Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
File: 7a8O0eMJHntcmc5DysEDEFWw84U.mft (raw, json)
Hash identifier: yM/1BktXTcqaeD94Yk4lnm1ddpswZrooPXIHzRGEjSE=
Subject key identifier: 74:9D:9D:17:C6:1D:B5:AF:5F:A0:B4:A8:63:8D:98:55:89:99:85:2D
Authority key identifier: ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
Certificate issuer: /CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Certificate serial: 019A4FD020F4FCBF443337125853D013A8E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 17:00:31 +0000
Manifest this update: Tue 04 Nov 2025 17:00:31 +0000
Manifest next update: Wed 05 Nov 2025 17:00:31 +0000
Files and hashes: 1: 15o9XcK98PCQe9Aw651YSY6KZxs.roa (hash: pNZyoE96eglB8CATVtXzqRTGbuEChhNcvG9WnCasQiY=)
2: 7a8O0eMJHntcmc5DysEDEFWw84U.crl (hash: YjKQb66ztZD2mfKCaAdpD0HEuvJGdbD7MyBN6KSLVIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:20:f4:fc:bf:44:33:37:12:58:53:d0:13:a8:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Validity
Not Before: Nov 4 17:00:31 2025 GMT
Not After : Nov 5 17:00:31 2025 GMT
Subject: CN=749d9d17c61db5af5fa0b4a8638d98558999852d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:92:86:88:11:b7:91:3c:20:dc:9c:9b:a4:
d9:9a:c9:6f:50:fd:aa:8b:06:da:51:c6:14:ea:1d:
52:aa:a9:9d:13:47:b6:6d:63:03:f9:66:ae:53:06:
29:7b:21:b9:80:61:27:42:82:f1:fe:cc:91:a1:e6:
03:34:4d:66:a9:90:c0:57:a5:44:fc:dc:d8:5a:ac:
37:be:85:85:85:8a:93:90:a8:9f:f0:28:ed:52:87:
39:c7:0e:f3:86:a8:fa:13:96:30:de:f4:2c:00:fd:
16:80:20:57:4d:e6:2b:f1:34:0e:9e:92:49:18:fe:
ad:0a:20:4f:31:55:1d:95:eb:98:0e:1e:71:f6:3b:
14:b7:21:63:2d:42:84:2b:db:d3:f2:4c:b9:c6:75:
97:96:9b:50:9d:5d:25:58:75:79:b6:5e:ad:4a:6a:
cd:71:03:e9:e9:39:df:ba:de:f1:fb:b0:1f:33:09:
53:83:d4:55:ec:cd:87:4d:2e:df:c0:f7:02:ca:8b:
bb:5e:4e:3a:09:35:7f:f3:8d:ed:26:c0:5e:bb:b4:
89:6f:23:91:58:32:f0:bc:3d:ad:9c:80:cc:32:05:
82:85:9a:8e:3d:a4:35:51:b1:69:15:60:fe:d0:60:
f6:42:09:82:59:0c:15:10:36:ca:65:90:c8:76:c7:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:9D:9D:17:C6:1D:B5:AF:5F:A0:B4:A8:63:8D:98:55:89:99:85:2D
X509v3 Authority Key Identifier:
keyid:ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:12:64:20:19:73:8c:3f:ed:ba:1c:68:75:67:cb:3b:56:24:
89:74:25:fb:79:d6:71:25:73:3a:b4:ba:8a:53:c4:c3:63:24:
90:9f:c0:fc:90:37:bb:44:0b:c0:d6:9d:9a:43:f7:cf:dc:a2:
97:d2:6b:6b:47:19:70:78:03:f0:e9:9d:d4:1e:7a:17:d1:41:
f6:31:97:80:50:ff:4b:81:66:25:97:57:c1:4b:a0:e6:7a:a8:
c6:02:7e:53:36:64:1b:87:4c:4e:7e:34:9d:e1:4e:4d:36:69:
35:68:8a:78:de:18:31:91:09:08:f6:3e:42:28:7b:ba:e9:48:
d3:4f:1a:a3:b5:98:d9:e9:05:1a:be:42:6b:78:c0:2e:d9:69:
64:a6:54:5a:fd:e5:52:fe:c0:de:4a:bb:87:6b:eb:dd:59:9d:
2f:a2:a7:3a:3b:c7:01:d3:9f:05:df:fa:28:58:24:33:52:98:
67:52:23:80:b6:a8:2a:46:10:9a:e0:0d:6b:9c:33:70:22:93:
d7:d6:7b:0c:ad:08:88:99:2c:36:e7:b5:9f:95:cc:32:39:2d:
67:bb:be:cb:22:2c:9d:ce:35:87:0f:b7:ef:b7:7e:9c:99:5d:
cc:ae:90:b4:1f:1d:48:2b:8d:3e:9c:d1:15:1f:09:f2:09:2d:
39:c2:68:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:39:02 2025 by rpki-client