Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
File: 7zGgVPyftLFH6KmL2n5xyBrwvP0.mft (raw, json)
Hash identifier: C/81XW02suxzq5HovuXEtKB8g2I5ioOOr02UjRP9Z68=
Subject key identifier: 22:8D:F9:42:8F:51:2C:DE:15:38:57:F1:5E:66:59:42:80:B6:9A:27
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial: 0198D65F47C80498F6DF1BB78FE675B2A4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:00:25 +0000
Manifest this update: Sat 23 Aug 2025 10:00:25 +0000
Manifest next update: Sun 24 Aug 2025 10:00:25 +0000
Files and hashes: 1: 7zGgVPyftLFH6KmL2n5xyBrwvP0.crl (hash: fJG7/KGguo8SG7+hgI7kOHVmCWkd7V+Vc7ffFtHQ8tw=)
2: GCDECUA53das4KdfVgJGCGchlPM.roa (hash: Shwn+wjWeeEfwxR+SQ/E/M2IAWkZBzaDnaEJzGSP9FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:47:c8:04:98:f6:df:1b:b7:8f:e6:75:b2:a4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Validity
Not Before: Aug 23 10:00:25 2025 GMT
Not After : Aug 24 10:00:25 2025 GMT
Subject: CN=228df9428f512cde153857f15e66594280b69a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:47:56:2c:db:74:07:e5:eb:7b:39:31:22:
2d:a8:3c:cd:ae:df:5c:cd:f0:e9:8e:a6:1d:ec:9a:
ec:70:9b:81:28:c2:e0:41:85:fd:0c:52:bc:86:d9:
80:f8:24:27:fe:67:76:68:cb:6e:0b:18:c3:50:8f:
84:a6:a0:3d:7c:5e:28:2d:eb:ca:da:eb:4a:bf:20:
fe:2a:84:c2:b1:d0:36:c9:83:22:d4:fb:a0:90:9a:
1c:64:80:09:44:22:1b:cb:f3:5b:19:c8:56:71:0a:
f3:a7:47:38:c1:fb:77:56:9b:7e:c6:1f:05:80:6a:
56:12:7b:3b:64:b8:e1:19:74:d6:1b:0b:77:b5:75:
7b:9f:e6:24:0b:4b:3d:63:ec:60:05:01:28:e5:73:
26:1f:86:c4:85:fc:4d:ac:f2:9e:b3:0f:08:0f:43:
8f:8d:d3:cb:d9:79:05:a6:03:36:83:3f:a2:4e:b2:
ef:a3:9a:5c:a5:65:8d:37:0d:6e:71:a7:aa:0a:f3:
e6:66:37:af:64:a8:ca:4e:b1:d7:09:6e:1f:0b:9b:
a1:be:16:cc:e4:b6:be:ea:84:a2:3f:9f:e1:58:6f:
6b:61:84:0e:50:fc:87:5e:a5:91:06:49:55:a9:9b:
fa:27:6f:3b:27:50:11:70:e6:a2:e4:27:33:7c:fc:
e0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8D:F9:42:8F:51:2C:DE:15:38:57:F1:5E:66:59:42:80:B6:9A:27
X509v3 Authority Key Identifier:
keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:1a:03:e5:f8:dc:05:91:85:87:1d:2d:19:da:4e:52:4c:f0:
37:c9:18:0c:f4:c1:58:25:65:61:db:47:ca:aa:d5:5e:83:a3:
13:04:3b:0b:dd:ad:f0:e0:d1:fe:00:37:28:26:88:6a:93:7b:
c7:73:48:15:f8:18:f1:d6:11:bc:41:c0:1d:76:9a:d6:39:54:
1b:87:19:c9:19:39:99:f9:11:b3:99:df:f8:db:9d:18:94:08:
02:a8:03:e1:dd:3b:54:ce:a6:27:11:03:04:93:0c:36:de:df:
3f:c5:cf:a1:62:eb:c6:74:a8:27:19:53:99:3a:ef:70:ee:47:
1d:00:40:a9:f2:8c:5c:d1:4d:50:ac:67:8b:a7:6e:bb:ba:10:
a6:30:50:69:97:f6:bc:5a:2e:c4:27:96:87:3e:d1:e2:cd:aa:
ad:93:8e:7a:f0:71:6d:c9:84:62:dd:47:b8:d1:44:1d:d3:db:
34:3e:9a:da:77:62:22:8f:3b:27:f0:6c:80:8c:c6:09:69:64:
a3:b7:16:40:b2:58:a6:dc:c7:7a:66:15:af:fe:5d:c6:16:14:
71:1b:b5:20:d2:bd:82:6d:f4:d7:3d:a1:14:97:4f:b0:c0:ac:
b2:16:74:fc:14:8b:ac:52:36:07:35:69:29:34:a4:d0:9e:b7:
11:99:2a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:32 2025 by rpki-client