:4c:70:4a:a7:73:b4:db:2d:68:10:b7:
b0:c5:4c:85:ba:6f:38:4d:2b:b7:ff:55:77:28:00:
93:99:0d:f5:9e:31:31:62:d6:c7:7d:cf:ea:e2:77:
60:8a:7c:f9:b2:d3:d4:25:b9:42:91:9b:c3:37:8c:
eb:61:dd:76:aa:5e:6f:21:71:9e:c7:f1:fc:66:27:
01:a2:b3:6b:99:25:73:84:28:f8:83:c7:7a:54:62:
d5:41:fc:3f:7f:fd:7e:26:13:35:f4:14:8f:3c:69:
78:cc:d5:3f:30:ba:0f:11:be:2b:f0:d1:83:4c:57:
f8:ae:4c:40:57:85:69:4c:c5:75:72:2a:3a:df:a8:
a7:52:bb:29:99:ae:c8:cb:bf:8e:7c:e2:ae:d6:a3:
69:90:57:30:22:ea:40:f2:9f:db:19:ef:36:62:dc:
e7:72:2c:99:31:d3:94:61:27:47:11:ec:5a:0e:a3:
13:4f:7c:12:eb:a1:1b:1d:2e:35:cd:0b:91:c0:6f:
86:7d:23:58:42:85:bc:00:4a:9e:77:18:a8:28:6f:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4C:75:F5:9E:29:DA:C0:95:58:47:47:B6:3F:66:CF:97:5A:45:4F
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:3b:b7:ec:5e:b2:9b:e3:77:72:57:50:15:5e:ff:2d:70:83:
6e:7a:04:d3:86:50:07:ac:62:0a:f5:d1:59:1a:90:d1:04:9a:
4c:63:2f:3e:c0:4c:57:29:3c:8e:94:3f:80:90:99:39:22:4b:
21:a2:c4:2f:f2:11:4b:c8:7e:0e:f1:62:73:e5:80:78:7a:f6:
e2:9c:9c:d5:0d:17:48:47:ad:03:3e:0e:77:25:15:aa:83:f0:
f9:44:48:44:84:a5:ad:5c:a4:46:e4:7d:c2:66:2b:4d:4e:ad:
97:7c:7d:d6:72:9f:a7:af:47:5f:09:72:af:ed:a1:ec:e6:8a:
19:53:4b:70:62:2c:b9:59:5e:d6:ba:71:df:2f:f2:61:b5:7b:
03:8a:86:cd:4d:f0:d7:ab:e0:17:46:58:4c:c4:ad:01:8f:c1:
e5:3f:57:5f:15:96:d5:13:3e:8f:cb:24:7d:a0:76:8d:e0:72:
9a:33:ad:d5:0e:c2:47:ab:31:e9:e3:c5:78:92:70:51:a1:ec:
a2:1a:97:2e:6d:31:c3:74:38:32:b2:89:92:08:24:d1:02:1c:
08:7c:0f:de:03:46:79:51:ee:b4:01:6c:75:f4:0b:e5:61:76:
b1:d0:e0:47:c8:c1:bc:a4:6c:68:5b:dc:32:ce:08:9a:22:b2:
2b:e2:1f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:55:57 2025 by rpki-client