Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier: KR5iDS2B1SAvJLvDPR6UEBwl4s1oSJ5kz0iKYWGSYoI=
Subject key identifier: 87:A3:35:B4:03:A0:E1:27:FA:01:86:7F:76:1A:70:B4:61:16:DF:1A
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial: 0198D6CE0CAA3828506205C806B987A4307B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number: 0DB8
Signing time: Sat 23 Aug 2025 12:01:24 +0000
Manifest this update: Sat 23 Aug 2025 12:01:24 +0000
Manifest next update: Sun 24 Aug 2025 12:01:24 +0000
Files and hashes: 1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: +DNfTda9RDxNCQip7Kc7CueaSvqGr9cyRvenLWbNvZ4=)
2: VXStklzuRlpg_R8nfz573Xq7Noo.roa (hash: IbT51sa2OOKxE/XOPtTGvEY7Cw0dCovzg7t9jfSRhHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:ce:0c:aa:38:28:50:62:05:c8:06:b9:87:a4:30:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Validity
Not Before: Aug 23 12:01:24 2025 GMT
Not After : Aug 24 12:01:24 2025 GMT
Subject: CN=87a335b403a0e127fa01867f761a70b46116df1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4f:a9:a8:fc:19:6a:64:e4:83:1b:85:20:64:
71:5a:5f:0b:21:d6:07:9f:e7:a7:5c:9d:d9:dc:5d:
22:85:62:f3:cd:9d:9d:16:fa:9b:27:26:e6:57:73:
fe:02:b7:f8:f6:44:18:34:c7:50:99:5f:6b:1e:f3:
1f:d0:e1:68:66:3d:60:bb:ec:55:98:f3:78:e9:66:
16:65:11:fc:27:5a:e4:6a:2e:4d:f9:3d:9d:69:32:
12:37:d7:e2:09:e8:2c:18:02:40:2f:cb:e8:e5:a6:
19:43:e1:ad:ef:ac:bd:9b:ab:94:b0:e9:5c:a0:0f:
bb:22:90:c9:e2:36:25:dc:45:c4:7c:b9:91:7f:6c:
00:2e:f4:30:4a:0f:5b:81:94:d4:e0:71:89:dc:15:
3e:61:25:82:60:3e:4c:d0:f9:10:37:11:34:b7:c7:
37:cb:61:7c:2d:ee:86:9a:d1:a0:08:84:81:03:0f:
a0:d0:40:b6:5a:0a:54:13:1b:1d:af:c2:35:29:78:
35:fe:8a:8b:50:a5:00:28:ae:c8:5c:64:6f:47:b6:
74:f6:6f:99:7c:0b:09:7d:90:2c:24:a8:af:1a:61:
10:2c:41:42:10:2d:64:70:54:74:75:96:b9:06:33:
1f:83:11:10:b0:6e:3c:d5:60:f4:7c:bc:36:e8:3f:
de:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A3:35:B4:03:A0:E1:27:FA:01:86:7F:76:1A:70:B4:61:16:DF:1A
X509v3 Authority Key Identifier:
keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:60:c9:70:72:48:48:ef:80:40:38:cb:7d:42:6d:b0:75:db:
94:7b:73:b8:a7:35:a7:57:ce:72:c7:c6:a9:46:de:fa:ed:47:
d2:5c:60:3f:b2:53:77:de:21:4a:eb:b9:7a:d9:bf:f8:60:ae:
f3:4f:8b:dc:98:ac:ae:cd:af:b7:72:1f:c9:55:bb:9a:f9:37:
f3:e2:ac:ae:d0:90:d7:68:d7:81:55:f9:f8:b8:03:c6:1f:d5:
62:e8:ca:83:0f:28:36:07:16:ba:a0:98:92:57:e4:10:95:ff:
4c:9b:8f:67:69:2d:16:17:2b:2c:12:1f:52:f6:ba:35:ac:58:
4b:51:d6:d2:cb:ce:31:f6:5e:c4:7c:6b:02:11:f6:e2:1f:2e:
84:aa:8e:3c:24:65:bc:a2:25:72:b9:2a:28:ef:76:c7:71:47:
2d:c2:66:86:d7:90:c9:fc:c0:66:35:00:46:4a:d5:f4:51:8e:
ce:e5:fa:27:66:1d:7b:f2:2a:67:b4:fc:76:e7:3a:2d:5f:ae:
97:58:cd:b9:18:ff:63:c2:0b:70:da:14:ef:2e:ad:db:fa:50:
19:48:cc:0d:ae:88:e3:6a:d8:2f:09:c4:7d:df:f9:bd:21:c8:
8c:fc:d5:38:76:71:a3:6e:62:20:27:81:93:22:11:3b:2f:5f:
78:69:4b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:01:25 2025 by rpki-client