Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
File: 7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json)
Hash identifier: QqxaH1EABsODlqntML+tYx90ziwqb9f81qzgUy3H/fo=
Subject key identifier: 39:B6:93:7A:83:BC:36:5C:BE:99:7B:94:B2:4E:EA:28:A3:9A:2E:BC
Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Certificate serial: 0198D65FE9AD89808AC6956E73E28347B85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
Manifest number: 02AB
Signing time: Sat 23 Aug 2025 10:01:06 +0000
Manifest this update: Sat 23 Aug 2025 10:01:06 +0000
Manifest next update: Sun 24 Aug 2025 10:01:06 +0000
Files and hashes: 1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: 046iT4X7Bgzfg+1qk8uShT/T9J16G+cpDrPlO1+ANm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:e9:ad:89:80:8a:c6:95:6e:73:e2:83:47:b8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Validity
Not Before: Aug 23 10:01:06 2025 GMT
Not After : Aug 24 10:01:06 2025 GMT
Subject: CN=39b6937a83bc365cbe997b94b24eea28a39a2ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9c:0f:30:1b:07:ae:35:b5:f3:a0:c0:b0:75:
c8:a2:8c:a5:4a:45:8c:96:63:30:0e:dc:db:22:ab:
f6:97:ae:b4:df:d8:96:5b:94:05:5c:7c:81:20:83:
42:2b:43:a0:af:bf:fb:73:a2:61:8e:e8:b5:84:bf:
1a:dd:71:c7:31:18:6a:ad:a7:6f:4b:45:8c:3d:56:
a8:84:32:f8:c7:24:0b:b8:8b:b4:aa:91:2e:9a:59:
fe:c5:9c:a7:cb:5d:f8:12:f3:16:dc:ca:7e:ee:ca:
0f:92:4d:a7:b0:3a:f7:cf:f4:0b:16:38:96:f3:e1:
09:8e:32:c7:9d:7b:2b:98:f1:be:d8:f1:ea:d0:b9:
d0:14:41:81:04:84:06:2f:61:69:9f:2f:39:85:1e:
34:e8:3e:a0:26:50:27:89:c8:7f:1d:8f:63:f1:8d:
36:73:12:61:9f:99:e3:a9:29:ed:5e:b6:e4:59:fa:
17:27:f6:b2:ab:ea:5c:eb:5c:57:50:f7:57:5c:d1:
15:c3:18:3c:45:2c:4b:e6:bf:cc:cb:1d:59:0e:f9:
41:e0:06:5b:1c:28:f5:f7:44:e1:ac:67:23:7b:ac:
73:5d:a2:a8:8b:cd:4e:fa:49:38:80:38:0d:43:2f:
67:72:d5:c6:c6:72:b7:f9:c6:9e:9e:3e:76:8c:42:
03:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B6:93:7A:83:BC:36:5C:BE:99:7B:94:B2:4E:EA:28:A3:9A:2E:BC
X509v3 Authority Key Identifier:
keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:10:21:17:00:37:cf:a3:59:39:e9:d5:be:2d:a1:c8:2b:8b:
2d:0a:15:ea:70:44:ab:b7:a8:1b:f6:64:f5:a1:1d:72:7c:62:
76:91:44:1e:eb:7a:b4:44:92:f7:b1:67:70:01:0f:78:ef:64:
f0:b9:cf:33:7f:a9:c3:ed:4c:60:7f:7e:4e:f7:6b:8d:a1:e7:
46:c3:d7:4e:8d:53:7b:55:54:2b:77:ac:81:c3:72:d9:24:56:
42:ef:9a:3a:b5:8a:5d:c0:3d:eb:b4:2d:6a:37:48:ea:c8:95:
86:4b:b3:dd:fd:b4:98:65:a6:72:b3:b9:4f:fd:56:b1:ce:28:
c0:0d:66:fb:7f:6d:59:b4:65:d6:45:08:20:6e:3a:61:79:9a:
f4:44:94:c0:68:e1:2f:47:2b:8a:86:c2:7f:29:81:4e:fb:77:
8d:73:1f:0f:90:9b:3d:94:d3:ec:11:68:e7:74:31:4e:b9:3b:
e9:d8:62:a9:bd:e8:f0:91:d2:11:95:00:8a:8b:eb:4d:47:ad:
84:30:2f:0c:97:41:48:26:f8:2f:31:18:45:9e:f4:ee:9c:af:
fa:3c:21:99:8b:76:f8:e8:b2:b8:94:94:b3:a3:8d:32:f0:ea:
3b:b6:25:79:70:d4:ab:95:ce:1a:23:d5:f0:31:ff:16:e1:65:
1c:df:5d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:12:56 2025 by rpki-client