
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
File: 7e4lp4qBa942LEDIbjm5R9DuL_M.mft (raw, json)
Hash identifier: pP9bBp6wY5AqoHm1dctpgPipRZDKS5FSzJT5NoHX+Ds=
Subject key identifier: C4:73:6C:AE:31:FC:9B:E3:4E:A5:28:4B:B5:7E:7E:2C:A0:30:92:71
Authority key identifier: ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
Certificate issuer: /CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Certificate serial: 0198D6CD330018293ABD66F9B14575158382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
Manifest number: 138F
Signing time: Sat 23 Aug 2025 12:00:28 +0000
Manifest this update: Sat 23 Aug 2025 12:00:28 +0000
Manifest next update: Sun 24 Aug 2025 12:00:28 +0000
Files and hashes: 1: 7e4lp4qBa942LEDIbjm5R9DuL_M.crl (hash: Cf8F3HEob7VlOgy6jOEL/CyEJARDfVxXeaFEv0yyj20=)
2: aCQkmSTzEflyT6Hwko3Tmkp5YgM.roa (hash: cY38nbBebmnJBkoepfEX2AZ8X9a8BlXKUlC0CLvNiCU=)
3: ot-4ava-H_JGfkFEE8IMfoH7D2U.roa (hash: 066ShywS1FpC299llP3evwqIgvXEIG2I1bIowA8MHvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:33:00:18:29:3a:bd:66:f9:b1:45:75:15:83:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edee25a78a816bde362c40c86e39b947d0ee2ff3
Validity
Not Before: Aug 23 12:00:28 2025 GMT
Not After : Aug 24 12:00:28 2025 GMT
Subject: CN=c4736cae31fc9be34ea5284bb57e7e2ca0309271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:64:70:ef:03:81:ab:bd:4d:27:b7:4a:16:
09:e0:a2:8e:b6:22:69:ca:98:4e:f9:b6:19:f4:e2:
b6:1a:a2:ec:34:5e:cc:61:e5:a2:4b:86:f3:2b:6c:
0a:78:72:14:68:22:70:f8:3a:b8:2a:e8:ec:d8:97:
fc:b0:2b:50:3e:c2:4d:14:cc:e7:4e:14:c6:7a:3e:
85:d1:a6:0e:6d:1c:0e:65:d6:7e:8d:fa:9b:ad:5a:
ae:28:9c:d2:6e:41:ab:af:2b:0f:a9:27:34:cf:33:
b5:15:46:34:2e:99:56:6c:16:93:31:fb:36:4b:46:
95:fb:58:de:0f:b9:1d:5d:95:00:c6:a4:03:1a:b5:
86:20:2b:52:1b:5c:81:be:cc:f3:9f:60:87:59:29:
ed:7b:c0:7c:ef:ae:b3:1e:f8:e1:8f:64:a7:7a:57:
b0:c6:18:ca:06:80:aa:3a:0f:4c:4b:e3:c1:90:a0:
c8:2b:81:60:42:27:db:dd:9a:cf:b0:d2:d3:35:22:
d2:b3:89:3a:21:00:62:b5:27:77:55:a5:36:72:7c:
94:67:e2:50:44:72:e5:ae:d1:7d:4d:3a:b9:32:c1:
03:6e:30:a5:69:8b:70:19:73:33:5c:ba:18:e4:1d:
a7:59:50:96:e7:6f:50:46:12:d4:11:54:56:f9:b6:
1a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:73:6C:AE:31:FC:9B:E3:4E:A5:28:4B:B5:7E:7E:2C:A0:30:92:71
X509v3 Authority Key Identifier:
keyid:ED:EE:25:A7:8A:81:6B:DE:36:2C:40:C8:6E:39:B9:47:D0:EE:2F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e4lp4qBa942LEDIbjm5R9DuL_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2c57e5-402b-4896-929f-54341cd13a9d/1/7e4lp4qBa942LEDIbjm5R9DuL_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7f:a0:56:10:5f:a4:48:a2:bd:05:07:dd:b8:f9:8c:b3:60:
76:60:f7:63:9a:9d:a9:79:d7:1d:68:17:94:3a:7a:f6:88:0b:
68:4d:27:e9:40:5a:79:9e:a8:c3:c1:87:c6:2b:59:6a:ba:d1:
28:19:55:ca:fc:72:e1:03:00:7d:7b:20:2a:27:bf:15:e3:40:
ee:78:5f:6c:0c:33:67:00:3e:d6:d0:db:25:cd:56:f7:dc:72:
fb:98:54:a2:d9:60:6a:63:57:87:f3:49:3a:fa:9b:ac:2b:6f:
a6:b7:cb:a5:3b:30:42:88:8b:32:f7:75:88:f9:52:3c:dc:e2:
1b:f4:19:16:a9:e5:dd:b1:11:75:b7:72:a1:ea:57:18:ec:2a:
83:9e:8b:28:d3:27:4f:bf:87:e9:f5:bd:61:1a:8e:7b:fb:a6:
e3:94:e1:63:13:7b:8d:e1:68:7d:7c:2a:32:e2:79:7d:49:17:
e1:72:15:43:ae:54:04:8c:96:ac:68:64:1a:fc:14:56:ca:c8:
80:e3:79:ab:f9:7e:39:6c:4d:c2:e0:9d:6c:a5:dc:35:e0:39:
74:1c:8f:12:8b:cc:97:e4:9d:6a:69:13:d8:61:14:70:8a:55:
48:6c:00:00:23:03:5b:41:98:dd:21:ac:a6:f6:49:da:db:99:
0e:c0:7d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:21:17 2025 by rpki-client