Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
File: 7512O0ngJKe2oZ6vffuYkRqclMg.mft (raw, json)
Hash identifier: gxhv6AVweREk9kaU1dh+uJgWj9M7+fDW+fc05et/9oE=
Subject key identifier: FA:4A:33:BB:96:18:91:93:96:1D:81:61:49:FE:5D:71:2B:7E:2E:3A
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial: 019A1D2C73B7EB505B3EC6B8AF8C66E8E85C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
Manifest number: 1700
Signing time: Sat 25 Oct 2025 21:00:43 +0000
Manifest this update: Sat 25 Oct 2025 21:00:43 +0000
Manifest next update: Sun 26 Oct 2025 21:00:43 +0000
Files and hashes: 1: 7512O0ngJKe2oZ6vffuYkRqclMg.crl (hash: ME8K0bSFJ3SUAmKmqIJVuaO2Z/tQ0KC/j/5atFllzcE=)
2: owMuSAzaSSpr7jsUSC0mWrVKDU4.roa (hash: XKmvqtHVDmpyZyY4yBF/VjW7n8WfcDAr9Yhc2CLZYr4=)
3: wRR0qyJ668ZsidDqNSxr1Clq3nA.roa (hash: XG9/qFjv+RhFcHYlR8kyh9vL+Qr+lHMVji/NbW0hX+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:73:b7:eb:50:5b:3e:c6:b8:af:8c:66:e8:e8:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Validity
Not Before: Oct 25 21:00:43 2025 GMT
Not After : Oct 26 21:00:43 2025 GMT
Subject: CN=fa4a33bb96189193961d816149fe5d712b7e2e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:24:29:29:54:bb:14:2f:c9:fe:37:1f:d6:
92:c6:61:fb:10:5f:f0:41:33:37:81:d8:ca:40:99:
52:4b:78:35:d8:21:01:5a:2d:7a:cd:3a:39:ec:e8:
6a:bc:f1:7b:09:8a:03:b2:de:68:8e:5c:94:80:64:
4b:90:4a:92:15:21:5b:d5:ac:66:a6:ef:a1:b9:e9:
f6:ab:25:b8:50:00:f8:8a:e2:56:7f:c3:36:66:b4:
8b:4b:bb:68:b4:95:10:9f:78:52:60:c6:cd:de:c0:
6c:74:28:9f:d8:c0:d2:68:cf:6f:a2:fc:99:71:27:
2f:cd:1b:f7:39:ae:f9:93:f4:60:2e:da:91:d1:33:
45:68:2f:07:5c:37:ff:da:fa:38:d6:7f:22:19:73:
2f:77:38:53:11:5c:fa:4b:fd:56:78:9a:7d:ed:88:
e3:0c:78:b9:54:3f:53:ef:d5:4d:9a:17:b4:91:e1:
c9:8d:2b:ae:65:24:68:15:c6:66:6a:35:8a:61:50:
f1:b9:d0:04:ad:50:0b:7b:e8:24:0f:9b:8f:45:f9:
1a:c3:fa:d1:74:2f:66:27:3b:da:2f:45:c2:e6:91:
5e:9e:18:a4:c7:8f:7e:b8:d1:42:a3:98:95:98:59:
aa:ed:18:a2:33:e2:67:06:cb:76:52:33:c1:8b:8a:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4A:33:BB:96:18:91:93:96:1D:81:61:49:FE:5D:71:2B:7E:2E:3A
X509v3 Authority Key Identifier:
keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1e:38:2b:ad:72:df:32:44:d9:e1:54:9b:47:ec:0b:87:08:
d8:d7:17:db:1c:31:cd:5b:2c:f8:30:77:a2:b2:3e:c9:44:88:
9f:e9:01:65:98:e8:c7:a9:ea:66:68:4c:3f:f3:0d:c2:9c:9d:
e5:65:6d:ae:ec:86:ca:26:19:b0:4c:bf:ed:68:a1:66:87:19:
93:3e:9e:7d:b4:64:74:c2:bb:4d:e5:26:7b:e9:de:d8:fc:46:
f5:2a:dd:41:3e:75:57:33:58:dd:a2:82:a7:67:d1:b8:25:19:
79:f4:13:15:a9:d9:cf:99:4e:62:05:a2:b2:ae:ff:92:d3:18:
48:ac:b1:40:da:b6:99:18:01:8a:aa:e7:fa:e5:cd:6e:f7:47:
24:50:ee:ca:9f:b4:42:fd:f8:77:83:4d:cd:84:6f:8d:76:c3:
53:70:8b:2a:d2:5e:be:9d:21:a4:ab:5a:f2:75:18:dc:21:b9:
0b:2c:ec:e8:b0:f4:2b:da:0e:4f:89:2c:2f:84:de:7b:d1:e8:
8d:fb:4f:c4:12:65:66:67:cb:9a:56:8b:88:eb:9d:ab:7e:e6:
13:b1:cf:47:93:79:f7:3f:95:84:c7:00:7b:86:e7:70:37:eb:
61:5c:39:c9:12:d2:59:ea:1a:07:2f:8f:b3:9a:73:f0:4a:36:
58:3c:8d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 23:04:36 2025 by rpki-client