Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
File: 7m9CHCUwligDR9wuksoQzDmME08.mft (raw, json)
Hash identifier: zU7s90aR0UBTOVGFAQXM23l+m48HL5gYOMoRQMmt6I4=
Subject key identifier: A5:F2:F3:B6:E3:05:1C:76:95:5F:19:D4:AC:25:BB:9E:D0:CF:E6:81
Authority key identifier: EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
Certificate issuer: /CN=ee6f421c253096280347dc2e92ca10cc398c134f
Certificate serial: 019A1A6219D9599FEE3B811B722D5D03B72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
Manifest number: 0EBF
Signing time: Sat 25 Oct 2025 08:00:28 +0000
Manifest this update: Sat 25 Oct 2025 08:00:28 +0000
Manifest next update: Sun 26 Oct 2025 08:00:28 +0000
Files and hashes: 1: 5YlDtF7Ig5TmbuS_NoCvq0dSUvM.roa (hash: O5AF3h5GUvVjXi+fdnM5KUl9Mafj4SPh9elj1bhbK30=)
2: 7m9CHCUwligDR9wuksoQzDmME08.crl (hash: lv81llw/1lUQ1dAG6wpXeE0q7oT57npSW8U8s6ybk8M=)
3: jAeBGrf8BFIRbqKfW6MMAFHsAAY.roa (hash: XkntMpJexF4yO1fbtCkxhPtOe5hHQjbro7XU8mxBw50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:62:19:d9:59:9f:ee:3b:81:1b:72:2d:5d:03:b7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee6f421c253096280347dc2e92ca10cc398c134f
Validity
Not Before: Oct 25 08:00:28 2025 GMT
Not After : Oct 26 08:00:28 2025 GMT
Subject: CN=a5f2f3b6e3051c76955f19d4ac25bb9ed0cfe681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:69:5e:94:47:b0:90:b4:a7:a7:ba:cb:5d:f3:
ad:da:71:0d:11:99:cb:e9:e9:ba:43:f1:76:06:7d:
e6:63:2c:05:83:5e:1b:a1:9f:9e:ed:c1:10:eb:2e:
e4:45:61:58:d6:34:f3:8b:49:c4:cb:d2:52:da:9d:
fc:12:fe:45:c0:d4:1d:43:24:c6:ed:17:fe:b7:ce:
e1:13:b1:d6:e7:39:2b:86:c7:a2:22:b9:4e:57:4e:
b9:35:50:7a:93:83:d6:83:45:e7:bf:a9:3a:10:96:
f5:b2:14:79:97:2e:50:8f:7b:d0:89:c0:20:b2:46:
b8:a6:1f:77:4b:b4:7f:cd:9f:c7:af:46:89:54:d1:
e2:68:47:81:a7:af:39:1c:e1:ad:15:21:fd:e3:bb:
10:7f:6f:13:f5:ae:85:df:d4:88:5b:c1:4c:58:dd:
90:07:be:6d:2f:ae:b2:b1:05:a0:12:87:7c:a1:cb:
de:a9:57:73:81:e5:d1:1d:02:5d:39:23:af:2a:d3:
f7:63:26:70:f8:d3:dc:33:a1:f0:84:b6:f8:b1:1e:
76:64:09:14:6e:c0:84:4d:dd:db:b8:96:91:07:6a:
c9:21:0c:38:1e:91:85:43:4b:32:18:17:39:1a:95:
ba:ac:76:80:00:f9:0a:36:56:64:20:10:71:ff:bd:
2a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F2:F3:B6:E3:05:1C:76:95:5F:19:D4:AC:25:BB:9E:D0:CF:E6:81
X509v3 Authority Key Identifier:
keyid:EE:6F:42:1C:25:30:96:28:03:47:DC:2E:92:CA:10:CC:39:8C:13:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7m9CHCUwligDR9wuksoQzDmME08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3e0935-6a95-47a4-ad4c-3542f99be63b/1/7m9CHCUwligDR9wuksoQzDmME08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1f:e2:53:27:0b:f5:04:bc:76:33:ea:0f:b6:df:43:21:6b:
aa:e5:f4:48:ca:89:77:e5:34:60:80:f5:33:e7:6b:b7:12:dd:
2b:10:10:52:fb:0d:d2:60:c5:0e:6b:1d:f2:53:83:43:31:43:
ca:ce:53:74:af:ae:99:8b:39:17:50:bd:a7:a2:72:88:dd:95:
5f:be:6c:0a:d9:51:a1:ab:c0:8a:ee:a0:be:cc:34:e3:d0:85:
96:e7:28:51:33:eb:cd:00:3c:a2:48:87:bb:50:31:a6:e7:de:
d3:1e:23:9d:b1:96:a4:69:b4:4f:87:42:a1:35:f7:81:70:c1:
24:7b:bf:37:90:c1:04:c0:6c:c1:8e:77:08:1e:a0:cc:8e:9a:
91:17:ca:ea:dd:e4:f0:b4:92:3f:eb:aa:bd:eb:96:ff:ae:79:
64:94:e7:3b:47:f4:18:32:88:b1:07:cd:8f:32:70:63:19:59:
5e:35:f9:d5:e8:f4:47:06:7c:e1:33:38:f6:5e:7e:ee:09:8a:
98:ad:d1:c2:4d:85:27:69:c6:cb:59:b7:47:a9:70:58:05:5c:
e6:13:f4:8b:92:ec:f0:0d:9c:8a:a9:02:0a:3c:e2:37:5e:d4:
27:d7:16:19:18:83:f2:de:9e:14:b6:3f:fe:79:08:89:7b:5c:
03:78:cf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:24:00 2025 by rpki-client