Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier: FtiiYb1EAaeWWJLPqHOZUugn61veQn5kQzQzzKWqcbo=
Subject key identifier: B3:FA:DD:C8:3D:4E:AE:77:5F:69:0B:2C:6A:1B:C3:E8:04:02:38:C3
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 0198D5BBC6EA095E9D4B79B237EC88485BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number: 0DB9
Signing time: Sat 23 Aug 2025 07:01:49 +0000
Manifest this update: Sat 23 Aug 2025 07:01:49 +0000
Manifest next update: Sun 24 Aug 2025 07:01:49 +0000
Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: aXKVGd2jbcwD1/vN/UDJ2R+TBbU+BK/1WFAeSW/mAWY=)
2: _JGWiygFUesXv5bnUwI668QYMo0.roa (hash: tSMCpwe6YrahqMRkzD/bacyXkbLZAIyumbRrGFQA0qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c6:ea:09:5e:9d:4b:79:b2:37:ec:88:48:5b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Aug 23 07:01:49 2025 GMT
Not After : Aug 24 07:01:49 2025 GMT
Subject: CN=b3faddc83d4eae775f690b2c6a1bc3e8040238c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:76:c1:bd:7d:06:94:76:43:1d:11:26:63:
07:e6:95:8d:b2:67:93:12:02:6b:dd:9b:67:8d:4b:
88:d2:c2:e3:0d:4a:18:24:6d:ef:6a:58:c1:f7:72:
3e:70:5e:ba:cd:f6:97:2a:b0:12:3e:35:a4:9f:93:
78:d3:13:9a:e4:b7:c1:64:6d:36:35:ca:0d:2c:28:
32:fb:10:cd:1d:64:90:60:b0:36:78:8a:0b:0e:4f:
c9:9e:fe:84:21:1d:c5:0c:90:d6:53:d0:c8:80:ce:
ea:a0:b3:97:a9:27:1b:a0:9e:b6:ef:63:66:30:4e:
8b:44:87:55:ad:5c:5c:64:bf:f0:a0:37:91:8a:ec:
4c:fa:54:d1:cc:0f:ae:ad:e1:20:71:e8:10:e4:48:
0b:c5:d6:04:ba:44:c1:b5:d6:e5:b6:93:2b:ae:2c:
63:68:b6:68:eb:5e:25:5b:1d:3f:c7:fb:3e:61:b0:
22:91:a5:58:a1:64:1e:97:e3:f2:78:97:b4:ea:87:
aa:17:c4:f1:11:23:0f:f9:38:d7:fd:be:60:e4:28:
2c:57:d0:73:c5:af:d8:45:91:04:2c:e3:bb:79:df:
e1:95:e8:b9:20:41:6a:c7:1f:b9:0c:6e:2f:6b:b8:
bf:db:eb:04:4c:1a:95:61:20:82:e9:98:d9:08:d5:
d5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FA:DD:C8:3D:4E:AE:77:5F:69:0B:2C:6A:1B:C3:E8:04:02:38:C3
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6d:8b:9c:da:b1:8d:6a:d6:70:f2:4c:0c:b0:e3:86:c1:43:
66:44:34:d4:f0:86:d0:42:d2:b2:c1:b1:a4:1c:ba:00:02:c5:
c6:74:3e:57:10:96:d7:05:b1:e1:06:b4:3d:34:5d:02:f4:f0:
94:ff:a2:16:cf:e1:d3:18:98:cb:ea:de:f9:3c:69:39:ad:cf:
20:f7:a2:4b:31:65:32:ef:16:f8:ca:07:6e:56:70:4b:9e:09:
5e:43:7d:1e:a6:9f:5d:e7:77:f1:26:4f:45:34:00:66:39:11:
a1:46:66:7e:57:b7:ed:9f:d2:0e:fa:19:c2:fc:1a:01:71:2c:
56:8d:cb:12:b9:e9:19:5c:9a:b7:43:fd:55:92:0f:9c:ec:53:
0a:8e:0b:d9:23:5d:1d:bb:e9:3d:3d:e8:6a:7e:22:8c:67:03:
e2:32:ef:fd:22:9a:1e:a8:fa:d5:a1:08:f0:75:66:65:f5:7c:
1a:01:a0:d8:39:11:96:56:0c:d9:24:0e:4e:3f:db:ce:ef:fc:
18:80:66:a6:0b:40:83:0a:75:ac:8c:e3:48:23:b8:77:8c:65:
e9:92:02:69:26:75:df:fe:56:f9:5d:8b:2c:3c:72:5b:da:25:
38:a2:05:0b:b1:60:47:79:04:b3:33:56:af:64:96:83:62:d2:
db:15:12:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:18:18 2025 by rpki-client