Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
File: f3c03-oSBldBLqhn3bx7hNEyv3g.mft (raw, json)
Hash identifier: XU+SeihWj4+NTj2GD7TSK/wxGN0+gJ0WwI1oBgURsR8=
Subject key identifier: DC:72:2E:FA:CC:9A:54:D9:CE:7F:8B:0A:6A:89:EC:F9:E4:F5:5B:26
Authority key identifier: 7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
Certificate issuer: /CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Certificate serial: 0198D66153FD28C7ECC8961F56BA9A755F91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
Manifest number: 0EF7
Signing time: Sat 23 Aug 2025 10:02:39 +0000
Manifest this update: Sat 23 Aug 2025 10:02:39 +0000
Manifest next update: Sun 24 Aug 2025 10:02:39 +0000
Files and hashes: 1: 8Nz7pWuGzKddMGUQDfHKd23vSsc.roa (hash: 0Zij1MsWucwtgl3mjLbhutBq2eFIXVXGt5jqt0MvUbY=)
2: f3c03-oSBldBLqhn3bx7hNEyv3g.crl (hash: 0ZHJbNJ91ml96VWyoTrYwWGMiKa4tfLy2HawkOZcXU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:53:fd:28:c7:ec:c8:96:1f:56:ba:9a:75:5f:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7734dfea120657412ea867ddbc7b84d132bf78
Validity
Not Before: Aug 23 10:02:39 2025 GMT
Not After : Aug 24 10:02:39 2025 GMT
Subject: CN=dc722efacc9a54d9ce7f8b0a6a89ecf9e4f55b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:4b:f0:0d:84:e9:78:31:f2:a6:9d:0f:e2:
3b:42:46:5b:a9:b5:aa:6d:21:9e:42:56:fe:07:00:
09:43:16:f3:ac:a9:20:cc:3c:b4:02:60:7f:95:4e:
a0:24:86:7b:a8:2d:ad:1f:2e:f7:d1:5f:37:84:e2:
65:0f:f9:bf:ed:78:77:59:ff:ee:82:40:e1:8f:ba:
16:e5:80:d2:b4:24:53:68:8b:9b:f8:ce:58:27:07:
5f:82:36:17:35:a6:d3:a8:ac:2e:7e:44:e5:4d:08:
d4:ec:8d:6c:74:d8:0a:2d:f6:67:e2:d7:3a:ab:6e:
a1:71:8f:d2:bb:32:68:d0:dc:d5:c1:6a:b8:80:61:
58:18:10:7a:98:b7:a6:2d:bb:db:f8:ec:43:fd:4d:
4c:50:05:53:62:ab:56:df:9d:d1:a2:67:cb:2a:0f:
a9:ea:3d:b5:15:89:7a:11:3d:48:7b:0d:71:20:28:
7c:b3:38:f6:5f:76:86:5c:f5:77:86:3e:26:33:8f:
77:68:2b:c2:59:05:4a:c7:47:01:c2:7e:8e:3b:66:
a4:70:bb:38:44:61:6d:03:30:d7:2b:b5:1c:ed:7b:
37:10:81:9d:ec:46:5b:04:94:11:2f:c3:a6:5d:dd:
1d:4f:b0:e7:77:a9:79:a3:9f:12:bc:ab:94:66:e1:
f6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:72:2E:FA:CC:9A:54:D9:CE:7F:8B:0A:6A:89:EC:F9:E4:F5:5B:26
X509v3 Authority Key Identifier:
keyid:7F:77:34:DF:EA:12:06:57:41:2E:A8:67:DD:BC:7B:84:D1:32:BF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3c03-oSBldBLqhn3bx7hNEyv3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/680324-ee1f-40f2-88df-196931962d3c/1/f3c03-oSBldBLqhn3bx7hNEyv3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6a:6b:c6:4f:8a:01:66:71:1e:0e:f1:cb:2b:dc:5b:0c:b6:
45:39:61:cd:ec:e3:3c:73:f0:9c:b3:7e:13:94:6a:aa:40:6d:
32:06:85:13:75:2f:d0:ed:ed:14:e7:9a:8d:f8:7e:b9:ac:7a:
a0:b7:9d:0c:08:26:9d:a6:89:4a:2a:9b:38:4b:1d:ab:3a:eb:
69:f1:fa:87:dc:73:1c:c2:b6:ce:4c:f2:a2:2f:e2:ed:fa:6a:
c8:44:11:51:42:cf:49:3f:0c:65:42:4d:e1:fc:fd:09:81:1c:
71:84:48:70:5b:67:4f:2b:a5:00:7d:54:4a:55:6d:7a:99:02:
63:06:6e:f5:13:81:99:3a:cd:ea:86:e0:66:0a:1b:4c:44:bb:
34:44:22:af:be:c1:48:a1:b9:a6:74:b0:b0:86:ad:a4:39:80:
4a:4b:8b:82:00:9e:4b:bd:16:e7:29:b4:ab:7c:1d:ec:cb:61:
8e:58:3d:4b:1b:8d:20:8b:30:b4:0f:7c:a2:bb:69:e2:99:26:
85:f8:f8:bb:80:24:73:42:2e:6f:a4:02:7d:7b:7f:a3:37:0c:
72:10:18:22:39:da:62:21:23:ba:8b:e6:9b:3d:f6:d9:f5:ad:
53:e2:1e:8e:89:29:b9:43:e5:a5:c2:62:c7:1b:1a:72:65:f7:
88:98:44:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:20:24 2025 by rpki-client