Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
File: 7jcJhfg_QTMBEcNQzWseHurVJqo.mft (raw, json)
Hash identifier: SnhQXDDxDte3IOjwz/ZUCU7eXJD8E6xhxoNESeOD5aI=
Subject key identifier: 25:61:9C:53:16:51:7C:63:0B:34:8C:11:A1:32:BE:20:12:9E:0B:20
Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
Certificate issuer: /CN=ee370985f83f41330111c350cd6b1e1eead526aa
Certificate serial: 019A1F1A6135E915882128114322D71DE4A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
Manifest number: 16FA
Signing time: Sun 26 Oct 2025 06:00:13 +0000
Manifest this update: Sun 26 Oct 2025 06:00:13 +0000
Manifest next update: Mon 27 Oct 2025 06:00:13 +0000
Files and hashes: 1: 7jcJhfg_QTMBEcNQzWseHurVJqo.crl (hash: ggI4HYQfIpEyR0QY9g/clWlRIKJ5gocJTXynglN1wWA=)
2: Vhh-HEWHbYSTjQgTrRsDTKlOjO0.roa (hash: nZHSxicdSyoslUfdZCmnypTUsy3rNzow8v41t9pPW+0=)
3: cXrx1ROqbRYTJpBaY9JfsPVk3Ow.roa (hash: e0I94SNdLBs+vaXUAirpLtLE8FeKHQEH/NhmFQRxO+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:61:35:e9:15:88:21:28:11:43:22:d7:1d:e4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa
Validity
Not Before: Oct 26 06:00:13 2025 GMT
Not After : Oct 27 06:00:13 2025 GMT
Subject: CN=25619c5316517c630b348c11a132be20129e0b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4b:42:20:c1:e7:21:52:df:c7:82:37:64:d7:
10:d1:2a:65:27:e4:2c:e1:55:ee:8a:38:05:6f:a2:
3b:63:b4:ec:8c:40:0f:e7:bf:ed:12:39:af:25:57:
ae:15:15:7e:7c:bd:2e:47:fd:29:99:72:8e:d3:ca:
40:ce:66:f4:e6:1e:56:df:21:76:05:5e:1d:ce:52:
cd:bf:50:ec:7f:78:19:76:54:56:47:ac:63:e2:c4:
02:59:12:62:e8:5b:63:a6:97:a9:16:25:24:e6:0d:
e6:ff:9f:b5:84:d8:43:fe:80:b7:cb:9f:05:b5:7d:
54:58:e6:ef:eb:02:ab:65:83:e3:82:4c:36:59:93:
c0:c8:82:21:74:21:e2:e7:0e:3f:9d:f4:ca:59:6e:
19:27:a0:f3:8b:fd:8f:77:16:1e:cb:b8:5f:99:8e:
6d:87:72:5f:4a:15:c5:36:51:0d:4c:ca:4a:d3:fe:
49:cf:26:a5:5f:2b:ab:c8:17:f0:c3:ed:7d:91:96:
e8:5e:04:81:42:42:04:b2:9c:c6:d5:93:d7:05:13:
8e:2f:60:60:6a:d5:42:dc:a7:a9:ed:01:c0:a3:af:
e0:43:1f:58:83:fa:f1:af:e7:48:78:34:62:5e:1b:
78:fa:cf:06:7a:3d:45:26:a0:fa:92:93:6e:19:74:
71:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:61:9C:53:16:51:7C:63:0B:34:8C:11:A1:32:BE:20:12:9E:0B:20
X509v3 Authority Key Identifier:
keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:65:8f:c3:e5:61:03:e7:6d:96:16:e3:bb:1f:5c:1f:a2:d6:
cb:00:10:8f:74:87:76:e2:1c:af:25:82:d4:6f:f5:2b:73:74:
52:40:3d:c2:3f:14:72:c2:9f:68:00:ce:ed:d0:f7:80:c6:b5:
ba:a7:08:29:0a:e3:57:b5:0b:95:21:a6:cb:84:73:ae:4b:ad:
bf:80:4a:a9:da:3d:8b:fc:9f:67:57:fa:5f:aa:80:7c:a3:a8:
2d:75:d2:38:6b:99:ba:b7:0b:e4:57:1b:77:7d:37:5d:fb:54:
29:c2:63:d3:e2:ba:0e:50:6a:f1:9b:e0:9b:49:43:de:9f:60:
fb:85:cc:80:11:64:e7:f2:d3:ce:79:2d:d7:2d:4b:a5:cf:f3:
9b:4a:5b:94:81:1f:e5:ef:9b:41:50:35:7e:55:32:21:9a:9c:
d5:c3:d1:45:09:f2:db:d5:52:43:c6:c5:58:6e:2c:1a:5c:dd:
aa:56:10:c7:e2:22:d3:d2:fa:08:25:3d:c1:97:b6:c1:55:8d:
c2:f9:ed:e1:c3:0d:92:07:0d:94:08:04:1c:c7:9b:69:70:aa:
a6:6a:ff:7b:23:65:89:30:fc:d4:d8:61:ca:4c:5a:6d:9b:5a:
ab:bd:d5:16:56:c6:68:77:e4:69:68:8b:b1:cd:41:04:66:46:
5d:ac:cc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 13:22:40 2025 by rpki-client