Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: W5WDtbdqb73fzI6zdPq1U0T0Govytt3FBCcjInlmUYg=
Subject key identifier: 0E:16:6D:11:D7:47:1D:75:5E:7E:25:61:DE:56:FC:0C:8D:CE:77:29
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 019A18738C0416BAC10C847371A16674A795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 14F7
Signing time: Fri 24 Oct 2025 23:00:16 +0000
Manifest this update: Fri 24 Oct 2025 23:00:16 +0000
Manifest next update: Sat 25 Oct 2025 23:00:16 +0000
Files and hashes: 1: 1zFu0RzpnnoDGJMwnKjinpXmRCA.roa (hash: ZQd8IBEmMebks+ONJAcNs9poavTsD9w6+Xw3hhWxaQ0=)
2: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: tuathQ+SqB0fOzbYjXB7ts+d2qfdL3haZipZ4U4kZSI=)
3: HKJIsIJ7TQKVpo395xcD-UrLDIc.roa (hash: 5l8r3D44ewEJc+IhuEtnOq2QaEWlAtDCOHCZ14bO5AY=)
4: pRVui7p_9zc7vkvdS1qRnmC5uhE.roa (hash: nMrVu0tOXbJwGT4qILzCfjpCh8zrDSPr52uVHfmUR0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:73:8c:04:16:ba:c1:0c:84:73:71:a1:66:74:a7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Oct 24 23:00:16 2025 GMT
Not After : Oct 25 23:00:16 2025 GMT
Subject: CN=0e166d11d7471d755e7e2561de56fc0c8dce7729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:99:79:36:7e:c6:5e:56:8d:fb:56:0d:72:98:
c8:85:c3:37:05:f9:c0:f7:26:e0:da:3c:b8:a1:3a:
b3:5f:5e:05:c8:af:f0:c9:73:29:65:89:2e:62:3d:
3c:bc:9b:d2:f0:48:ad:72:02:a1:d4:a2:57:04:d8:
6a:27:47:fe:bc:36:63:62:c4:8b:5a:77:96:86:e9:
f5:8b:e9:de:24:c1:e4:21:bf:00:9b:15:47:93:12:
0b:3f:b6:35:1f:1b:d0:46:55:35:40:7d:d5:02:f1:
4d:11:08:26:8c:ec:51:66:a2:88:45:7d:57:1a:80:
75:c0:71:46:34:f5:30:8e:fa:01:ae:19:5b:ab:f4:
56:87:e7:d4:fe:b7:ca:b3:1e:27:50:6c:be:67:90:
94:e5:b8:a7:8e:e5:9e:b2:e2:4c:b7:0b:85:1b:9c:
66:26:ac:50:52:a6:82:62:5c:62:e9:1e:36:14:cc:
5f:91:af:a2:73:d4:6e:23:20:16:f7:b0:46:d4:e4:
32:bb:15:51:49:e8:df:63:03:03:c3:d0:b9:f2:73:
55:92:42:3c:b8:b2:05:d5:c5:7c:bc:1d:3e:10:4a:
d4:6c:5c:d4:97:9a:a6:bf:ba:65:e2:e7:c4:cb:e5:
00:a2:c2:fb:f5:88:85:64:f7:3e:50:8f:28:cb:a0:
0c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:16:6D:11:D7:47:1D:75:5E:7E:25:61:DE:56:FC:0C:8D:CE:77:29
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a4:87:98:40:0a:56:57:55:3a:8a:43:f3:af:ee:78:33:64:
60:4f:db:71:ca:f4:e7:d9:4a:f4:3e:6a:2b:db:85:62:0b:0c:
bd:f1:30:ef:83:3c:6e:b6:e0:6b:55:69:90:ad:c2:22:9b:5d:
62:a6:b2:34:6e:ad:94:41:18:09:66:a0:7c:83:53:d9:ee:d2:
ac:f0:e8:63:74:62:d4:04:c1:ca:b4:a7:29:af:7e:cc:28:a8:
ea:b0:4c:9d:16:7d:3b:2c:60:cf:e5:95:b6:49:8d:ab:f8:b7:
da:79:95:8b:84:f9:30:b6:f8:8a:c1:41:5c:48:af:44:7d:47:
ef:64:35:5a:43:15:be:5e:44:2c:aa:e8:4f:af:62:cd:73:a1:
a3:bb:c0:85:3f:4f:23:ef:38:f8:a3:bb:12:27:16:7c:29:67:
cd:05:e4:20:7a:ca:c3:8c:2d:a4:e5:a7:cc:89:b5:a0:14:a1:
5c:08:2b:b4:6c:f0:da:ce:fd:15:a6:5f:74:e1:61:b9:83:51:
32:0a:a8:27:0d:05:56:40:dc:06:b5:da:16:74:a5:90:ac:27:
06:d1:9a:19:75:4d:44:e2:55:e3:c9:0d:16:d1:53:df:6b:0f:
c4:73:57:b9:da:29:9f:6f:5d:4e:df:0f:dd:2a:3e:df:db:47:
dd:c1:fc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 04:15:28 2025 by rpki-client