Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
File: 7cJgAozSqx0OQ3dPRATezSeu88w.mft (raw, json)
Hash identifier: wiSMyI70Gdc5ZPGsqR3S1+tXYZBnxHxjEXk8zgrJGrc=
Subject key identifier: 64:F1:81:D9:CC:3B:60:23:09:6A:FD:D8:AF:E7:EF:44:71:BA:2D:42
Authority key identifier: ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
Certificate issuer: /CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Certificate serial: 019A2AB1488684A9B8659A8BA1D6CDE4331B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
Manifest number: 12CA
Signing time: Tue 28 Oct 2025 12:00:52 +0000
Manifest this update: Tue 28 Oct 2025 12:00:52 +0000
Manifest next update: Wed 29 Oct 2025 12:00:52 +0000
Files and hashes: 1: 7cJgAozSqx0OQ3dPRATezSeu88w.crl (hash: xgA4mrXB5ZNweziZaU5K/9Vr7AamIHhv8jDZEIaHH98=)
2: yR3tS_ANDk4tqqBt9oy3aE3IVVA.roa (hash: CBFaXVlyf8O1AiwoLakDijfjU7v7khHrl6opiRBTnoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:48:86:84:a9:b8:65:9a:8b:a1:d6:cd:e4:33:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc260028cd2ab1d0e43774f4404decd27aef3cc
Validity
Not Before: Oct 28 12:00:52 2025 GMT
Not After : Oct 29 12:00:52 2025 GMT
Subject: CN=64f181d9cc3b6023096afdd8afe7ef4471ba2d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:28:a3:6d:a1:bf:65:ec:aa:f2:05:3f:27:5b:
48:f3:a9:1f:f6:59:f4:39:4c:1e:50:43:7e:22:ab:
e9:2d:e2:91:14:cf:f1:6f:2b:df:62:b8:3f:f4:fa:
18:81:16:e8:da:ff:2c:f4:54:01:33:01:c1:70:bd:
ae:dd:ae:e5:ec:91:bf:3e:ce:48:a4:d0:56:ec:fe:
53:c6:03:af:1e:c0:26:a0:a7:04:18:0c:01:bd:57:
30:bc:db:6d:c8:cd:7a:44:9a:a9:52:1c:cc:4a:72:
cc:a8:93:9c:7f:8f:be:0b:97:bf:99:fa:e7:a0:9d:
e0:e9:cb:37:a6:e2:e9:a6:69:1e:37:98:9a:7c:92:
2d:d6:a7:a3:b3:ad:5a:97:83:e0:bd:a6:b7:2b:9a:
e4:77:0c:a3:42:37:06:4d:13:77:20:1e:cb:b6:f4:
4e:fc:56:88:5b:43:d6:d6:be:64:c4:48:b4:5d:23:
65:5f:66:95:e0:3d:2f:df:93:64:cf:9b:58:49:c9:
fe:09:7b:0e:5c:b6:b7:02:3c:71:dc:18:ec:48:3c:
b3:0d:5a:07:39:b3:ad:c0:af:87:8d:e7:6c:41:3b:
d8:a8:5a:1b:88:ab:60:4f:e9:5d:7c:9e:17:4e:e6:
43:3b:ec:f9:03:2a:c9:f4:8b:29:0f:90:79:b5:d2:
a6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F1:81:D9:CC:3B:60:23:09:6A:FD:D8:AF:E7:EF:44:71:BA:2D:42
X509v3 Authority Key Identifier:
keyid:ED:C2:60:02:8C:D2:AB:1D:0E:43:77:4F:44:04:DE:CD:27:AE:F3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cJgAozSqx0OQ3dPRATezSeu88w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9952b6-336f-4668-bafb-fdc258377301/1/7cJgAozSqx0OQ3dPRATezSeu88w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5d:da:f8:a6:46:43:6f:b8:0b:e8:3f:4b:a3:77:d3:4e:a5:
a7:ef:d4:e0:55:6b:35:2b:a9:3e:a3:1f:c1:f5:66:39:94:25:
6a:6b:f0:ca:c0:b4:5b:a8:3e:4a:28:6a:29:73:d0:1a:f3:b2:
6e:d2:9b:d9:ec:e5:7b:0b:c2:e3:85:79:0d:9b:71:95:6c:41:
4d:51:1b:9f:84:92:4a:5e:04:65:2a:84:55:1e:d1:36:ff:e4:
f2:5f:2a:2e:ee:90:68:5f:01:e9:99:2f:ea:eb:ea:09:5b:47:
6f:16:7c:ad:f9:4c:f2:34:eb:73:6d:56:19:e3:3f:de:58:3e:
54:da:dd:13:12:6a:70:16:60:70:e3:ca:e0:00:8c:a0:d8:f8:
dd:da:a0:8c:f2:a3:38:80:ba:9e:1d:9f:96:61:ed:6b:6f:d9:
b9:b9:6b:eb:0f:79:15:65:b9:6b:77:4a:8f:b9:22:6d:e5:3d:
2e:8e:28:5f:0d:be:1a:d7:41:24:4d:cc:95:35:06:8b:56:f6:
20:6d:ae:6c:48:52:54:29:a5:56:d4:51:f2:ab:46:49:f0:99:
d7:d7:4a:68:8d:7d:e8:dc:48:8f:b9:b0:ef:13:72:69:1b:c3:
aa:16:3f:b1:0e:bf:95:a0:ec:b4:a7:bb:7f:db:cb:91:e5:b7:
07:c6:ca:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:50:13 2025 by rpki-client