Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
File: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft (raw, json)
Hash identifier: JArkBNwHltN6NCmlk1y9T5aoMlrw+WCJZfyRpYJDsDk=
Subject key identifier: B3:77:08:92:FF:8E:A9:8B:E7:BB:CA:B2:E7:78:7E:78:D3:18:72:39
Authority key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
Certificate issuer: /CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Certificate serial: 019A0447CEB377164A0F679A97C899592EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
Manifest number: 16E7
Signing time: Tue 21 Oct 2025 01:00:06 +0000
Manifest this update: Tue 21 Oct 2025 01:00:06 +0000
Manifest next update: Wed 22 Oct 2025 01:00:06 +0000
Files and hashes: 1: 7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl (hash: +eRHpgXnYFp0R4hj6CkQsyLOZgzQwnBlCH6E8b/U7fE=)
2: Lkrx4unp2o3bAPOAG9k2SxkBPAw.roa (hash: tRVbH1utg4EaQmIZJTzl8DdYJD6yoaFUDEsm8/u1MIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:47:ce:b3:77:16:4a:0f:67:9a:97:c8:99:59:2e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Validity
Not Before: Oct 21 01:00:06 2025 GMT
Not After : Oct 22 01:00:06 2025 GMT
Subject: CN=b3770892ff8ea98be7bbcab2e7787e78d3187239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:2a:34:d4:ec:16:dc:5d:52:65:85:bd:65:
b0:ae:29:2a:64:70:91:f8:80:dd:37:37:76:9d:27:
6b:6d:17:bf:3b:1f:ca:52:6e:fb:65:30:9f:37:b1:
2b:9a:34:ec:51:f9:51:e3:d6:ca:90:b0:e3:30:dd:
bc:38:cc:2e:f5:c9:5b:a6:e3:cb:d6:d6:25:cf:3a:
ff:8d:f2:20:79:fa:0c:fe:96:6c:e1:f5:74:bd:77:
d8:e1:30:5a:93:52:70:07:9b:ad:63:8b:14:58:62:
91:6e:01:41:2a:b4:32:5c:95:c9:8a:dd:f7:40:6d:
c3:37:41:c2:d0:cd:ad:07:65:d4:b5:2a:be:6e:0b:
e1:b0:9e:e0:6c:f4:70:69:1f:35:ac:00:bd:fc:16:
52:80:de:e4:a0:eb:e8:4b:d2:97:6c:0b:f0:eb:b6:
e2:b7:3e:a8:e1:05:c7:3f:fb:03:69:61:c8:53:1d:
52:ff:72:5e:78:7c:37:36:f9:04:47:ba:03:a0:d6:
b2:1f:8e:98:f7:46:54:5e:21:0e:31:46:74:98:24:
71:a3:4e:89:4a:69:c2:8e:89:a6:b5:3b:e0:89:8c:
34:b7:55:c9:42:b4:3a:c0:21:1a:3f:75:b4:13:5b:
b0:21:bf:7b:ba:a8:70:22:f6:bc:cf:02:56:e8:81:
f6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:77:08:92:FF:8E:A9:8B:E7:BB:CA:B2:E7:78:7E:78:D3:18:72:39
X509v3 Authority Key Identifier:
keyid:EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ad:40:bd:fd:51:c2:44:8a:e3:5d:a2:32:fb:68:1a:97:12:
c0:90:cc:41:99:ef:b7:63:0c:6b:88:4f:a3:b7:a9:0c:30:10:
df:10:14:14:c2:97:c5:8f:3e:da:01:fd:33:fd:10:b1:ef:ee:
b2:45:8d:d9:e4:15:37:78:31:e3:74:56:3e:ec:0a:37:4d:28:
8e:54:5c:4b:0a:ca:50:44:ce:d3:c5:09:3a:d3:dd:dd:82:bc:
f1:28:3c:a4:9b:24:ef:8c:a5:e3:19:34:32:8b:c5:45:0a:cc:
7a:58:89:04:a3:73:95:07:91:ac:4c:c0:68:27:b7:8d:49:e8:
a1:32:6c:81:d3:0f:44:30:ee:ae:19:f8:12:f0:11:f9:4f:ed:
f8:ab:a2:8c:f8:a6:27:5b:d3:cc:8d:cd:e0:19:ac:a4:4b:32:
fd:40:5c:cf:90:4e:09:09:3b:60:a2:49:5b:b7:5c:ed:3f:ed:
71:f6:78:51:39:a5:44:cc:cd:1e:08:2a:ca:07:51:7d:89:44:
67:5c:28:ff:64:89:99:b1:68:12:7c:a7:e4:78:fc:36:c5:2b:
9a:b9:2c:5a:cc:e6:7a:03:4f:8c:2c:dc:45:59:55:ce:62:76:
9b:bc:bd:ca:74:59:ca:a2:ee:3b:65:06:22:6f:5f:b5:8b:15:
50:79:47:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:36:25 2025 by rpki-client