Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File: 7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier: DlMyGl0aF5+qvkkosAvHd4stm57se2iPlkC9YOeyRi0=
Subject key identifier: E2:36:D2:E2:B1:31:9B:0B:FF:F1:5F:6B:97:BF:34:78:EF:90:F9:88
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial: 0198D5F1CF7EE84DB90652B1CA7DE9048F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number: 0D0A
Signing time: Sat 23 Aug 2025 08:00:50 +0000
Manifest this update: Sat 23 Aug 2025 08:00:50 +0000
Manifest next update: Sun 24 Aug 2025 08:00:50 +0000
Files and hashes: 1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: imjiy0sBOyfOdbnDuqUAxEsS8P+LLGWeWHPZQBQazoM=)
2: ki56jkg-Ht0i-AxPw2XEPPfU3mc.roa (hash: 2NDyIuvL9kHGhxL4y5SFFt1xoYZ8BtFLva+lo3l3Ky4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:cf:7e:e8:4d:b9:06:52:b1:ca:7d:e9:04:8f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Validity
Not Before: Aug 23 08:00:50 2025 GMT
Not After : Aug 24 08:00:50 2025 GMT
Subject: CN=e236d2e2b1319b0bfff15f6b97bf3478ef90f988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0e:92:7f:54:8d:fe:95:d8:57:f8:09:14:c2:
14:3e:93:df:ce:14:08:5b:48:b2:62:dc:2c:f6:87:
4f:e0:81:47:47:fb:3a:e4:d7:48:67:99:1e:43:59:
3b:c0:34:fc:5d:b3:aa:4f:5e:2e:64:9b:1e:b6:1b:
a5:4b:09:05:63:ca:59:76:03:0b:8b:f2:40:b9:f7:
bf:61:3b:fe:a4:b2:73:80:68:5b:ed:2c:f1:a6:a8:
a7:1a:5b:b3:da:07:87:1a:de:be:6a:ec:4d:1d:71:
ba:7b:dc:bb:b5:57:3b:e7:76:95:bc:3e:b9:a1:e6:
31:0d:47:a5:76:73:53:f7:6a:d4:5a:ad:99:0a:87:
3d:6d:6c:16:20:91:39:b1:b3:e8:66:1f:d3:04:6b:
ba:cd:b9:3f:c6:3f:b5:8a:7f:e5:f5:c2:b1:9e:6e:
81:c5:83:1f:e3:d5:ba:7b:07:61:fa:85:8b:2d:7e:
7e:5b:14:4b:28:85:f5:77:34:5d:17:ba:ac:86:be:
4c:88:ab:61:fe:66:fc:39:5d:55:b8:05:3c:60:be:
3e:79:7e:8a:5c:58:4e:59:de:9f:86:e9:87:5d:34:
4b:af:44:6e:3a:30:8e:26:ba:03:fa:9e:08:de:26:
f3:32:ca:ec:5f:35:cc:d9:2b:13:c7:de:ac:90:5a:
36:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:36:D2:E2:B1:31:9B:0B:FF:F1:5F:6B:97:BF:34:78:EF:90:F9:88
X509v3 Authority Key Identifier:
keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:46:96:bf:37:9f:fe:63:53:74:b2:4b:2a:d0:cc:27:31:46:
31:51:25:2a:39:63:7c:23:d4:fa:55:4a:62:5e:04:95:42:ee:
25:6e:76:9e:36:ae:2f:f1:77:d5:16:9a:f3:69:82:19:9e:99:
64:9a:76:81:f6:82:70:7a:8d:71:e6:72:b5:2f:f1:8e:33:1b:
99:53:c0:13:f3:32:1a:af:b8:2b:2e:c6:bf:21:b9:03:fe:5c:
30:d6:b1:24:36:a3:c2:a5:bf:57:18:db:b5:8e:d6:3b:98:84:
67:96:01:52:fc:01:0c:42:5f:4a:2b:49:0a:12:cf:a7:59:d5:
88:da:d9:d4:6b:1d:3b:8d:74:de:0b:2a:4a:3f:0d:d2:1c:bc:
28:87:24:6e:3e:85:d6:93:f8:1e:a0:eb:11:73:31:0a:a7:0d:
c6:e2:eb:05:54:4a:99:73:34:75:53:59:3d:fe:9c:67:0d:72:
dd:d6:1e:0e:81:75:fc:0e:71:c2:8e:b4:0a:29:71:ea:58:1d:
d3:33:08:f2:34:cc:1f:47:99:7b:f5:cf:66:8e:d8:91:89:89:
12:7b:a3:9c:86:b8:d9:84:de:26:eb:f2:ec:0c:20:ca:af:18:
f2:40:59:a9:33:24:1a:43:92:d7:97:8b:a2:51:d6:c4:43:57:
d8:a4:cf:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:37 2025 by rpki-client