Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
File: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft (raw, json)
Hash identifier: Awqm5aIRExxmsBDgpNxQP1AOsoTS5zAJeMC8Ru4iUj4=
Subject key identifier: 13:59:B0:5A:92:C8:E1:F3:6B:5B:C1:8B:45:AF:56:CE:87:BE:CB:A7
Authority key identifier: EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
Certificate issuer: /CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Certificate serial: 019A28F9C24AF0E8C32B8A36F48886278116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
Manifest number: 16FA
Signing time: Tue 28 Oct 2025 04:00:48 +0000
Manifest this update: Tue 28 Oct 2025 04:00:48 +0000
Manifest next update: Wed 29 Oct 2025 04:00:48 +0000
Files and hashes: 1: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl (hash: d5eYzTFLSWC4qSGU3YwADJUyDL7uBpPV1YvRJwmgHxw=)
2: wIp_Owgcqosf4Zfkdoq2QLvnJUw.roa (hash: 1qal0bkeh/nfDvlv2LnznS6FzwmXQAEY+XJKvfyD2Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:c2:4a:f0:e8:c3:2b:8a:36:f4:88:86:27:81:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Validity
Not Before: Oct 28 04:00:48 2025 GMT
Not After : Oct 29 04:00:48 2025 GMT
Subject: CN=1359b05a92c8e1f36b5bc18b45af56ce87becba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a7:9b:5b:30:7c:2d:1f:75:50:b0:b0:5f:b5:
f5:f5:dc:b5:3f:dd:0e:f8:6d:e1:29:f2:d5:d4:e2:
48:59:2c:71:5d:92:6d:2b:d9:50:c2:f0:4b:ef:4b:
6a:37:61:7c:18:be:6a:6f:1e:3a:d7:57:a3:a2:87:
83:6a:db:9c:07:1c:78:f4:3e:a5:5d:72:db:a3:e8:
96:74:fe:88:80:65:e7:6e:17:01:ca:95:68:2f:27:
35:f9:85:d8:cc:8b:46:90:5f:ba:85:8a:4d:17:c6:
2b:91:d0:c9:cb:de:f5:1f:b5:44:e3:61:04:a4:80:
1d:3a:26:c2:f8:7d:eb:39:53:c2:2d:65:94:1f:cd:
54:bc:a9:57:15:a1:79:56:0b:94:dd:fd:0d:55:c4:
a3:16:71:fd:dc:15:97:ae:a3:f0:4a:f7:dc:b0:eb:
fb:9a:ce:35:d5:7d:74:86:08:5a:38:9d:eb:5f:8a:
9b:67:fb:02:7d:b6:0d:b2:24:e9:82:1b:f6:5a:2d:
e5:aa:0a:a5:cb:b0:71:30:03:31:53:db:56:f7:16:
fa:18:2f:92:15:27:c6:a0:43:48:1a:02:16:76:a5:
cf:08:5c:bd:46:af:00:06:a0:e3:be:45:02:d1:35:
3d:52:7d:94:3f:ce:ab:5a:21:8f:ff:44:59:71:f2:
76:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:59:B0:5A:92:C8:E1:F3:6B:5B:C1:8B:45:AF:56:CE:87:BE:CB:A7
X509v3 Authority Key Identifier:
keyid:EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e7:7d:4c:63:67:ef:da:ab:3c:76:f1:e7:94:d3:42:88:05:
c3:e8:9a:eb:55:fb:b2:f7:ae:29:d7:ea:76:24:79:ec:81:95:
f8:66:24:c4:d6:28:fb:54:c5:44:c3:5c:6e:a5:e1:11:58:0f:
d3:aa:4e:44:8e:c1:fd:44:08:bd:94:76:6d:a1:35:b8:bc:5c:
8f:75:f1:35:6b:8f:4e:1e:14:2d:36:1e:37:ec:c4:48:57:52:
32:bc:f1:ba:98:42:01:39:11:42:06:00:4b:0d:45:3f:65:29:
86:aa:68:57:91:1f:b6:0f:0a:16:e6:fe:3a:68:53:e4:4b:ce:
79:b4:01:8e:22:26:3b:42:ab:c4:82:81:87:3d:f6:ba:d6:16:
f4:8f:1d:64:11:e2:cf:2a:dc:3f:f9:82:ae:35:74:66:35:68:
2d:ba:5e:d1:ab:db:12:8d:18:88:bb:c9:95:19:42:75:a7:65:
6c:ad:c0:05:2c:6d:5e:28:e6:78:b5:52:02:42:5e:96:00:cd:
43:92:3f:1c:81:85:a7:a9:fe:60:3b:92:fc:df:10:7c:6c:0b:
12:b2:ce:bb:bc:f7:ec:b4:2e:54:f4:9f:3a:cb:8e:c6:e6:9f:
02:c4:7f:fc:9f:49:a0:31:98:0d:79:b4:15:24:ca:7e:04:6f:
d4:fc:f1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 08:08:10 2025 by rpki-client