Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
File: 7gc50FKNy0_OV40R9-w0sON0Us8.mft (raw, json)
Hash identifier: HPcelQQ9FZyFsv42ESm1vTIi6rEs5kk4Noouap72jXk=
Subject key identifier: AE:0F:F5:63:A7:9A:A3:4B:7B:BE:EC:EC:FD:77:CE:68:16:EB:EC:67
Authority key identifier: EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
Certificate issuer: /CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Certificate serial: 019A0BCB117A2A0CB4C17AF588AA298420E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
Manifest number: 1338
Signing time: Wed 22 Oct 2025 12:00:48 +0000
Manifest this update: Wed 22 Oct 2025 12:00:48 +0000
Manifest next update: Thu 23 Oct 2025 12:00:48 +0000
Files and hashes: 1: 3hz4WnfCKqTTo5gx2OgAH3xz2wM.roa (hash: b5E7fEkFFhTI5Qk+1okXO6TI7l2fiiznCI57htXMWcg=)
2: 7gc50FKNy0_OV40R9-w0sON0Us8.crl (hash: BcKR3Ei/TGQNMlnbKqtvV8DwzArNIul3cjs447nkQN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:cb:11:7a:2a:0c:b4:c1:7a:f5:88:aa:29:84:20:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee0739d0528dcb4fce578d11f7ec34b0e37452cf
Validity
Not Before: Oct 22 12:00:48 2025 GMT
Not After : Oct 23 12:00:48 2025 GMT
Subject: CN=ae0ff563a79aa34b7bbeececfd77ce6816ebec67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:b9:c2:b7:55:d2:93:f7:42:36:cc:08:94:
25:64:05:57:5a:5b:79:d8:7e:52:87:55:94:6d:34:
f4:06:fd:bc:7d:96:ef:9e:18:68:03:0b:76:36:82:
12:a6:e8:b1:ce:ee:99:46:c5:0d:84:f7:35:17:6b:
4e:63:f5:fb:00:68:c3:e9:fa:e4:40:00:26:6d:1c:
a9:86:1f:a1:95:eb:9c:6c:51:ba:99:ec:db:25:03:
a7:7a:77:c6:5c:ba:29:d9:4c:2e:bc:9c:a5:4c:2b:
d1:f1:95:a4:4c:c3:a0:5b:26:98:70:8d:00:c8:db:
b9:8f:d8:10:7a:5b:b9:72:db:e2:11:83:a1:65:fe:
3d:ed:d5:c2:02:9a:81:8a:f7:22:9d:ff:f5:48:36:
f0:03:8f:2e:1f:5a:81:a5:ca:21:a2:8b:e5:16:87:
31:2a:c5:22:e4:73:c0:96:f2:77:c2:b1:6b:db:56:
f1:dd:46:54:53:94:18:df:fd:1b:5e:63:e3:cf:e0:
3b:71:66:9c:51:9b:76:d3:70:d5:16:b0:7e:ee:29:
e4:15:e4:47:06:a7:6a:dd:29:a2:25:2e:33:17:75:
40:79:77:f6:65:6c:ae:5e:fd:48:ff:a9:be:3a:54:
bc:70:86:38:3f:6b:ea:f4:c7:d8:54:0d:35:ca:ed:
bd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0F:F5:63:A7:9A:A3:4B:7B:BE:EC:EC:FD:77:CE:68:16:EB:EC:67
X509v3 Authority Key Identifier:
keyid:EE:07:39:D0:52:8D:CB:4F:CE:57:8D:11:F7:EC:34:B0:E3:74:52:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gc50FKNy0_OV40R9-w0sON0Us8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/853ee3-3a4f-4d95-9bdb-b03c2fbdc644/1/7gc50FKNy0_OV40R9-w0sON0Us8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:88:bb:5d:d7:5a:52:c7:bf:13:c4:e8:23:06:b6:67:41:10:
0c:20:10:10:ca:b2:39:5f:4a:72:cf:1f:2e:8e:8e:df:e8:3e:
2e:67:d6:6a:8c:35:f7:8e:05:0d:88:15:4f:9f:d1:29:90:4c:
81:95:7e:c5:72:f7:15:15:20:5f:66:3f:6d:ee:cc:d3:0f:95:
0b:06:c0:a0:0c:c5:32:d5:6c:d3:b7:dc:14:6d:f2:c0:43:d8:
be:a4:dd:88:59:47:00:25:7e:40:88:1c:37:19:5a:47:09:d7:
cb:d6:15:2c:de:ce:4c:e5:5b:59:31:4a:12:fe:95:55:d0:85:
d4:93:3f:22:f4:d2:60:08:30:b0:d9:3f:bd:fe:16:67:2d:f4:
11:22:0a:b8:e3:36:e1:96:9c:15:d0:da:cb:e0:6e:05:25:0f:
23:fd:e9:42:c4:51:d9:df:40:23:2f:fc:28:12:90:84:df:4c:
42:0a:6b:0f:5b:c7:55:b4:84:ee:3a:d0:c1:64:dc:20:8b:53:
86:fd:cb:7e:3c:b4:da:84:e2:ce:7e:a5:b1:4a:82:e1:2b:ee:
fc:a9:d2:0c:95:fb:2b:25:ba:00:61:81:e7:51:0f:8f:a7:60:
0d:9f:83:04:4d:ee:ab:63:95:99:5d:77:e9:65:76:5b:8a:9a:
32:e1:8c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 20:28:59 2025 by rpki-client