Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
File: e7M4LBagpWFZkNS85jTcUWgvLqo.mft (raw, json)
Hash identifier: suZWU3XwvD/pcLk1kpmosbmfCYFMvLF7+VbP5SxYOzo=
Subject key identifier: 5A:0C:4A:30:5B:E2:DC:EE:C7:B1:EA:E6:68:15:90:B5:5B:7F:A9:1F
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Certificate issuer: /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial: 019A2B8C64285D53533580A4037DA4CC44A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
Manifest number: 09EE
Signing time: Tue 28 Oct 2025 16:00:12 +0000
Manifest this update: Tue 28 Oct 2025 16:00:12 +0000
Manifest next update: Wed 29 Oct 2025 16:00:12 +0000
Files and hashes: 1: e7M4LBagpWFZkNS85jTcUWgvLqo.crl (hash: 5TZaxhWdcuAPA95KlMwp7ooQa9Dm3/TKiNK3Lj5Dxh0=)
2: qGUXVQ_YIWaxyPrsBvv99Mi17Xk.roa (hash: ahyxLXkQdJnYzPf9suZu/LdsDie1JIPApAeOAOCQ4OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2b:8c:64:28:5d:53:53:35:80:a4:03:7d:a4:cc:44:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Validity
Not Before: Oct 28 16:00:12 2025 GMT
Not After : Oct 29 16:00:12 2025 GMT
Subject: CN=5a0c4a305be2dceec7b1eae6681590b55b7fa91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:c1:27:f8:cb:71:66:cb:a3:81:70:05:4e:
76:b9:98:6c:8b:c0:22:55:4a:d5:6d:72:3d:24:14:
f0:cc:1b:fa:0d:70:f3:2e:97:b3:35:97:02:57:3e:
d1:3c:9e:e9:dd:50:cf:c6:9a:a0:18:78:2b:9f:ff:
99:fd:21:da:4a:62:27:31:70:71:96:87:4e:c7:58:
1b:27:b8:d1:71:65:80:6c:02:57:b6:47:cc:0a:a7:
87:5f:51:4d:a6:2a:2b:e7:f3:69:ea:d3:63:8a:49:
24:a4:13:34:04:83:03:c4:09:4a:eb:93:12:72:57:
f5:b3:20:23:75:90:85:95:94:bd:8d:4f:81:a6:8c:
eb:71:bf:59:da:12:93:f7:d6:83:cc:30:b6:26:05:
8d:6c:a5:50:da:e4:86:d6:c5:60:8a:39:88:83:d7:
0f:49:fc:26:89:82:93:18:ee:78:66:b6:01:99:af:
8b:be:9f:22:85:97:35:ed:4e:69:40:ab:09:e4:01:
6f:5a:73:1f:03:99:0f:b7:96:0f:7e:fd:91:69:1c:
8b:1e:11:9f:9e:6b:f0:c3:03:86:a4:9a:cb:39:47:
f0:64:b5:d2:1c:d0:c6:72:39:6a:eb:98:4b:0f:60:
9d:69:08:74:0d:99:3d:a9:3d:8c:4c:84:3c:55:df:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0C:4A:30:5B:E2:DC:EE:C7:B1:EA:E6:68:15:90:B5:5B:7F:A9:1F
X509v3 Authority Key Identifier:
keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d5:6a:2f:7f:a0:63:e6:e8:b4:2f:93:e5:5e:ac:72:01:05:
54:0a:ab:9c:63:cb:ff:c1:c8:e0:96:63:25:e0:66:5f:03:cd:
fd:f8:14:48:78:60:72:6e:8b:7a:79:b0:8f:04:99:13:f2:03:
96:24:4d:85:2a:5d:a0:38:54:f3:87:91:85:6c:b7:d9:c9:12:
12:df:a0:51:ec:6f:77:f0:cf:f8:c6:d7:36:24:e7:bf:4d:b5:
ee:ce:46:3a:5f:19:b3:8f:37:4e:ac:3a:95:1c:11:9e:18:7b:
d6:85:f9:4e:f7:27:a7:e6:dd:6e:70:ca:0f:94:80:2f:9f:c3:
b7:39:03:34:de:d1:50:9c:10:c6:5e:1f:91:79:91:49:0b:48:
64:34:1f:12:d8:75:03:2d:32:bc:e6:42:60:b3:a4:4a:b7:78:
aa:56:03:bd:30:a6:c9:62:81:cd:ef:f4:d1:c9:e6:a4:95:63:
22:df:ca:17:b7:da:fa:e8:4f:04:91:87:bb:56:9d:91:e9:69:
ab:fa:f7:70:79:85:a2:1d:d6:f3:9b:4a:e2:19:74:81:ef:ae:
71:b0:4a:e3:84:68:5a:f1:02:02:46:db:f2:1c:eb:a5:be:42:
cf:2c:56:7c:6b:ab:a8:4a:0a:8f:bd:e6:7f:f2:40:3c:fe:aa:
d7:89:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:19:37 2025 by rpki-client