Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
File: 7N82ls906pVb44OHTjmnJ6poJPE.mft (raw, json)
Hash identifier: QHR6ihB0gOGlSZzzn/xwuWIWncjzKtj4EFwAyGKADY8=
Subject key identifier: 5F:DC:55:BF:0B:75:7C:C4:F4:2D:EF:78:F4:96:AF:66:E0:45:F7:CE
Authority key identifier: EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
Certificate issuer: /CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Certificate serial: 0198D5F1AD583C00F1FB8C38ED898A82B63F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
Manifest number: 0FB4
Signing time: Sat 23 Aug 2025 08:00:42 +0000
Manifest this update: Sat 23 Aug 2025 08:00:42 +0000
Manifest next update: Sun 24 Aug 2025 08:00:42 +0000
Files and hashes: 1: 7N82ls906pVb44OHTjmnJ6poJPE.crl (hash: OrEGGBRobkkZ+HJvLut8wVqJzpQhqPwuB0JTYRuThug=)
2: ZI4Q9kO1bTra3EedEOX8SFlE0uE.roa (hash: ewlUFRb4YNwiqjWWGmDY++Dep/mg4M2HEOJdKGJhKsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:ad:58:3c:00:f1:fb:8c:38:ed:89:8a:82:b6:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdf3696cf74ea955be383874e39a727aa6824f1
Validity
Not Before: Aug 23 08:00:42 2025 GMT
Not After : Aug 24 08:00:42 2025 GMT
Subject: CN=5fdc55bf0b757cc4f42def78f496af66e045f7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:97:a8:b0:3e:36:01:ad:0c:6b:84:26:48:ec:
8b:34:e9:32:1c:87:65:b6:98:6b:9d:2c:cf:b4:65:
2a:03:db:ae:04:7d:5e:c0:c6:64:37:cf:e6:bd:01:
75:ef:f7:c4:b5:ec:82:dd:a1:6a:5f:ad:32:29:23:
48:4c:3a:35:fc:69:af:d4:5a:0f:70:69:c6:d0:bd:
64:76:6f:4f:68:f9:96:58:ea:9a:03:dc:d5:b1:fe:
8d:1a:bb:e3:c9:c8:05:a6:aa:50:a5:5a:89:d8:00:
ef:8f:1b:5f:44:e3:82:d8:38:e9:8e:0c:fb:c8:e1:
aa:a6:96:31:db:c5:42:ee:59:d6:68:2a:31:8e:37:
c4:0a:b3:c9:d2:e0:3f:20:30:0e:ad:0e:d3:04:b4:
7a:8e:1d:fa:bc:83:e4:48:93:6c:5a:ea:f3:3f:f1:
8f:b6:60:7e:5f:a4:dc:85:98:1c:fc:f2:e4:34:3e:
7e:c1:3f:7f:0b:b0:0c:89:4e:c0:1b:bb:db:1a:fb:
b2:79:3f:73:72:ab:28:09:a3:36:dc:bb:24:35:fc:
27:e3:14:32:4c:22:9b:2a:f6:e0:07:4c:5e:d3:46:
80:4f:22:e6:25:4b:a8:da:6c:bf:1b:ad:c0:51:12:
56:78:db:17:22:9b:41:4f:ed:a3:04:cb:49:2e:ff:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DC:55:BF:0B:75:7C:C4:F4:2D:EF:78:F4:96:AF:66:E0:45:F7:CE
X509v3 Authority Key Identifier:
keyid:EC:DF:36:96:CF:74:EA:95:5B:E3:83:87:4E:39:A7:27:AA:68:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N82ls906pVb44OHTjmnJ6poJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f4baea-f054-4e23-9aa8-0ff8cafe5dea/1/7N82ls906pVb44OHTjmnJ6poJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:28:b2:b6:94:e5:eb:95:30:98:62:5d:0c:16:30:6d:99:35:
e0:e3:9e:84:22:49:37:48:01:88:03:77:37:39:b0:a0:dc:43:
63:52:73:5f:19:0a:dd:f0:51:eb:c6:80:6e:83:bd:b8:b2:9e:
2a:f9:47:09:1a:86:74:5a:62:90:ea:35:8d:0d:a2:35:3f:f2:
7d:74:10:d6:d3:5b:9c:f9:51:da:65:da:45:ca:9a:8b:31:ec:
4f:f4:43:26:00:6a:9d:38:3f:c8:f6:80:91:97:18:42:1c:bd:
c8:76:2a:80:5a:33:77:cb:51:02:5e:ef:d1:94:39:18:96:c7:
32:7c:b2:ee:dc:2f:1c:1b:70:29:13:1a:5d:7e:4b:80:1b:40:
e1:4a:98:65:ce:68:45:83:db:48:8e:27:8a:9b:4f:63:c4:23:
5b:a8:f3:4f:f9:af:e0:f6:8d:d0:c3:66:f4:75:ba:15:e1:13:
aa:05:73:13:61:d1:80:f6:37:b2:35:70:22:66:2f:69:65:a2:
1a:bb:5f:0a:37:f4:51:ec:d0:6f:41:66:34:ce:5a:8d:92:03:
cc:32:85:53:58:2c:29:3c:4b:cc:9b:89:34:4d:da:e0:e0:4b:
e1:0c:28:2c:df:39:34:18:88:cc:48:cd:89:c7:00:67:5e:26:
34:4b:a3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:19:43 2025 by rpki-client