Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: YXs7/5wLp9piYv+7sW0C+K9czdy2H+PxCK3u2jVjKTk=
Subject key identifier: 43:D9:B8:E4:E6:11:F1:32:1E:AF:FC:19:C0:F9:18:C4:CC:6B:EF:62
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 0198D6CD97E8A4176720736CE51187E2FA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 0500
Signing time: Sat 23 Aug 2025 12:00:54 +0000
Manifest this update: Sat 23 Aug 2025 12:00:54 +0000
Manifest next update: Sun 24 Aug 2025 12:00:54 +0000
Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: SJMNpnsM4iQgBZszGZu6k7k4tn4UY5d2iQzLUgYmwD0=)
2: TaWWlaQdJDy__bPOa0_wHi28kgw.roa (hash: GmxVMkOCc40Mr9ux5EGho294LI1OMaDC/pTrag518As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:97:e8:a4:17:67:20:73:6c:e5:11:87:e2:fa:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Aug 23 12:00:54 2025 GMT
Not After : Aug 24 12:00:54 2025 GMT
Subject: CN=43d9b8e4e611f1321eaffc19c0f918c4cc6bef62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:40:05:37:ba:f7:9b:b0:60:c7:8d:6a:5f:82:
4f:95:ff:2f:68:43:b7:01:53:f4:bd:c9:96:ed:21:
95:05:e6:8f:cf:00:60:b9:25:c0:74:92:8f:37:ff:
e5:9b:fb:2f:91:04:26:05:1f:ae:cc:ad:bd:41:55:
6f:1a:af:66:dc:09:5e:22:aa:89:8c:b9:b1:7a:7e:
2c:7a:a6:8c:3f:3d:50:ee:43:9a:76:67:57:ef:72:
ea:c9:e0:31:ca:7c:30:8e:2a:f6:41:94:19:19:11:
aa:78:27:63:c3:2e:ef:9e:38:1b:f7:07:d2:00:0c:
52:2b:1d:c7:1d:1f:a5:35:a3:c9:f1:d0:34:47:8f:
f9:94:f3:55:8d:bf:7a:d8:11:c1:f7:36:35:85:e5:
74:8c:99:ed:60:3d:94:2a:1a:e7:e2:6c:79:40:a0:
64:ac:04:9d:27:29:5f:8c:c6:34:f6:4a:ef:a4:ca:
10:6f:9c:2a:6c:9a:e7:bf:8b:54:da:a1:16:22:e4:
b2:58:ba:ce:a3:73:24:c4:96:85:cd:f5:9c:06:c6:
71:f0:c7:cd:fc:2a:98:a7:0e:d5:ee:d1:13:80:ed:
4e:6e:38:e1:15:e6:8e:c1:4a:27:69:29:b3:65:c9:
94:bb:92:13:f2:a9:2d:54:4d:12:8c:b6:7c:ae:b1:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D9:B8:E4:E6:11:F1:32:1E:AF:FC:19:C0:F9:18:C4:CC:6B:EF:62
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cb:9b:2c:b3:55:f6:f9:44:c0:84:39:de:c1:1e:5a:26:39:
3f:71:cc:6d:88:c1:70:24:38:1c:99:2a:3f:fc:f3:46:fe:28:
83:23:65:de:83:9b:8c:48:c4:fc:4b:4e:3c:90:82:82:5c:98:
bf:e8:02:21:e9:fc:8b:bc:a5:75:b5:7e:9b:fc:88:28:09:45:
11:72:14:72:3a:46:93:2a:e0:3f:ca:c7:e5:6b:fd:58:8a:f5:
6c:95:e1:b5:34:be:5a:cb:c8:a6:38:5c:32:d3:a5:84:42:92:
af:0f:a6:14:03:f6:08:c3:a9:45:fb:72:9b:88:4b:a6:96:d5:
df:8c:f3:53:2f:23:c8:c1:86:8c:7f:a1:f2:dc:4e:ad:7a:3f:
cd:51:fe:eb:aa:9f:87:67:dc:15:85:4f:b5:82:33:4d:fd:a6:
e0:fc:4f:57:6d:8a:67:54:67:e5:aa:73:6a:60:52:93:49:fc:
84:e0:40:65:47:40:a9:05:1e:e8:f6:e4:48:cb:aa:f6:75:1f:
68:c3:3a:ab:b8:6e:87:9a:41:41:48:3d:61:24:fd:47:25:59:
bb:22:6f:1f:27:0e:38:93:c7:b7:2b:31:78:b9:84:8e:77:48:
15:36:d1:9c:a7:7b:c8:42:36:a5:2a:be:c1:1f:39:ca:ac:e9:
43:5d:56:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:05:43 2025 by rpki-client