Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
File: 7iNCg3Pc6KX5f0XvxsKLn7581U0.mft (raw, json)
Hash identifier: buDCPE2eRLa/ILuqqayWoB6ztgBFMgc88EpsTwxt2b0=
Subject key identifier: 2F:EE:3B:20:DA:F8:F4:02:63:41:C4:1A:B7:D5:8A:75:BD:C0:20:8B
Authority key identifier: EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D
Certificate issuer: /CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d
Certificate serial: 019A19BD042AD54DEB54A60B328F9AAECBB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
Manifest number: 59
Signing time: Sat 25 Oct 2025 05:00:08 +0000
Manifest this update: Sat 25 Oct 2025 05:00:08 +0000
Manifest next update: Sun 26 Oct 2025 05:00:08 +0000
Files and hashes: 1: 7iNCg3Pc6KX5f0XvxsKLn7581U0.crl (hash: 1M1kI84oE/Ow3bnbPFx0a8GpP1L5rFtPt0KFlpLLtVY=)
2: QXgU6iZ9eTA61-_lrp-WFw2wrio.roa (hash: pI7i4CdNQU0hsPQOTDHwQvTJeIPilN2xVeBBH/PkqDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:bd:04:2a:d5:4d:eb:54:a6:0b:32:8f:9a:ae:cb:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee23428373dce8a5f97f45efc6c28b9fbe7cd54d
Validity
Not Before: Oct 25 05:00:08 2025 GMT
Not After : Oct 26 05:00:08 2025 GMT
Subject: CN=2fee3b20daf8f4026341c41ab7d58a75bdc0208b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:b9:f4:bb:aa:12:07:ab:74:8e:56:28:f6:
07:d0:05:c1:0f:d2:5f:5e:78:fe:ac:8b:7a:ab:3d:
ff:02:91:46:39:d1:57:56:4f:a3:bc:23:7e:ba:26:
2d:90:14:09:a1:42:cc:56:44:42:ab:05:3e:51:f7:
08:94:48:ab:d9:7f:d5:34:24:ab:3b:a0:97:f9:a7:
10:cb:be:39:c3:d3:ac:2b:55:d3:66:b1:2f:80:98:
cc:10:19:8a:e3:59:dd:45:af:bd:01:30:5d:ce:dd:
6a:c8:96:17:64:7b:69:e2:cc:65:46:da:56:40:3a:
cd:a6:bb:4a:35:42:4c:be:9c:b1:2f:3b:3e:ce:eb:
55:d5:0e:9d:b0:99:54:4b:c6:0c:b6:69:4f:6f:90:
67:12:5c:de:58:a7:6b:9a:4f:57:65:d4:5f:f6:7c:
a1:c3:66:fe:01:83:6b:31:fb:fa:b5:73:dc:ae:c6:
5f:38:56:25:16:28:a6:52:a9:d0:ff:b4:e5:a8:1b:
ed:fc:c7:86:3a:7f:9a:f6:1b:40:59:4e:7a:9b:6a:
0f:3e:48:bf:af:24:0d:31:23:15:e8:eb:12:d2:06:
ba:71:bd:e5:7d:ce:f1:f6:3c:31:52:db:4f:81:96:
8e:14:76:f4:7a:53:b2:8a:db:8f:f8:31:ca:5a:46:
a7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EE:3B:20:DA:F8:F4:02:63:41:C4:1A:B7:D5:8A:75:BD:C0:20:8B
X509v3 Authority Key Identifier:
keyid:EE:23:42:83:73:DC:E8:A5:F9:7F:45:EF:C6:C2:8B:9F:BE:7C:D5:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iNCg3Pc6KX5f0XvxsKLn7581U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8fa854-0597-4c0d-b0b5-3f77fd42799a/1/7iNCg3Pc6KX5f0XvxsKLn7581U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d2:10:84:f3:fe:6b:b9:57:44:cb:96:55:3c:ad:f3:76:85:
dd:bc:85:03:44:a5:bc:b3:fe:50:dd:2b:9b:77:9c:18:5b:47:
ef:1e:6e:a1:a3:31:14:5f:a9:cb:04:12:d1:d8:67:2b:a2:80:
90:3d:b6:0a:12:19:a6:f8:fe:34:8f:c5:b9:12:8b:7b:27:49:
92:01:33:81:64:97:93:97:70:5c:39:a6:31:01:9d:01:1b:6a:
1b:ac:3f:3e:86:bb:bb:2a:22:d3:dc:5e:0e:59:98:67:9a:c3:
b9:11:16:4c:c6:d5:60:da:1d:e5:bb:73:e4:70:7f:27:b6:44:
44:a6:2f:76:67:4b:e5:87:19:a6:c5:1a:8d:53:32:53:cb:c8:
d6:6a:03:64:f0:e1:0b:3f:2d:01:35:19:c7:a2:7b:f2:02:17:
1f:aa:e4:b3:eb:09:6f:94:0e:55:45:a3:36:20:14:7a:22:58:
1e:0a:ae:49:8e:9a:75:38:2a:0e:88:1d:6e:42:1e:55:a4:02:
bc:4b:11:df:75:2e:2c:6c:3b:99:52:15:ba:ff:de:28:fd:5f:
13:98:5e:d4:39:97:1e:fc:0e:d2:e3:9b:64:ef:4c:d5:a7:1a:
de:c2:1f:c9:c5:05:f6:a8:f5:05:25:5c:e0:5b:52:23:93:42:
6d:07:98:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 14:41:53 2025 by rpki-client