Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
File: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft (raw, json)
Hash identifier: ONI16flJBs43auRHBlfsUfvAcNZMrXlH6qS/vVcNFnQ=
Subject key identifier: 8D:15:40:9C:55:15:03:79:DF:D6:95:B5:F4:44:72:F3:A8:A9:C2:13
Authority key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Certificate issuer: /CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Certificate serial: 0198D5BC38571897CC307EEBDB6DBF66C72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
Manifest number: 13A9
Signing time: Sat 23 Aug 2025 07:02:18 +0000
Manifest this update: Sat 23 Aug 2025 07:02:18 +0000
Manifest next update: Sun 24 Aug 2025 07:02:18 +0000
Files and hashes: 1: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl (hash: FswtrBN5db64tTAHBHedawrd3nKmYA26MId6/Yg5ADU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:38:57:18:97:cc:30:7e:eb:db:6d:bf:66:c7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Validity
Not Before: Aug 23 07:02:18 2025 GMT
Not After : Aug 24 07:02:18 2025 GMT
Subject: CN=8d15409c55150379dfd695b5f44472f3a8a9c213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:92:be:53:6a:98:e4:da:1c:63:b0:21:07:
70:ea:b2:4e:74:d7:d9:b2:74:30:c4:18:88:8e:b3:
df:b8:7b:21:48:c5:e0:90:eb:a0:0f:9d:d9:94:b8:
02:35:71:89:11:b4:be:44:30:c6:51:2d:22:62:43:
88:40:1f:b3:7a:a7:9d:bb:9a:2f:8c:66:47:5a:9c:
c3:a3:22:18:5f:35:a6:c4:46:cb:27:ba:fa:8a:c2:
e6:3c:fc:79:55:76:56:a6:7d:cd:d5:b0:78:d3:b3:
8d:51:2c:fa:8a:91:2f:45:15:19:dd:72:cc:28:5e:
2b:e8:4e:0e:88:5d:89:e0:7b:d4:de:39:74:b3:8e:
14:1f:19:e7:29:59:aa:05:83:25:5e:21:2a:1c:3d:
dd:60:b2:53:40:fe:32:f1:94:f7:b4:f1:0d:d9:e0:
8e:26:7c:4d:07:42:8c:32:f7:75:e1:65:67:b4:c2:
37:17:b1:c1:ce:54:19:2a:c8:a5:5e:9e:55:99:e3:
36:ff:41:98:91:dd:e3:06:b4:92:ae:f6:32:5a:82:
3f:2b:b9:2a:94:02:89:09:b2:97:b3:b6:39:ff:09:
21:e6:43:8d:67:10:ca:55:79:58:0e:e3:8a:e7:22:
a3:ae:03:0c:f9:4b:b3:52:1f:d9:ed:a6:bc:40:3b:
24:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:15:40:9C:55:15:03:79:DF:D6:95:B5:F4:44:72:F3:A8:A9:C2:13
X509v3 Authority Key Identifier:
keyid:EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d6:c1:17:56:79:e3:a2:24:d7:00:26:a0:dd:6b:05:b0:60:
1e:2d:6c:67:55:48:3e:82:a6:ae:c3:f6:cc:98:98:0d:9f:23:
9a:0f:c4:1c:17:6b:ac:f9:44:54:cc:5f:01:ef:3a:df:2c:e8:
e2:2d:8c:bc:63:6f:27:a0:6e:c8:1a:bc:aa:72:fd:14:f3:8a:
03:7c:c4:13:85:77:ff:3d:78:3e:d0:50:e6:74:07:51:81:27:
d2:d2:34:72:94:70:80:51:8f:89:e7:a3:6f:b6:a3:e1:ba:c9:
f2:92:d7:da:83:46:7d:05:79:da:25:da:87:a9:b0:8b:76:16:
d8:f6:3c:8f:c9:9a:45:43:cb:b2:e9:49:ce:f9:97:96:a1:74:
e9:44:8f:d7:35:65:63:40:2a:67:3a:1b:37:be:55:87:76:7e:
f4:5a:85:be:c4:7f:e9:fc:fd:6c:68:dc:c5:34:6f:d9:8e:ee:
7a:c5:c7:9a:3c:2e:47:50:a0:67:a4:0d:49:6b:ec:b3:8e:18:
89:c3:67:c6:aa:d8:3a:46:95:85:41:fc:c9:41:f0:6b:2f:f5:
b7:d0:27:72:57:b8:ef:6e:f6:b4:c8:21:b5:82:71:72:e1:71:
c7:4a:b6:8f:3b:91:6c:65:99:51:d8:6b:1a:56:d5:d0:0b:17:
00:20:bf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:31 2025 by rpki-client