Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier: MaBHSANlX6LS9kpzesHwP1WB7UjumXAVfD+y+t36i7M=
Subject key identifier: 61:92:B8:21:AF:CC:D3:AD:27:53:86:71:80:7B:88:A7:7F:5B:70:BD
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial: 019A17CF182C03EDBA6C1B2A9D2A0AC356A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number: 16F0
Signing time: Fri 24 Oct 2025 20:00:39 +0000
Manifest this update: Fri 24 Oct 2025 20:00:39 +0000
Manifest next update: Sat 25 Oct 2025 20:00:39 +0000
Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: 7EHwo3V9GUooAnYc3zQr9sm5Juw+GjXcjnxBsA6cXfs=)
2: pWjzKwcY2D4VzPoP5dA0NiOjP1E.roa (hash: COXcfdNp3EzT11F9o1Nm0eGFt9uQRA5Y8hfNNYTi82c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:cf:18:2c:03:ed:ba:6c:1b:2a:9d:2a:0a:c3:56:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Validity
Not Before: Oct 24 20:00:39 2025 GMT
Not After : Oct 25 20:00:39 2025 GMT
Subject: CN=6192b821afccd3ad27538671807b88a77f5b70bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a4:6d:4e:fb:cd:4c:3d:f3:cf:08:b6:d4:50:
1b:e0:c7:a2:9a:ff:bb:d7:55:1e:4d:a3:99:93:db:
ca:38:2d:a2:70:84:cf:6c:d6:e1:94:26:ee:13:2c:
42:cd:41:31:f7:54:43:b5:29:33:8b:73:54:55:c6:
78:dc:08:7f:b2:9e:eb:d6:1a:2c:be:d8:37:a8:9c:
e4:b0:e7:15:a4:74:09:6c:f3:7e:7e:fd:a2:b1:98:
52:2d:61:c6:c2:e4:8a:74:c3:b4:db:66:8f:c9:25:
d9:94:c0:0e:eb:03:b7:ca:a3:03:de:d6:f4:d2:2e:
be:1b:21:85:09:7f:40:cb:e7:5f:ca:2d:fd:0d:c5:
89:7e:db:8b:c6:59:a3:3c:f5:84:0d:88:4f:9e:f7:
9c:f6:1e:f1:15:e9:f7:38:06:f6:ef:fd:73:01:97:
ec:fb:9d:53:7d:dc:a5:10:c0:ad:17:c8:e3:69:f5:
e2:2e:25:94:4a:e1:9d:0d:9b:a2:74:99:b8:df:55:
d2:06:2c:c2:18:1e:c9:fb:1f:2e:cc:13:94:46:c1:
f3:0c:90:7d:f8:14:86:1a:4e:a6:80:b7:e0:4a:1d:
dc:75:2d:08:81:06:4a:cf:cd:e4:29:e7:86:6a:bc:
7a:e3:87:78:b8:cd:9e:2e:c4:a3:13:ed:c4:5c:da:
11:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:92:B8:21:AF:CC:D3:AD:27:53:86:71:80:7B:88:A7:7F:5B:70:BD
X509v3 Authority Key Identifier:
keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9c:5d:68:fc:e8:a8:96:23:e0:b4:e1:3b:75:5f:58:07:ae:
a1:6e:35:1d:75:93:1c:72:d1:9a:8a:54:ce:35:29:b9:3d:ac:
a3:c7:2f:31:55:8f:94:b5:bd:9f:a7:d4:bb:cc:7c:5b:70:b7:
bd:c7:ae:30:c7:f4:37:a5:db:c9:1e:d0:fe:c2:a0:50:a0:88:
af:a1:6a:28:d3:98:35:e8:76:62:a3:60:35:f8:0a:11:76:ff:
81:29:4c:41:75:ae:0b:fc:85:c7:ab:01:76:71:85:70:b3:3b:
2f:43:4d:8b:34:8b:bf:6d:b0:db:25:35:36:5a:6f:55:3b:c9:
c1:c7:35:91:93:af:2a:dd:e7:7c:33:0d:21:d4:e6:09:43:d6:
13:1e:66:ae:36:a4:d6:f3:3d:b1:9b:0d:35:06:ad:e9:72:83:
fb:ec:49:a5:9c:66:16:fd:04:73:c4:96:9e:11:07:3d:72:35:
2f:b6:14:32:02:45:08:49:56:6a:3f:ac:57:48:46:e2:24:a3:
23:db:2c:d8:83:be:2c:e7:3a:39:86:12:05:b6:53:4b:6e:b4:
14:fb:9f:e8:a9:5e:6c:43:34:8c:77:58:47:42:7a:e7:d7:8c:
db:02:5e:b3:9e:c4:ca:a8:80:01:85:f8:a3:ed:ac:af:42:92:
64:31:6f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 23:44:09 2025 by rpki-client