Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: G/Gw2SL5ARIVjsDlEBTcrDeHn/eWR543g7YxIW/1tc4=
Subject key identifier: FA:91:82:EE:10:30:EA:7E:26:2C:04:8F:C3:68:2C:A8:19:60:89:16
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 019A0523AE3BB5512FDDD2EE7B6AD5FD0D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 16E7
Signing time: Tue 21 Oct 2025 05:00:15 +0000
Manifest this update: Tue 21 Oct 2025 05:00:15 +0000
Manifest next update: Wed 22 Oct 2025 05:00:15 +0000
Files and hashes: 1: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (hash: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: 3ov/+30WDJhR3w4GfMWANx7DgOh5O181Xd6Ftwbh3cU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:23:ae:3b:b5:51:2f:dd:d2:ee:7b:6a:d5:fd:0d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Oct 21 05:00:15 2025 GMT
Not After : Oct 22 05:00:15 2025 GMT
Subject: CN=fa9182ee1030ea7e262c048fc3682ca819608916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:cc:b8:37:9b:97:0f:21:a6:a4:c6:3c:bf:
32:56:1d:2a:bd:71:66:cc:09:97:d3:28:7a:3f:e8:
19:f2:8c:bf:e2:66:26:32:37:55:a4:27:c8:81:06:
9f:1b:94:00:14:c8:e4:4d:d7:ac:0f:b0:54:1e:5a:
fd:be:d1:f6:73:6c:1a:59:76:f8:1a:41:37:77:19:
e8:9c:ad:34:fa:96:71:80:63:26:1c:ee:29:43:2d:
11:7e:c2:a4:63:5d:20:a1:14:7c:15:5c:ac:f4:dc:
f9:cd:3a:70:08:a0:71:0e:c3:de:8c:82:0c:54:44:
c4:bb:ec:c3:1e:62:8e:53:b9:82:ba:69:d2:57:f9:
13:16:93:2a:7f:92:85:f7:42:f5:16:f1:48:41:14:
b3:d7:46:1b:65:79:0f:76:11:59:a3:4b:d0:6a:fa:
42:e1:3d:e0:82:35:66:eb:ee:27:a5:9d:e2:a3:d0:
f4:f7:b9:6e:75:18:b5:b8:da:97:e3:5b:22:24:83:
a5:e5:c8:61:c9:85:a1:73:fe:54:03:14:07:0b:82:
e8:d1:12:e4:85:d7:0d:62:27:90:09:11:b4:bb:84:
82:1a:75:42:ab:e9:2a:f9:30:30:34:23:7f:ff:87:
14:58:f4:07:db:c8:45:8a:fb:39:48:2a:b3:0c:bc:
5e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:91:82:EE:10:30:EA:7E:26:2C:04:8F:C3:68:2C:A8:19:60:89:16
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7e:81:3e:06:50:a4:ce:03:c9:0f:56:6f:52:65:d9:54:62:
b6:7d:6e:72:b7:1b:21:81:fd:fb:5f:4b:fb:12:3e:08:94:2c:
fd:2f:3e:44:32:d6:ac:52:f7:27:ce:9b:fc:8e:7e:c8:86:f3:
f1:e5:d1:86:59:0d:4f:b7:43:59:63:cf:ab:07:2d:47:5a:0c:
07:4c:a3:1f:01:3e:15:91:f0:72:85:e9:10:65:ef:7f:48:d2:
5a:5f:d1:95:82:56:f3:b5:53:f1:6e:f5:63:40:22:5e:09:d9:
4a:c2:3d:e0:7e:af:02:50:3e:fc:e0:32:84:d1:6b:3e:77:e7:
f8:da:ff:b7:42:6d:43:c2:ca:17:64:e4:43:1c:14:94:4d:a4:
5e:ac:c9:c1:a7:14:df:2f:bd:a5:63:b6:33:f9:58:0a:44:b3:
fd:8d:a3:d7:bb:1c:bd:be:b2:07:0d:1b:3a:e5:14:d5:fc:b1:
f7:11:29:a9:1f:a0:3a:72:d8:99:33:48:1d:65:a3:85:98:26:
13:2a:5c:8f:3b:16:9a:7d:cf:94:24:de:20:8b:83:6a:1b:13:
df:4c:d8:76:54:56:b4:d2:00:6a:79:25:f7:87:10:44:c5:c5:
59:f9:f8:19:29:57:6f:f6:bd:f7:c4:94:67:c0:cc:f2:7d:19:
89:cb:19:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:13:07 2025 by rpki-client