Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
File: 7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json)
Hash identifier: vbFTdugbBIBfT7yY05mPh+r2Qv4ieT5db6Pz7bVy8Bw=
Subject key identifier: CC:2D:02:58:DB:6B:F2:A3:5E:91:1A:4C:1B:BE:9C:FF:2E:22:D1:6B
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Certificate issuer: /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial: 019A2855CF7E51062628CAF48FB1B4E34492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
Manifest number: 058C
Signing time: Tue 28 Oct 2025 01:01:43 +0000
Manifest this update: Tue 28 Oct 2025 01:01:43 +0000
Manifest next update: Wed 29 Oct 2025 01:01:43 +0000
Files and hashes: 1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: s190HKzhZaznn5LxnQm9E3Kx4Y4Ql10hdUgtzl95WpI=)
2: ciVuDSG137gexnzKwYgFKSw1JAo.roa (hash: Lu0ROEw0vfSrXmfo6gMAWwlGmmUA9I7hRO+NmRoxqGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:cf:7e:51:06:26:28:ca:f4:8f:b1:b4:e3:44:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Validity
Not Before: Oct 28 01:01:43 2025 GMT
Not After : Oct 29 01:01:43 2025 GMT
Subject: CN=cc2d0258db6bf2a35e911a4c1bbe9cff2e22d16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:6d:b4:1a:a2:ad:fa:cc:ee:87:56:89:47:
c8:17:f9:e1:f0:90:d6:69:b7:71:6a:bb:48:10:c6:
58:ed:32:ce:68:45:d3:19:72:79:41:6b:6a:63:16:
d2:54:4f:df:e5:76:f0:67:a0:de:f8:60:1e:a2:a8:
ed:c9:f1:34:b4:6d:93:63:6b:26:21:22:66:9e:87:
53:ff:ca:2b:09:df:16:7f:f0:ef:d1:fb:12:c0:a1:
f7:a3:aa:c5:ab:af:99:a6:7e:74:81:38:64:82:4b:
e7:8d:61:b6:96:1b:dc:83:55:c1:c9:f6:1e:1c:32:
68:32:0c:94:5f:e3:05:79:19:89:f5:4e:3e:d5:60:
47:d1:58:d9:b8:ea:d7:31:22:5e:40:23:02:7b:14:
98:d7:f0:1d:5c:e1:aa:c0:7f:06:a6:5f:e4:78:4b:
7b:40:01:cc:2b:4b:4e:ca:e1:70:c7:f5:c8:05:7a:
1d:33:7a:0c:be:36:11:de:87:ce:3f:88:51:b1:01:
d8:26:d6:09:09:de:36:26:d3:66:79:cb:68:e1:9d:
5d:e3:ab:a8:14:28:98:f5:01:52:c7:7b:be:76:84:
03:ee:9d:df:db:80:c7:b0:96:f7:59:b4:74:0d:54:
ed:34:b6:a0:fd:86:79:73:05:28:d4:1f:fe:b2:88:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2D:02:58:DB:6B:F2:A3:5E:91:1A:4C:1B:BE:9C:FF:2E:22:D1:6B
X509v3 Authority Key Identifier:
keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a8:97:87:ef:7e:a7:e8:54:0d:50:8c:1c:fb:e2:f5:06:75:
64:12:3b:f5:11:c6:53:e2:98:da:e5:5f:aa:5b:ec:c0:43:f8:
11:80:7b:a3:6e:e7:c2:a4:3c:2a:c6:9b:a5:49:17:64:c1:23:
71:95:fc:7e:f6:57:d1:f8:ba:1c:d4:a2:78:82:b9:51:d3:5f:
a4:27:ea:a4:17:bc:5e:9b:1e:82:f3:c4:03:d4:12:bb:9f:56:
f0:bf:55:54:eb:35:5a:d1:3c:64:62:fb:a5:6a:a2:f9:7c:ab:
31:ba:4f:8a:07:94:32:0a:2a:0e:ed:11:59:5c:da:7e:00:bb:
a1:45:34:e1:2d:26:08:f9:e1:49:d6:c4:ba:6c:8f:6c:77:84:
ab:1f:c2:e6:da:cd:79:66:42:9f:a5:bf:fd:f7:a7:00:64:b1:
7f:93:9c:42:28:e1:3a:7e:ac:48:fe:29:b7:5f:f7:76:6b:5b:
d8:a5:29:ad:7b:64:77:24:ad:45:c1:9f:5d:09:6d:b9:bc:68:
46:57:80:2d:6b:65:e9:2d:49:ff:94:4b:2e:48:2a:24:fd:5c:
23:f0:32:4d:d2:86:49:bf:02:ca:91:85:79:4e:0c:d3:11:6d:
ad:14:95:1b:0f:f2:e4:40:e0:06:9a:f8:a5:bc:0b:75:41:dc:
18:cf:3c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:48:23 2025 by rpki-client