Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
File: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft (raw, json)
Hash identifier: wiF7FvbLzUwvVg4lSQlMtfmqKkwyX69bcVPVm0Z6FYA=
Subject key identifier: 0A:D1:61:0A:AE:94:C1:72:6F:1B:0E:D5:92:4B:96:80:0F:67:38:1B
Authority key identifier: EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
Certificate issuer: /CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Certificate serial: 0198D54E8CA25D09159608262B048E1E09D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
Manifest number: 0D29
Signing time: Sat 23 Aug 2025 05:02:31 +0000
Manifest this update: Sat 23 Aug 2025 05:02:31 +0000
Manifest next update: Sun 24 Aug 2025 05:02:31 +0000
Files and hashes: 1: 7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl (hash: B13ULoQlF4THOAqSRHligm2qdAaD8hWyWIOkH9WpJX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8c:a2:5d:09:15:96:08:26:2b:04:8e:1e:09:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee03df829afd6a1f2590e4244522e1b36c086a94
Validity
Not Before: Aug 23 05:02:31 2025 GMT
Not After : Aug 24 05:02:31 2025 GMT
Subject: CN=0ad1610aae94c1726f1b0ed5924b96800f67381b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:9e:49:55:23:cc:f1:f7:00:7d:cd:7f:06:
01:f5:6d:d8:34:58:51:38:fa:47:35:80:91:18:4a:
ce:3c:49:f1:fa:40:31:af:cf:0c:63:6f:b7:68:08:
f8:9a:6c:62:a6:35:40:c1:00:ce:c7:47:64:c3:fb:
29:dd:84:3d:83:ad:80:09:9d:d7:86:45:92:bc:56:
a6:78:17:83:d9:9f:d3:5c:06:7f:fa:89:cd:0e:c8:
c2:e5:23:da:73:af:c3:29:ee:66:93:86:71:31:f1:
a3:d1:37:55:70:67:a5:1d:61:3d:05:97:ff:71:d8:
d5:2f:dd:8e:db:50:b0:ee:66:1e:ed:15:40:bb:34:
f1:0c:1d:90:6a:db:95:70:2c:dd:a9:33:f7:04:e6:
50:1e:8a:b3:89:dc:d6:f3:19:ed:3f:9c:75:63:01:
38:05:2d:ec:76:91:26:8b:f6:44:7c:f6:e7:99:12:
0d:3c:58:6e:8e:c0:aa:5e:c1:6a:cc:2b:1a:c0:4d:
01:72:a9:ea:b3:14:dd:c6:a7:5d:98:60:6c:a4:b6:
39:44:1c:88:39:9d:b7:0f:28:80:3a:d7:24:67:e0:
91:a3:9d:46:aa:0c:e9:4c:14:6b:8f:90:86:6a:85:
ac:6f:7d:45:57:b9:e8:50:83:19:16:54:34:9b:da:
ea:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D1:61:0A:AE:94:C1:72:6F:1B:0E:D5:92:4B:96:80:0F:67:38:1B
X509v3 Authority Key Identifier:
keyid:EE:03:DF:82:9A:FD:6A:1F:25:90:E4:24:45:22:E1:B3:6C:08:6A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gPfgpr9ah8lkOQkRSLhs2wIapQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/aaacf7-bfda-403e-bf62-a1a46a80c1da/1/7gPfgpr9ah8lkOQkRSLhs2wIapQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:dc:a1:1e:3a:dd:b7:6d:43:c0:5f:7c:3d:83:08:c8:c7:5f:
3b:ce:76:7d:cd:23:9c:13:72:95:8c:fb:0f:c1:f3:d6:79:b6:
e2:d4:51:ce:b2:44:db:b7:b4:28:a5:db:ec:fc:84:ed:09:48:
84:e6:7f:75:e1:59:c7:87:5d:ec:ac:61:35:be:51:16:4b:71:
6b:48:2e:49:5b:6f:16:fb:3c:27:9d:bd:f1:ae:81:bd:fe:77:
81:31:5f:02:57:37:27:18:aa:a4:17:f7:18:6a:de:5d:21:d6:
f3:f7:d3:33:a4:d0:b3:c1:d7:09:95:c6:15:e0:1a:14:8e:13:
18:25:d3:75:70:0a:7f:ca:37:8b:a4:db:5c:be:44:ac:13:91:
4c:26:d7:f3:08:98:47:4a:56:8e:0e:ad:f4:cb:57:87:9c:f3:
66:2c:22:93:d9:07:85:3d:a3:fd:e2:3d:07:af:0d:76:f0:40:
58:aa:03:38:86:6f:07:28:f8:5b:ef:6b:d3:e3:7a:f9:89:9f:
5c:8c:f2:43:57:24:98:93:52:d1:99:8e:2b:a5:d1:a4:e8:80:
01:99:bc:7b:95:5e:3e:03:f9:e7:22:ee:b3:f9:73:35:84:09:
02:11:a9:a5:65:23:ca:47:7d:4c:93:36:53:90:0b:aa:13:25:
0c:cc:1d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:57:28 2025 by rpki-client