Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
File: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft (raw, json)
Hash identifier: GBfk220mvfbCHoy6/v004amhLf7gzvLXm4E1QtadNRo=
Subject key identifier: A5:35:BB:6D:DB:E9:2A:12:D7:93:58:EB:23:D4:26:0C:1F:10:05:52
Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
Certificate issuer: /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Certificate serial: 019A24783F4139D975604B6E894574671245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
Manifest number: 16F6
Signing time: Mon 27 Oct 2025 07:00:51 +0000
Manifest this update: Mon 27 Oct 2025 07:00:51 +0000
Manifest next update: Tue 28 Oct 2025 07:00:51 +0000
Files and hashes: 1: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl (hash: nyx/61FxLUU7VLBIvXSpGZu+TbP/E0xVAb6fAbkEHB8=)
2: lsLcveQpDK6_M97PC59O9jY_Mn0.roa (hash: ymXevK/nbRh5h28kJcEd3t9OjF1YdLZjWlDyNpO0ilU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:3f:41:39:d9:75:60:4b:6e:89:45:74:67:12:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Validity
Not Before: Oct 27 07:00:51 2025 GMT
Not After : Oct 28 07:00:51 2025 GMT
Subject: CN=a535bb6ddbe92a12d79358eb23d4260c1f100552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:46:57:70:59:33:c6:d5:d7:62:23:8e:05:
98:d2:34:60:a2:30:0d:05:d5:ce:a4:29:76:95:e2:
0a:45:a4:0a:f9:55:cb:68:6e:fa:16:e4:35:98:92:
86:2b:2b:c3:60:4c:c1:46:da:6d:e2:97:94:36:ba:
f8:a2:82:51:c7:c4:b8:00:1f:b4:66:a9:bf:9a:cb:
55:3e:bb:45:f2:9e:54:77:e9:f1:3d:f0:76:d5:06:
45:96:42:14:02:dc:8f:70:f1:78:5c:ec:18:63:75:
72:01:05:ea:d1:6a:48:11:8d:14:1c:26:c3:fa:37:
6f:02:79:b8:ab:c2:94:3e:e8:1a:10:8f:02:17:f5:
bd:72:2f:8c:84:c9:d4:22:54:f8:4c:d9:75:82:e0:
80:f2:7b:c7:e1:80:27:95:77:02:c8:17:c6:af:dd:
01:db:8e:c3:97:eb:64:4e:bc:14:7d:0b:6c:54:97:
d8:d4:c2:a8:f7:97:8d:99:29:4b:9c:8f:45:3e:5a:
f8:26:8c:b6:1c:60:1f:c2:cd:9a:ea:c1:62:1b:65:
85:b3:1f:bd:de:9d:dd:a7:89:f8:a4:5a:6b:04:60:
2e:55:d8:c0:41:b7:fb:e9:12:44:0c:62:a4:f6:a0:
ee:4a:78:f5:90:f1:d1:5a:c7:d4:1d:48:e8:e9:58:
f2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:35:BB:6D:DB:E9:2A:12:D7:93:58:EB:23:D4:26:0C:1F:10:05:52
X509v3 Authority Key Identifier:
keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:21:56:f2:46:6a:4c:26:17:f2:30:f6:73:34:70:5e:13:9d:
15:03:54:ca:ae:e3:6e:1c:37:f6:c5:92:c6:ae:a1:66:ce:14:
a7:64:2c:79:69:45:6b:6c:61:e5:d2:1e:fa:b5:cd:83:f4:5c:
90:32:9b:ab:19:b8:60:5b:1a:0e:e5:3b:bb:e3:cf:16:3e:39:
7e:e6:87:59:0e:cb:50:03:2e:f8:b2:6c:87:5c:f8:43:88:c4:
4a:75:4c:96:07:8f:03:28:f3:e7:50:85:a6:43:11:38:6c:f6:
4a:d5:63:da:3c:e2:d5:46:3d:46:d0:81:0e:70:7b:04:e8:65:
50:ff:bb:82:7e:2c:93:ac:db:23:0f:62:e2:2c:c3:c0:e9:0a:
b8:b8:74:c3:5e:d3:26:ab:c3:e2:d2:ca:7b:8c:bf:bf:1b:3b:
fb:ec:9c:52:2d:02:06:d2:13:e8:cd:61:0e:81:2d:8e:ed:eb:
24:84:bf:e6:96:ca:5f:d9:09:b4:bb:cb:50:2d:d8:2c:06:cd:
c5:24:88:a2:7a:a7:c1:8b:3e:2d:64:81:8e:c1:ae:a9:aa:2b:
a8:fb:8f:fc:91:d9:c8:4f:39:e6:49:a5:12:81:59:93:8f:1d:
dd:d9:9e:92:85:24:e9:df:01:7c:3d:b6:e4:37:b3:21:6c:5d:
cf:31:a2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:21 2025 by rpki-client