Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: 4OrDqDXoJs7JC93Vg2zEcR534GJ14pIJPJB/Ov2P0fc=
Subject key identifier: 70:4B:BE:B6:D9:FB:F9:44:31:E6:59:16:82:A7:43:4B:EF:4A:C6:D6
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 019A232E5F4978B93BBBD8728CA389590EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 14C0
Signing time: Mon 27 Oct 2025 01:00:32 +0000
Manifest this update: Mon 27 Oct 2025 01:00:32 +0000
Manifest next update: Tue 28 Oct 2025 01:00:32 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: MROtGG3Y8GN1tA8+UFxCUxhdOWNtdKK2pjbMduGAe8Y=)
2: Fy9dAaWIGt3DDwam3RK8I1POnD0.roa (hash: mN5AYrqpl0VfVq4+AtyPnI39fV2fuW1S27zeiDc2nYY=)
3: iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa (hash: iCHtjZhnNNI84krnhRcpRLsDA1PIVF/eAzRpZb4b+rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:5f:49:78:b9:3b:bb:d8:72:8c:a3:89:59:0e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Oct 27 01:00:32 2025 GMT
Not After : Oct 28 01:00:32 2025 GMT
Subject: CN=704bbeb6d9fbf94431e6591682a7434bef4ac6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1b:b9:0a:25:17:36:d3:7d:90:35:18:a2:e5:
f3:4f:f5:af:20:b3:cd:20:2a:2c:91:2a:2d:c5:0b:
01:89:29:53:4e:c6:9e:35:15:4d:af:74:7e:3a:64:
01:83:9e:5e:43:a9:ac:d0:52:3c:eb:e0:fd:3d:c9:
84:0c:d6:69:4a:a4:1b:d5:57:2b:09:0d:f0:a5:af:
2f:d3:13:18:a7:1a:1d:54:04:d6:17:92:05:f4:39:
8d:46:99:cf:95:13:82:35:31:df:a6:47:f0:fd:75:
89:2e:3f:2a:9e:56:8f:1b:ce:68:42:1a:8b:06:3f:
e2:2e:e0:97:f1:c0:27:3c:ff:26:12:e4:6e:f7:42:
6e:c5:19:72:bf:3a:84:a7:99:df:a8:08:2d:6d:af:
23:46:f6:b0:3f:8b:af:ea:7b:cd:53:dc:4f:c0:c4:
bb:1d:88:2f:e1:f6:55:1e:80:1c:fa:be:c5:0c:fb:
62:b9:6f:d3:68:d2:a7:8c:f3:dc:d5:22:06:71:83:
0c:c6:e9:b1:bf:e7:a7:7a:8d:14:34:83:ba:29:ba:
92:98:5b:c5:fe:42:85:60:a6:45:94:0f:2e:20:09:
a9:a6:7a:2d:1a:79:d3:67:42:6a:4e:dc:7c:8e:24:
1b:d9:05:ad:c1:55:71:15:d6:97:4c:a6:49:2f:5d:
15:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4B:BE:B6:D9:FB:F9:44:31:E6:59:16:82:A7:43:4B:EF:4A:C6:D6
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:51:78:fd:11:64:07:2c:6c:20:d7:e1:17:73:2f:8e:09:59:
10:3b:e4:36:9c:80:dd:50:76:d6:b0:f2:37:7d:6c:fc:cd:58:
a2:25:29:e4:86:2b:2e:06:c6:5e:df:e2:12:9a:4d:7e:c6:67:
18:00:2e:f2:88:e2:26:e4:25:6f:88:2f:5b:5a:47:59:f6:7c:
32:78:5d:45:bc:b3:68:b6:7d:f8:01:1d:71:25:7d:da:27:9e:
7f:4a:1f:3e:f9:9d:00:73:8f:92:23:4e:c0:0d:4f:af:fa:77:
4f:c7:67:b4:3f:29:e1:70:53:b6:35:f4:2b:d3:4a:28:51:3e:
fb:b3:35:5c:76:33:85:2e:33:27:62:0b:c5:c0:bd:54:c3:d6:
4f:9b:24:fd:88:df:75:87:b6:00:fb:7d:30:3f:aa:27:0c:6a:
44:0b:dc:3b:25:74:23:60:bf:5a:a6:56:c0:26:53:8e:70:f9:
79:e6:ad:2f:be:a0:57:af:c0:2b:5c:6b:35:26:b5:f1:9d:30:
92:fb:73:ad:55:c8:6a:46:4c:35:d9:1e:c0:cf:97:cb:7e:d1:
17:43:8e:59:a3:50:3f:75:43:e1:92:25:95:bb:bf:d7:1d:74:
7d:85:98:a2:c0:4e:89:40:e7:33:86:cd:e4:f1:cd:93:8d:bd:
af:17:62:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:54:41 2025 by rpki-client