Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
File: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft (raw, json)
Hash identifier: yNCZ7nJCCM1Hp+oN8DnA6wejobaMCM3EhPA61ShlVQ8=
Subject key identifier: 92:B3:DA:68:5F:33:52:CC:BA:C5:0D:2B:4B:25:40:E0:3F:46:80:B0
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Certificate issuer: /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial: 0198D4E0BB36F1CEF4F3D1EF011D8925D8AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
Manifest number: 1289
Signing time: Sat 23 Aug 2025 03:02:34 +0000
Manifest this update: Sat 23 Aug 2025 03:02:34 +0000
Manifest next update: Sun 24 Aug 2025 03:02:34 +0000
Files and hashes: 1: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl (hash: 2v3ojqFmIX1jCbFa3lUZz8GBqQvPuzDCE0HsigXq5mk=)
2: UHZDSCwg4-DjCTw2ThSV9YMjtY8.roa (hash: yjuNgWENrQcHvxeDeJWLJxEQH/+1ANaZxCVsNSQeLLY=)
3: iXVDb19kvukiKPCGR7Xk4m4waFo.roa (hash: doLRr6Uuft22RZholuz/UG1fqLztwMyrNWgGHx261cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:bb:36:f1:ce:f4:f3:d1:ef:01:1d:89:25:d8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Validity
Not Before: Aug 23 03:02:34 2025 GMT
Not After : Aug 24 03:02:34 2025 GMT
Subject: CN=92b3da685f3352ccbac50d2b4b2540e03f4680b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c5:33:00:d4:42:82:e1:bc:8e:b6:a5:71:83:
72:7e:e5:ec:8c:ce:eb:62:7f:8d:d6:5e:e1:0a:9e:
21:b0:2f:59:e4:9f:88:51:08:ac:ed:56:c9:2b:94:
d3:c0:56:f9:df:e3:09:c8:b0:ff:3c:bb:70:54:ea:
d0:31:65:e6:1d:03:1a:65:26:95:c1:c7:3c:11:36:
09:80:27:75:11:7c:e4:28:f9:d3:be:3b:eb:81:b6:
89:e6:58:7b:88:30:9b:72:72:ac:88:5d:9b:50:62:
1f:eb:4d:c2:13:71:77:f2:ed:0f:6e:5d:60:aa:26:
cf:28:3c:80:fb:ed:fb:81:29:d5:00:cd:6a:02:73:
96:f0:6e:71:97:85:0b:fc:bb:55:ee:bc:1e:1a:b4:
a6:9e:80:29:18:bd:a9:e3:55:40:77:e5:e8:5e:cf:
a9:74:61:b6:3f:4d:34:5d:44:c3:dd:61:50:53:4c:
4a:6c:9e:01:56:85:63:e1:fd:7e:fb:63:9b:2d:79:
dc:8c:0f:3c:65:5f:22:38:28:da:e3:d8:59:44:38:
30:7b:08:3f:f5:53:0d:73:9a:f9:fb:b0:9c:db:20:
e5:0c:d4:f9:a4:98:d6:f4:3b:7b:c5:b3:25:6f:ac:
ab:19:38:56:46:49:fb:7d:21:3c:43:c4:3d:2b:8f:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B3:DA:68:5F:33:52:CC:BA:C5:0D:2B:4B:25:40:E0:3F:46:80:B0
X509v3 Authority Key Identifier:
keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f7:79:e9:07:d3:51:5f:b7:64:cf:fb:ca:05:39:88:70:e2:
6b:bd:bf:47:24:96:60:d3:36:42:f7:64:39:a7:aa:c9:be:30:
f3:7c:c9:25:b6:51:0b:82:5e:00:74:88:c1:07:61:72:2c:8f:
57:9e:8a:cd:5e:5d:87:f3:44:36:60:d1:a0:aa:c3:6d:f9:1a:
5c:df:bc:43:e1:62:61:4a:e5:63:56:a3:16:02:f2:69:14:bf:
3c:f3:b3:45:cb:3a:8f:e1:6b:4a:a9:25:fd:a8:5f:42:79:91:
d2:67:59:9e:42:ff:f7:f1:a3:85:95:3a:1e:59:19:7c:2a:e1:
3a:a8:55:cd:57:5f:9d:1a:6d:3e:9c:e1:0f:2d:4b:5b:e2:21:
f3:19:6a:d2:cf:c7:31:57:99:2d:0e:65:96:da:b8:dd:75:99:
33:56:07:d8:0a:bb:f0:e5:3a:2c:3b:43:e1:c9:12:42:36:7e:
ed:12:6b:c3:7b:78:9a:ec:64:2b:33:a0:50:6c:cf:ac:d0:47:
68:7c:db:a9:65:6a:de:4d:15:61:aa:7a:db:89:e1:fd:8e:dd:
fd:fb:a5:67:d2:84:6d:ad:07:84:86:df:33:a3:9a:ba:28:59:
f0:d6:83:ff:6c:21:ef:65:13:38:19:4a:42:c6:3f:90:a7:e2:
52:ab:d3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:11 2025 by rpki-client