Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: Mio4t/ZCOx2GnTb2eYzaiLyqVVuGH5z/4cMrAbxBV8U=
Subject key identifier: A1:DE:00:A7:42:85:8E:A0:4A:17:04:1B:7A:CC:45:6A:B1:F9:1E:71
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 019A2C317B7DB8D07DA49F1F21BB38F2DFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 16FD
Signing time: Tue 28 Oct 2025 19:00:31 +0000
Manifest this update: Tue 28 Oct 2025 19:00:31 +0000
Manifest next update: Wed 29 Oct 2025 19:00:31 +0000
Files and hashes: 1: 1utcwuOmOI7txytHlcapG00bDWQ.roa (hash: KoDsbv2AuvIm5mO9VxRMXrTvsRyvxgVtQhUhy9Zv0J4=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: 89Ust8aSJ/d0dMb3DuKjoqip/f9jwXe7YnOx+i2LVLw=)
3: TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa (hash: SXaSky/YVlsAmsXgPwkA8PXkQ+jueu3hy97DblT9VwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 19:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:31:7b:7d:b8:d0:7d:a4:9f:1f:21:bb:38:f2:df:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Oct 28 19:00:31 2025 GMT
Not After : Oct 29 19:00:31 2025 GMT
Subject: CN=a1de00a742858ea04a17041b7acc456ab1f91e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:48:f2:7b:44:34:01:98:74:9d:23:79:97:c6:
d1:e3:e0:92:a9:64:73:a4:78:90:4c:0b:2d:95:db:
7a:79:88:c9:45:52:93:26:ab:17:55:46:69:f2:2c:
96:d2:73:b6:34:cb:5e:0e:46:bd:d1:a3:2a:c4:a9:
11:44:10:66:ee:7b:65:fa:79:1e:f7:cf:db:e8:25:
6a:79:cd:62:e9:0b:ed:75:73:df:fb:bb:ab:a1:fb:
eb:88:d2:1a:d9:73:c2:ca:3d:5b:d5:fb:83:52:7c:
93:7c:04:cd:1d:b4:b3:a3:10:5c:ec:2e:22:bc:ad:
53:b9:d8:fb:4d:bf:90:77:b4:71:17:30:81:8b:e4:
90:fb:42:15:47:69:b9:91:fe:f4:e6:b4:e5:ea:f0:
c4:64:47:25:83:1c:9a:c6:bd:7f:2d:48:eb:3e:0f:
92:41:85:ff:ec:f3:d6:f9:ff:ba:d3:0b:08:47:75:
89:3d:d0:40:0b:8f:3d:cc:b2:c7:e1:8e:c0:fb:fd:
6b:d6:af:23:18:b8:23:f0:67:a0:10:02:ca:85:e7:
7b:5c:04:07:05:c0:fa:d5:28:bc:0c:5f:73:88:38:
bc:e2:8a:f8:22:e9:74:06:78:b0:e6:b8:77:39:67:
e1:2a:a4:9e:aa:09:17:28:38:4c:cc:59:e6:06:e9:
be:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:DE:00:A7:42:85:8E:A0:4A:17:04:1B:7A:CC:45:6A:B1:F9:1E:71
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f0:fb:dd:64:ed:b4:f1:71:ee:c8:a7:ca:0c:53:ea:de:f7:
74:8f:a2:31:21:88:9d:26:21:e3:8e:08:9f:6c:4b:50:7c:46:
fc:5c:57:50:0b:6f:8b:3e:fb:82:14:cc:44:6b:e4:31:89:97:
3a:32:19:8c:ee:11:91:1a:31:ea:bb:7b:8c:4b:5a:1e:71:64:
e3:19:09:2c:ec:27:c1:cf:4c:dd:b0:d5:18:d3:a2:e0:7d:71:
22:bd:05:bc:f5:15:51:ef:d0:52:4d:d6:01:47:11:19:89:c1:
0a:7a:8a:8e:61:3f:21:63:3b:3d:3c:3c:c3:b0:5a:ce:b2:5e:
de:a4:de:08:61:27:8d:9f:73:df:42:5e:87:d2:5a:97:b4:d2:
b3:4b:64:01:71:74:b1:d2:75:91:92:95:08:4b:bc:09:88:b9:
be:3d:0a:7c:d1:fd:7d:e5:89:13:40:af:27:25:69:4b:88:c0:
5c:e5:2f:22:ac:eb:d8:4f:82:c8:be:47:d0:a1:ab:36:5d:a5:
2c:3e:2a:ce:ca:f9:05:9a:87:00:0a:fc:70:3b:da:7d:8b:86:
42:9c:47:f6:b8:7a:0c:ec:87:8b:94:0b:a9:59:bc:c8:43:a9:
c3:8d:2e:21:85:dc:1d:97:7a:f3:95:b0:3b:d2:ec:94:1d:31:
08:9a:a9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 02:32:39 2025 by rpki-client