Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
File: 7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json)
Hash identifier: QN0ANJo7pf2hKdy5Yhdg3JJxiY+xLbtj5T9OAquVBA4=
Subject key identifier: FC:22:7B:DC:21:E7:A8:81:BC:31:5C:C1:27:DB:24:D7:DE:48:70:9E
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Certificate issuer: /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial: 0198D65F3B82A913D0F15EE5889A8C86E2EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
Manifest number: 04DD
Signing time: Sat 23 Aug 2025 10:00:21 +0000
Manifest this update: Sat 23 Aug 2025 10:00:21 +0000
Manifest next update: Sun 24 Aug 2025 10:00:21 +0000
Files and hashes: 1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: l/514zz0FyhMgYNqBKAsghc/tZYflBwbyrUQe9zwkdM=)
2: ciVuDSG137gexnzKwYgFKSw1JAo.roa (hash: Lu0ROEw0vfSrXmfo6gMAWwlGmmUA9I7hRO+NmRoxqGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:3b:82:a9:13:d0:f1:5e:e5:88:9a:8c:86:e2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Validity
Not Before: Aug 23 10:00:21 2025 GMT
Not After : Aug 24 10:00:21 2025 GMT
Subject: CN=fc227bdc21e7a881bc315cc127db24d7de48709e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1a:a3:85:76:e8:1c:6d:27:9a:fc:50:2e:92:
8d:6d:97:eb:b5:43:55:12:17:4f:b3:42:96:d6:cf:
83:98:ef:cd:78:bd:17:0a:36:f0:77:2b:26:fa:4c:
a2:ac:49:7b:49:a6:84:ba:eb:d5:5d:9d:42:a3:53:
2c:dc:ae:36:47:d3:8f:e1:33:e1:a5:72:2f:4b:0a:
f9:26:20:51:63:01:30:b5:59:05:dd:e1:30:0e:ca:
c8:a7:8b:0a:16:e3:dd:5f:da:a6:d1:18:fb:77:22:
59:40:22:ca:e8:61:40:34:ed:83:47:d1:8f:2d:dd:
be:d1:17:06:ba:52:51:d0:d2:10:19:4e:90:6d:12:
e2:aa:8f:82:ce:dd:6c:98:96:5f:9e:60:5d:5d:38:
35:50:b8:66:bb:a2:e2:9e:c9:67:11:1c:1d:34:94:
3a:18:b2:5a:68:54:c7:8a:5e:6c:57:dc:cf:27:b1:
35:13:1c:be:47:0e:99:ac:0c:2f:e5:c7:9a:d1:d9:
db:50:7d:b6:7c:dd:dd:e6:59:dd:f3:0a:8d:19:bc:
c0:4f:d6:29:d1:8d:a7:73:91:db:d5:90:2b:d6:0f:
45:01:05:9d:d1:f1:7a:e0:67:9e:fb:3a:ec:af:cd:
d3:1c:f6:5b:47:81:f9:d6:fe:de:81:be:9f:c9:2c:
d5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:22:7B:DC:21:E7:A8:81:BC:31:5C:C1:27:DB:24:D7:DE:48:70:9E
X509v3 Authority Key Identifier:
keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ca:4b:5b:5a:8c:e7:d0:58:a6:4f:d1:05:4c:3d:c8:75:f4:
53:44:f7:2c:33:1e:65:66:64:f3:27:62:47:64:77:81:84:3e:
81:d7:c5:ad:dd:27:55:74:82:7e:84:7f:81:15:be:38:6e:be:
8b:ec:82:56:6d:6b:26:eb:da:50:a2:d5:e3:e6:9b:db:b0:6b:
b3:d0:2a:4e:7a:f1:9b:81:9f:96:d1:ce:52:fb:62:fb:2b:c3:
47:de:f3:42:4b:bd:af:93:ec:97:8d:18:fc:91:b8:54:1a:9c:
55:52:47:ad:cf:02:ac:c9:21:07:ef:70:73:b8:96:8e:d3:67:
7d:1b:3d:8d:f6:4e:1d:96:38:22:55:13:b6:f1:ed:e9:c1:82:
52:52:07:4a:06:34:42:c5:b4:fb:4b:74:ae:2d:5f:ad:7d:6c:
be:f3:79:a3:12:01:cc:70:5a:02:f0:0d:87:99:1c:cf:7e:3d:
5e:d3:36:5e:38:3f:80:ba:7d:9c:a0:2a:8e:a9:be:8f:8e:22:
80:bb:3d:50:e4:59:c8:25:41:7b:18:8a:76:3c:6f:ff:61:ca:
36:61:9a:20:ec:43:be:11:0f:99:29:5b:da:81:97:ac:1e:f0:
9f:a4:c8:07:9f:e6:8b:cc:ca:72:e4:f7:6e:3c:02:45:da:29:
d9:25:76:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:23:23 2025 by rpki-client