Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
File: 7Y3fghIIo3DjpbfvjNR5fPxXdII.mft (raw, json)
Hash identifier: ekNNDZpY46QRHyuQc1yWaLQInhUuetMspoW3LCHK+u4=
Subject key identifier: 91:E1:42:1E:BD:50:E0:84:8B:21:E6:B9:36:B5:F3:3D:5F:B2:F7:77
Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
Certificate issuer: /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Certificate serial: 0198D65F432D266193AD68097199D964E1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
Manifest number: 0CCA
Signing time: Sat 23 Aug 2025 10:00:23 +0000
Manifest this update: Sat 23 Aug 2025 10:00:23 +0000
Manifest next update: Sun 24 Aug 2025 10:00:23 +0000
Files and hashes: 1: 7Y3fghIIo3DjpbfvjNR5fPxXdII.crl (hash: E3Wv4mjVdeldF4KMhaqSOkT01jThKRWKpQs3i1MBmLc=)
2: DurnQ3dAzPxoCUXWiroCcReHID8.roa (hash: k2ck5I6D1NKufGijk0qz5B1og8UdirayVzhgWYYPrYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:43:2d:26:61:93:ad:68:09:71:99:d9:64:e1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Validity
Not Before: Aug 23 10:00:23 2025 GMT
Not After : Aug 24 10:00:23 2025 GMT
Subject: CN=91e1421ebd50e0848b21e6b936b5f33d5fb2f777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:57:10:f6:a0:da:d3:c2:b9:7f:c6:4f:47:3b:
04:5e:49:e6:0e:94:0c:40:fd:7d:16:42:c2:7f:07:
cc:b8:a6:38:0b:4d:bb:ef:92:a5:de:2d:7b:b6:8c:
64:1b:32:88:cc:d9:8b:46:0f:e9:ec:65:51:59:c0:
25:0c:2e:e4:c3:8d:57:67:ee:c9:4d:6c:fc:54:e2:
39:18:45:b3:8b:f0:4e:d6:d4:ef:53:aa:0c:ea:1f:
53:4e:18:ce:cc:45:c2:69:53:42:aa:f6:9e:8d:ab:
a5:d4:4a:a0:09:af:2a:7c:0b:f7:c6:b8:82:31:18:
3d:94:3d:92:1e:1e:0c:a3:f7:19:96:14:63:a9:ac:
81:fd:73:32:ad:cc:c8:39:dd:7d:94:48:7e:67:df:
c7:b0:fe:d3:38:d1:bd:d8:80:12:5b:9c:18:97:cd:
5c:82:13:bc:c2:48:db:30:aa:dc:5b:bb:10:6b:52:
ec:a6:1c:b9:c0:3d:67:2e:2b:47:2a:3e:c1:65:40:
21:37:04:56:af:f8:28:f2:e3:ca:0d:76:45:77:a1:
a3:a9:5e:43:1c:a1:1c:8e:9c:1a:a9:94:4b:2d:60:
e8:6e:7a:ca:17:9e:71:c0:8d:4a:22:cd:72:6b:3d:
ef:3d:ce:ee:8c:ce:f4:36:d8:9d:6c:06:7e:32:ec:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E1:42:1E:BD:50:E0:84:8B:21:E6:B9:36:B5:F3:3D:5F:B2:F7:77
X509v3 Authority Key Identifier:
keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8f:92:4d:1f:ba:57:03:f2:24:f0:0d:c1:49:4a:75:94:be:
e2:79:06:7b:93:50:2e:66:90:cd:ee:72:e9:df:4c:87:23:18:
74:4a:49:a5:a9:3c:ec:06:7c:59:e3:e7:e0:45:14:b0:52:2b:
e3:83:1d:c7:61:1b:86:46:e1:9c:00:33:54:ed:b5:cf:de:4e:
55:5b:03:63:8b:8f:66:7d:e2:88:ae:46:0a:40:06:b9:3e:60:
68:64:32:b9:57:92:77:90:61:de:33:25:88:41:1b:ef:31:a1:
98:44:7f:2e:c3:64:d9:1c:06:ea:ff:30:f0:90:db:e0:18:24:
b9:87:06:96:c5:36:44:a4:67:37:e8:38:d0:87:65:a8:95:10:
7a:67:9c:be:29:11:6e:cc:8f:dc:0d:ae:92:d7:f9:95:4b:25:
5b:db:88:c7:8e:26:23:ba:10:b0:17:bb:75:d3:15:22:a1:1d:
2a:d5:4d:9a:86:a0:c0:4c:e2:f7:dd:42:89:6a:19:c1:33:a2:
e0:d2:e9:8d:69:b4:33:90:a5:f0:58:0f:fe:13:1f:73:86:03:
0d:ed:05:89:39:6d:a9:13:23:e8:71:8a:f9:8a:ca:cf:cd:6c:
5d:7a:03:9e:b4:5c:dd:66:df:7e:37:2b:bb:99:40:f8:da:3b:
1c:04:e6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:44 2025 by rpki-client