Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
File: 7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft (raw, json)
Hash identifier: hPkT76jgCJpLX1A/3KeoZNu1Hrutvd/7faycDn4/u+0=
Subject key identifier: 7C:F0:79:2A:55:9B:9F:63:C8:C5:6D:25:B9:8C:EA:F8:33:12:73:59
Authority key identifier: ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05
Certificate issuer: /CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
Certificate serial: 019A1B3E5F38CEFE6D8904BA997DB6F78BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
Manifest number: 0E
Signing time: Sat 25 Oct 2025 12:01:03 +0000
Manifest this update: Sat 25 Oct 2025 12:01:03 +0000
Manifest next update: Sun 26 Oct 2025 12:01:03 +0000
Files and hashes: 1: 7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl (hash: KXDeAZtZoNwRqeTKI1kzrV3YliWqEhvqfrfOGgLJ5xI=)
2: UljK_JUQC-ApOoQ4pETQI3VRof4.roa (hash: 9Sh2w5nvzyVvg3ugFiToGC0XPk8b1XugbQ07Osz40+A=)
3: hKXa70S3ljEorLxU2kzO1pY1eio.roa (hash: 3x8mJaBH6qD86fie9M/gP0ahSf8iI2csAz50I3eyjQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3e:5f:38:ce:fe:6d:89:04:ba:99:7d:b6:f7:8b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
Validity
Not Before: Oct 25 12:01:03 2025 GMT
Not After : Oct 26 12:01:03 2025 GMT
Subject: CN=7cf0792a559b9f63c8c56d25b98ceaf833127359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:77:32:2d:d8:cb:58:ba:20:9a:24:0f:3b:
e5:49:5a:9c:3e:16:f7:91:cb:3d:e1:b6:ed:ff:3d:
49:07:05:86:a0:c7:41:14:3e:01:ef:fe:42:b5:ae:
d2:e7:8f:03:86:54:2f:e1:6c:4c:00:7c:03:be:10:
df:e1:c8:18:6d:c6:15:b8:40:e1:f4:63:ac:4a:72:
16:0c:5f:f7:4e:b4:96:28:23:10:f9:30:1f:b0:77:
00:1a:c3:2d:f9:d6:42:6b:3b:94:18:68:5d:49:70:
1a:56:f5:a3:3b:e3:da:20:1d:cc:fb:fd:fc:56:d3:
64:41:de:bd:2c:28:f1:d2:2f:3e:5b:ca:b4:ef:7b:
c4:07:f7:a8:20:0e:1a:a7:65:fc:2e:56:40:58:69:
63:00:8b:82:da:45:04:1c:bd:7c:75:e5:47:dc:95:
32:08:e7:02:e0:a1:81:24:24:95:12:90:df:ce:1c:
c0:ac:35:8d:6d:f5:8d:35:8d:49:a2:bf:83:f4:32:
9c:16:f7:25:be:23:73:f5:5d:d6:9c:2f:e8:46:a7:
86:96:65:5e:7d:fd:fc:78:cc:01:ba:b1:13:11:48:
e0:0a:d2:67:7c:7e:a8:19:11:9b:e7:a9:d6:23:61:
75:6b:13:71:f3:1d:85:3a:8e:0f:62:e6:6d:26:a1:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F0:79:2A:55:9B:9F:63:C8:C5:6D:25:B9:8C:EA:F8:33:12:73:59
X509v3 Authority Key Identifier:
keyid:ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7e:99:bf:cc:ea:b6:61:dd:9a:b9:f2:36:52:c1:20:a1:c4:
6a:af:b0:e0:4f:40:a9:22:5b:58:31:b6:5f:f3:15:e2:34:9b:
59:ba:82:4e:15:ec:16:2a:21:27:59:27:6d:3f:08:69:b6:6c:
4b:00:ec:1a:74:0e:88:a4:0c:b4:5d:55:2d:ba:7c:a0:60:84:
26:c7:a7:6f:e0:28:cd:7c:5c:b8:d9:c1:ee:13:b2:e0:d1:27:
e8:5d:5c:4a:b3:8e:95:68:b5:54:9d:04:aa:5f:75:f4:1d:03:
dd:fb:df:c1:9c:75:cd:f3:d6:00:13:91:9e:97:73:6b:5d:24:
ba:31:d9:c7:49:1b:a0:4c:ee:e3:30:71:e9:8e:f0:93:23:4e:
ed:40:ee:af:15:32:80:fa:23:6b:3e:6f:6d:7b:a6:ed:11:fa:
25:d6:49:09:ab:2e:f3:c3:f2:42:2c:48:65:6c:51:db:44:f8:
56:ed:bb:fc:21:ca:f8:18:35:d8:ad:87:ff:bd:68:a1:a5:1d:
82:d9:ce:12:1e:af:6f:be:be:ca:d1:0a:e0:7b:92:3c:fe:6e:
80:12:c1:53:71:ed:09:f1:a7:1d:1b:6f:75:03:c3:ea:1b:b9:
bf:5d:76:fd:be:6c:34:9b:76:06:d3:50:8f:be:83:8c:47:cb:
b7:39:77:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:53:02 2025 by rpki-client