Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
File: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft (raw, json)
Hash identifier: xZ/igJS9O6Px3ZKAtp0YRKOyLGKnZQBEDIbkFYQOBl0=
Subject key identifier: A8:56:37:C1:47:D8:27:44:68:1F:43:B5:9F:86:14:F4:80:87:F3:90
Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
Certificate issuer: /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Certificate serial: 0198D3CBEE8888B7E645998673488769C4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
Manifest number: 0E8B
Signing time: Fri 22 Aug 2025 22:00:14 +0000
Manifest this update: Fri 22 Aug 2025 22:00:14 +0000
Manifest next update: Sat 23 Aug 2025 22:00:14 +0000
Files and hashes: 1: 7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl (hash: 6VTvt28TkW3dqKQV+Xfp893ADovl6DrWVIyEczruf7c=)
2: Oa1APz8Z3VqUSkn7pmEQCd0lKVI.roa (hash: QtzoauH/RzUtDgfvRpOYRMXpvVGDj4TzJKcxAck6c7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d3:cb:ee:88:88:b7:e6:45:99:86:73:48:87:69:c4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Validity
Not Before: Aug 22 22:00:14 2025 GMT
Not After : Aug 23 22:00:14 2025 GMT
Subject: CN=a85637c147d82744681f43b59f8614f48087f390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c3:e7:95:5e:f0:69:3e:f0:29:e4:99:56:b5:
84:de:fa:8c:ba:e6:e1:8c:65:45:ee:93:0f:03:ee:
c1:82:35:3b:f4:46:42:1c:bc:af:d0:95:50:1f:b2:
41:e9:9c:96:a0:2a:dd:3a:5a:82:7a:66:29:62:cb:
43:a3:e8:ea:36:9f:1c:7a:82:e1:6e:2a:1b:ea:38:
1d:14:3e:24:6e:01:17:bb:f8:e0:c9:34:21:21:53:
17:64:e4:29:82:e6:b8:f8:fd:93:09:5e:36:a0:98:
c3:04:c8:c4:e8:ac:d3:e3:10:69:39:3d:d8:b5:05:
1a:c9:66:db:8a:0f:29:67:88:d9:2a:20:49:54:b8:
d3:4e:63:65:d5:4f:5d:59:4c:3e:9a:08:f1:8e:fe:
8b:a1:0d:ae:f1:04:c6:cb:97:d0:d3:e2:3f:45:b3:
6e:18:0a:c0:d0:f2:8e:51:33:4f:45:65:5c:33:e2:
c1:8b:04:06:0a:97:4e:69:c5:fd:32:f0:60:f3:8c:
a1:dc:a9:9a:3a:f0:d3:e8:b6:d1:4d:08:2b:88:62:
4c:68:94:f4:fa:2e:e6:78:d5:82:4d:dc:45:eb:87:
77:8d:b9:b3:f2:b3:8a:57:72:1e:88:91:f0:ee:b2:
b0:f7:b8:01:80:5c:30:99:02:f3:27:40:ae:d5:83:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:56:37:C1:47:D8:27:44:68:1F:43:B5:9F:86:14:F4:80:87:F3:90
X509v3 Authority Key Identifier:
keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:bd:10:85:12:5b:c7:2c:36:c6:6e:a5:2c:63:8e:0c:bf:ab:
83:aa:22:91:bb:ac:3a:e4:13:85:75:5b:35:c1:1f:2c:86:a7:
81:72:ee:c7:5a:5c:53:fd:95:bf:e8:cd:1a:0e:36:a5:72:65:
28:2d:c6:d9:4b:f5:b4:ec:d0:96:0b:69:8e:0a:bb:7e:d0:9c:
c7:b5:9c:85:3f:ab:a1:7a:9a:c1:1d:75:0f:d2:a3:5a:85:81:
8e:7f:35:30:ef:57:79:02:44:66:76:e2:71:87:53:8d:ba:e1:
e5:21:a8:78:d7:ad:5d:60:cc:54:bd:f7:a4:08:fd:66:14:77:
61:6d:6d:61:95:e6:8f:96:4e:a5:ba:fd:4e:aa:ec:99:cf:0e:
a2:86:8a:dd:39:ac:51:94:33:db:94:59:69:ee:c5:a8:90:be:
8c:ac:da:a1:c7:de:70:a3:76:91:5d:03:fd:a8:da:f4:34:a9:
61:db:00:47:eb:94:5b:b6:d9:1c:21:f6:1e:1a:cb:8d:56:c1:
c6:91:07:f5:83:74:b4:14:50:21:ac:ea:56:21:d0:f2:45:88:
55:f1:1b:33:6e:ce:f3:6c:7b:88:ca:e0:a8:e2:d7:65:51:a4:
3f:de:9a:a7:65:6f:d2:01:42:fc:5b:79:66:01:ea:36:07:9a:
fd:d5:18:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 01:35:06 2025 by rpki-client