Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
File: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft (raw, json)
Hash identifier: X9zZWLp5pfzNoaHnmBrNaxFIXsat0tayruaY7NQwH4Q=
Subject key identifier: 02:30:B2:F5:94:BE:44:DC:0D:80:A6:80:9B:FD:6E:50:87:B4:5F:EF
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Certificate issuer: /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial: 019A269D518235CBFD9E9EDE809E8D192F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
Manifest number: 1562
Signing time: Mon 27 Oct 2025 17:00:35 +0000
Manifest this update: Mon 27 Oct 2025 17:00:35 +0000
Manifest next update: Tue 28 Oct 2025 17:00:35 +0000
Files and hashes: 1: 7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl (hash: CrpWq4NpIMabIe5S7UM9H4d99FVoIrCYNq22iR79RZA=)
2: UXcHNRDTyy3PiUqS2xFpW1tKLYo.roa (hash: BltR1oVh4LzI1B9mL1LTvil5PzPzPEDEKGPAhFkqH3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9d:51:82:35:cb:fd:9e:9e:de:80:9e:8d:19:2f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Validity
Not Before: Oct 27 17:00:35 2025 GMT
Not After : Oct 28 17:00:35 2025 GMT
Subject: CN=0230b2f594be44dc0d80a6809bfd6e5087b45fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:a3:62:3c:65:26:00:7a:6b:6b:9d:5d:54:
4f:a4:2c:37:62:df:00:b5:34:6d:53:fe:6b:7e:67:
5f:1b:80:42:ba:fe:ff:26:3e:8e:c5:41:a9:22:a9:
4f:07:f8:76:31:e4:35:12:d5:77:05:6d:3f:c3:0a:
13:6e:31:f2:f1:db:49:f4:fb:9e:c1:56:0a:b2:0c:
a2:8f:1b:12:d0:5c:36:6b:e6:fa:65:dd:a9:a0:2f:
82:22:4a:d0:e5:c4:de:20:39:b9:3a:78:a9:76:6d:
57:50:41:02:de:ea:81:37:a4:4a:45:e0:9d:59:b2:
2d:6b:20:e2:e9:df:9f:2c:8f:ff:c9:08:b4:15:a7:
03:f6:65:5f:27:df:bc:00:f4:39:e6:54:d0:ba:b4:
3e:21:9b:d5:00:6c:9b:30:cf:4b:d4:21:55:66:8c:
64:16:e6:46:7e:59:dc:63:07:34:d1:9e:0a:b6:30:
ae:ea:b9:f7:fe:ea:b8:dd:ec:ea:39:cc:64:9a:24:
6e:b3:e9:49:ad:07:c9:7d:9d:92:4d:46:5d:88:55:
e3:23:1f:26:aa:1d:c8:b2:93:98:b6:7c:a2:6c:bf:
a5:00:2d:60:48:86:75:3f:23:e0:74:3a:05:b7:5d:
f2:19:4a:23:a3:32:17:39:77:30:7c:e3:f7:70:d0:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:30:B2:F5:94:BE:44:DC:0D:80:A6:80:9B:FD:6E:50:87:B4:5F:EF
X509v3 Authority Key Identifier:
keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1f:5d:43:74:e3:42:d0:05:48:73:2f:46:c9:5b:83:21:3d:
7c:07:c2:24:c5:26:de:21:d4:92:6e:eb:c9:d1:c9:f2:9f:c6:
4d:58:56:e0:5c:3e:0c:f0:48:43:77:fa:81:4e:78:5f:d0:75:
69:d4:45:4f:00:e8:b8:e8:96:73:b8:59:c1:87:3e:2c:3e:ff:
10:9d:aa:05:61:9b:f4:2b:96:b4:53:47:68:dd:96:65:15:25:
49:3a:c0:db:67:92:ce:82:9c:9c:28:7c:1d:67:ef:b8:4e:6b:
09:08:a9:24:e0:bb:27:dc:12:d1:ab:72:00:43:f0:83:80:e1:
78:44:a1:53:9b:e9:3d:9b:ff:c5:72:be:3f:a2:50:82:dd:16:
17:93:e2:72:2e:1b:58:a1:ca:1d:4e:eb:8f:14:a1:41:c5:19:
5c:44:67:cc:d2:2d:60:a2:52:78:6b:09:96:43:3a:48:c1:b8:
12:7b:79:62:fa:88:c1:6b:07:59:7b:e5:83:2c:af:65:5a:99:
ba:3b:73:82:61:f0:ec:00:4f:c7:5a:de:73:af:6d:b3:c4:d8:
2f:2f:e1:00:b8:54:fa:e0:31:21:46:62:f3:05:5a:04:67:40:
f1:cf:c2:ee:c2:c6:c3:fc:8f:66:b0:46:4d:45:c2:ec:74:d4:
95:12:e6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 23:30:15 2025 by rpki-client