Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
File: 7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft (raw, json)
Hash identifier: p1fpoU7pB3JYpbnYlpyM9wQHApidGMe5EygifWeauoQ=
Subject key identifier: 8D:7F:0B:1D:7E:9E:8B:D8:0D:CD:55:88:DC:4E:A7:67:E4:BE:76:37
Authority key identifier: ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97
Certificate issuer: /CN=edd482c2bee8460048d82902cec9867205222997
Certificate serial: 019A50E3243A8D6A6F3095BD623D2B71D6CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 22:00:54 +0000
Manifest this update: Tue 04 Nov 2025 22:00:54 +0000
Manifest next update: Wed 05 Nov 2025 22:00:54 +0000
Files and hashes: 1: 7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl (hash: +YniJPnD0btBbPqJ0nrHZpbXea1ZBstbz9Ff9G8hMTI=)
2: oXNlY-oBhR7dTf9pZaxVV6POHQg.roa (hash: K1qaC6BRPPJv+auFKCvtZX9lIT9BoIVDnlW+2EVLt0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:24:3a:8d:6a:6f:30:95:bd:62:3d:2b:71:d6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd482c2bee8460048d82902cec9867205222997
Validity
Not Before: Nov 4 22:00:54 2025 GMT
Not After : Nov 5 22:00:54 2025 GMT
Subject: CN=8d7f0b1d7e9e8bd80dcd5588dc4ea767e4be7637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:9c:88:ca:b7:44:c8:e0:08:43:42:67:25:
b0:45:b4:69:d9:56:6d:2e:94:9c:a8:18:dc:10:ec:
8f:e2:6a:51:ce:4a:91:f7:1a:14:b3:0a:fd:22:bd:
c3:e9:4e:28:0a:a6:61:22:94:fe:a3:92:59:95:4b:
ca:46:5a:fd:fa:e2:7a:b8:8b:df:d1:d0:8d:ec:eb:
cb:fd:ca:91:e0:62:92:3e:03:75:10:cc:9f:75:ef:
f9:cf:0f:97:9c:d9:ed:87:a2:04:b8:16:8c:12:d2:
17:c3:17:79:d3:b1:9b:6b:f8:ef:6c:96:6d:90:60:
23:61:10:77:fc:c2:54:cc:b9:93:36:e2:72:e0:07:
d6:ed:ab:78:53:34:b3:70:90:34:ff:1f:fe:4d:00:
52:82:c0:75:98:2d:36:e8:65:29:0b:21:2b:25:ce:
28:d7:b5:93:3c:6a:bd:ab:48:10:84:93:32:d4:cd:
11:60:d4:4e:8a:52:35:38:0c:00:22:d0:cf:fb:21:
37:8d:24:46:e8:98:bc:70:98:3e:82:ba:b1:05:ae:
82:cf:20:64:0d:07:d0:64:85:32:2b:76:cd:05:5c:
2f:01:4e:b8:e4:2b:fa:79:7c:54:99:95:50:fa:29:
08:f7:12:dc:f8:33:c7:21:70:44:c8:d1:2a:da:dd:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7F:0B:1D:7E:9E:8B:D8:0D:CD:55:88:DC:4E:A7:67:E4:BE:76:37
X509v3 Authority Key Identifier:
keyid:ED:D4:82:C2:BE:E8:46:00:48:D8:29:02:CE:C9:86:72:05:22:29:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dSCwr7oRgBI2CkCzsmGcgUiKZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f5fd95-d2f0-4295-96ce-9d9091bed8d7/1/7dSCwr7oRgBI2CkCzsmGcgUiKZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:fd:4d:e7:7b:fa:d9:6a:fd:50:40:73:74:1b:1a:ad:76:a7:
63:e4:31:2b:1a:7b:11:b6:c4:1c:15:dd:ab:a8:7c:6f:38:d4:
e2:e5:0f:17:a4:6f:15:4f:60:c5:75:88:1d:39:87:17:71:0b:
29:cc:d1:83:05:be:f0:b9:4a:e1:90:8c:23:ee:16:6e:cc:cb:
1d:b0:03:64:e3:6b:60:0d:55:5b:cc:8d:7b:72:2e:94:15:72:
20:07:c9:45:f3:4e:55:6c:a2:4a:07:72:28:52:07:15:eb:b7:
ec:42:ee:93:a9:27:04:7d:43:8c:69:cc:22:b3:25:4c:64:1d:
ed:1f:b4:77:04:35:2a:ca:74:48:9f:3d:4c:41:be:3d:bd:74:
e2:1b:ed:d2:bf:76:f6:0a:a0:30:1a:cc:fc:3a:62:9f:02:7d:
b1:31:83:c5:d1:07:ee:ec:bd:64:6e:12:76:82:62:a1:76:67:
aa:41:84:fe:62:87:a7:4c:4d:95:be:c4:53:49:06:21:e1:63:
25:41:17:29:99:c2:92:55:29:20:b3:64:35:93:2c:28:d1:a8:
48:31:b6:0b:b0:2a:fb:7d:49:90:9c:49:59:67:d9:19:25:ab:
e1:28:5f:88:a4:4d:df:82:0a:ce:2f:b8:a1:47:57:b2:5d:47:
fe:1c:6a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:43 2025 by rpki-client