Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
File: 7N10boF0dtVXj7y-1XTXwa0mQfE.mft (raw, json)
Hash identifier: CK7oTTGombazdVbNA++ROQ+DXqXV6f2gD6RxJA0W4zA=
Subject key identifier: 41:2C:4C:FD:F8:F3:3A:8F:12:4B:4D:38:CD:A2:E8:BB:FA:D0:B6:64
Authority key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Certificate issuer: /CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Certificate serial: 0198D65F9A46773627C51F2AE720EE677BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:00:46 +0000
Manifest this update: Sat 23 Aug 2025 10:00:46 +0000
Manifest next update: Sun 24 Aug 2025 10:00:46 +0000
Files and hashes: 1: 7N10boF0dtVXj7y-1XTXwa0mQfE.crl (hash: 8RZnqbec0/SSSRNWmqPtBThxtr7JEEH8YSMlfTZDqG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:9a:46:77:36:27:c5:1f:2a:e7:20:ee:67:7b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Validity
Not Before: Aug 23 10:00:46 2025 GMT
Not After : Aug 24 10:00:46 2025 GMT
Subject: CN=412c4cfdf8f33a8f124b4d38cda2e8bbfad0b664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:61:6b:f6:52:70:e7:30:ed:b2:38:4c:48:
90:ad:c7:6d:cf:b7:be:68:85:aa:5f:79:06:1f:8e:
7a:7e:58:ed:82:dd:3f:54:6b:f8:3d:65:e2:86:d3:
f5:1a:5b:36:c4:2a:98:bd:15:a2:fc:35:a3:b5:92:
b5:b5:2a:1f:75:7d:be:11:21:f4:5f:27:2e:10:12:
45:10:c7:fd:7e:c1:e9:ca:42:7b:68:7e:07:1e:25:
d1:34:4c:d1:8e:84:59:0a:bc:da:b9:03:98:a3:10:
85:32:bf:e8:84:02:57:74:3f:04:99:82:53:89:21:
54:b2:41:fb:35:16:48:1a:48:41:37:7d:b7:98:df:
62:bd:7c:51:59:57:74:85:b2:c1:e7:73:b3:f9:00:
b3:86:8b:60:3b:4e:bd:b3:14:45:b1:e2:4c:7d:57:
a9:e7:33:06:7b:90:d8:32:26:e0:7d:16:59:2d:8a:
85:4e:ef:b7:88:e8:ff:16:c6:8f:d6:00:85:e3:5c:
b6:29:c3:06:14:08:30:75:6e:8b:cc:6b:3f:43:6f:
46:d5:6a:e9:3f:f8:a2:6c:1a:d6:7d:7e:aa:28:64:
54:ea:fa:8e:48:97:0d:53:05:d7:82:cb:81:61:59:
37:22:5d:47:14:ff:0a:db:b5:d1:ef:e6:1a:96:87:
32:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2C:4C:FD:F8:F3:3A:8F:12:4B:4D:38:CD:A2:E8:BB:FA:D0:B6:64
X509v3 Authority Key Identifier:
keyid:EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b9:63:6e:8f:ae:12:36:fe:48:41:14:52:c3:bb:69:dd:fc:
d1:e4:f9:99:c7:fc:15:5a:be:68:dc:f6:bb:24:b3:e4:d7:36:
6b:24:3e:1e:3c:6f:33:c8:b5:62:44:e4:85:f5:8b:6f:9f:02:
d2:29:7d:24:5c:31:8f:1b:88:b1:14:c7:0e:f3:05:3e:15:46:
10:9d:0a:62:8f:65:34:3f:e9:7b:b6:e1:38:9f:28:43:e3:0f:
00:7b:a3:a9:a2:b5:c9:74:0f:69:99:55:6a:72:2e:1c:e8:3c:
10:d0:ce:b7:f0:47:72:4d:2f:21:30:24:af:c9:07:6d:7f:9d:
af:fc:94:37:da:cd:8b:44:6b:b5:2a:27:1f:82:35:e8:97:c6:
b8:06:05:c9:e9:11:5d:db:77:00:1e:0e:d2:f5:ba:a2:43:d8:
81:fd:77:69:5e:ea:53:06:95:4a:13:82:c2:e4:82:66:55:81:
1c:80:00:d6:d5:59:4e:78:85:09:5b:3e:b8:07:9f:38:16:65:
81:2a:cb:e6:33:64:bd:e1:ea:32:f6:67:60:91:92:48:52:2f:
ce:3e:6c:83:50:0f:ec:16:31:cf:a5:0f:9b:51:00:39:e7:0c:
b6:08:34:b6:ab:4c:2e:e0:5f:1c:ce:5d:47:2e:e6:47:a0:1c:
5a:ce:26:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:29:38 2025 by rpki-client