Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: DyZluk3gpUcw80/dgJnkbva1f5HuTx59LBqBIgO54G0=
Subject key identifier: 04:C9:31:5B:FC:68:64:6A:41:AE:78:76:D1:CB:34:37:39:EF:0A:99
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 0198D73BC7DB18DD44CF5EC28A4C15D69694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 10D6
Signing time: Sat 23 Aug 2025 14:01:15 +0000
Manifest this update: Sat 23 Aug 2025 14:01:15 +0000
Manifest next update: Sun 24 Aug 2025 14:01:15 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: Kh7VXjx+ng7LoEQBOFonYCLCCfwD8tolUVqUNxHjTgY=)
2: 8IeUbOwS853SmApxlhlEYT9gqJU.roa (hash: rGq2PKCmYf+7DCOarfnzmeAZXnBOsSkimboD75gDmOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:c7:db:18:dd:44:cf:5e:c2:8a:4c:15:d6:96:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Aug 23 14:01:15 2025 GMT
Not After : Aug 24 14:01:15 2025 GMT
Subject: CN=04c9315bfc68646a41ae7876d1cb343739ef0a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ac:2f:44:da:ce:7b:54:d0:9c:44:3b:21:20:
cb:aa:ff:50:c4:0c:2f:05:ba:4e:80:28:e5:f0:46:
79:b9:9f:04:f4:cd:ed:d6:30:5d:c9:58:fd:b9:cb:
18:e0:d3:4f:d5:6a:60:7f:7b:5d:8e:f7:ab:87:fd:
48:de:2c:1f:de:97:cc:c1:7e:07:a5:d8:b7:c8:24:
25:93:18:b0:61:6e:a4:12:c8:bf:2a:d1:97:b6:78:
b5:e0:23:9c:c0:ff:1b:fa:74:d8:3a:b4:22:1f:82:
20:5c:ef:b9:80:64:67:c8:30:96:28:82:fa:ca:77:
63:3d:65:3a:43:d0:2a:e0:0b:55:ab:04:03:af:16:
94:60:fd:60:c9:ba:7e:1a:9a:6e:80:e8:38:0d:e3:
60:dc:51:2e:30:ca:2b:1f:83:87:f3:5e:5f:d5:14:
5b:90:be:77:3f:d7:4f:07:54:1a:03:75:5a:20:71:
d6:3f:d6:c7:65:83:cb:63:2f:29:b0:6c:98:f6:b6:
85:9b:5c:e7:bc:03:05:f3:dc:7e:a2:b4:26:25:14:
8b:14:f8:82:c7:1a:e2:65:39:13:30:69:e5:c9:70:
d0:7c:62:b1:f8:3a:95:fd:6a:33:52:47:6f:c5:47:
43:04:0c:70:d5:3a:e4:cb:6b:df:26:e9:8d:bd:32:
8c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C9:31:5B:FC:68:64:6A:41:AE:78:76:D1:CB:34:37:39:EF:0A:99
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:23:79:51:e4:59:e2:cd:c3:de:26:e4:98:c1:ed:7b:f3:76:
6d:ce:5c:e6:47:58:33:9a:55:f2:7e:85:7b:44:8b:59:dc:53:
11:39:a6:65:fa:fc:eb:51:5f:d2:9b:17:21:54:ee:b8:38:da:
03:cb:d0:76:3f:3c:b4:77:ef:ae:fa:99:7d:fe:08:cc:51:a4:
08:46:a1:27:f2:1b:1e:b4:d3:d6:2e:e9:77:22:ce:67:78:1a:
41:80:e4:7c:94:b1:43:54:87:39:90:5b:06:5c:dd:77:f7:89:
30:1d:9a:17:a8:17:0c:3c:91:18:bf:37:2a:53:64:68:2a:7f:
36:d4:b5:3f:70:25:7f:ab:60:13:85:89:54:57:6a:66:2d:72:
f3:0f:0d:dc:28:6e:2c:bc:63:fd:6a:a5:45:24:24:ce:ea:40:
fa:2c:f4:1e:bd:66:9c:00:b8:22:d6:a0:4a:fc:fc:a8:c1:86:
7f:31:f6:bf:23:26:91:32:3a:44:f5:ce:eb:b9:85:69:c1:fa:
09:0f:b9:3c:c3:23:05:2c:a9:93:67:3c:ec:c7:bc:f2:b7:7a:
21:f4:1c:3e:d9:b1:a3:4f:aa:b2:78:a3:a8:99:bd:0e:4f:7a:
ec:67:e2:24:24:cd:d4:3a:c6:68:e9:7d:fb:b3:24:4f:30:57:
bb:59:64:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:13 2025 by rpki-client