Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
File: 7nRQsjAXLj6K01KIEQ74q9JP-S0.mft (raw, json)
Hash identifier: RqlfH4eu0qxxkRfbEj9FoAhOglSAcNlzGofn1I8nsE8=
Subject key identifier: EE:8A:E8:51:1C:41:86:29:C4:D1:BA:53:01:C1:30:65:80:60:89:43
Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
Certificate issuer: /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Certificate serial: 0198D7059F62D8D045D360BB4F8FC535C9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
Manifest number: 0916
Signing time: Sat 23 Aug 2025 13:02:06 +0000
Manifest this update: Sat 23 Aug 2025 13:02:06 +0000
Manifest next update: Sun 24 Aug 2025 13:02:06 +0000
Files and hashes: 1: 7nRQsjAXLj6K01KIEQ74q9JP-S0.crl (hash: Ves+k4Cau6TrF5NQ0D3eXt7wywglMcT5d4cwFEv92xE=)
2: Ryemd1TDuIeUGlHSxQ4yYf0bI78.roa (hash: TuiESkEb7Uapb4uz5EJqoKRBNlBEi1zqIu4KTer9R60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:9f:62:d8:d0:45:d3:60:bb:4f:8f:c5:35:c9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Validity
Not Before: Aug 23 13:02:06 2025 GMT
Not After : Aug 24 13:02:06 2025 GMT
Subject: CN=ee8ae8511c418629c4d1ba5301c1306580608943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:34:dc:93:78:a7:f9:96:ec:6c:33:fa:3a:
39:8f:4a:43:bf:2c:9e:80:0a:d4:19:79:83:ea:ae:
53:10:69:8f:06:d9:a6:9d:f1:e2:86:fe:1b:ee:d3:
14:cc:26:77:d2:26:52:d5:28:38:8c:6e:e8:f7:da:
7d:73:db:74:7b:da:7a:20:79:f9:e9:ee:86:88:62:
0b:57:b5:ac:60:93:61:2d:a2:86:fb:70:dd:fe:cc:
d4:c1:77:13:da:a7:56:35:37:96:0a:c4:9b:c9:70:
ab:2f:f2:50:ec:0f:f1:dc:36:c4:79:5f:e7:fb:16:
40:eb:51:be:9a:cc:47:60:67:24:28:d0:1f:65:61:
1d:f5:72:f8:e0:98:f6:b9:a7:91:e6:85:20:f0:1b:
c6:34:32:ff:6e:b0:e2:4b:40:fe:f8:aa:db:a2:eb:
ce:9a:0f:68:40:9a:e8:ec:d6:39:32:a0:bd:97:6b:
bd:96:d9:5e:45:47:23:99:f7:bc:be:6b:6c:99:76:
e8:e0:10:1e:0b:12:7c:aa:5f:1a:d6:c2:9f:c1:90:
fc:ed:a7:d4:96:2c:59:be:fb:bd:df:67:52:e8:bd:
c8:71:aa:f1:6b:07:be:c2:38:99:88:dd:19:5d:96:
74:34:1b:ed:d5:ad:59:04:2f:3d:f9:38:ee:ac:7f:
40:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8A:E8:51:1C:41:86:29:C4:D1:BA:53:01:C1:30:65:80:60:89:43
X509v3 Authority Key Identifier:
keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:dc:cd:be:8f:a5:41:97:4f:40:d8:4c:0b:ab:99:61:fe:e3:
20:57:a1:f0:47:01:3b:24:6d:2d:96:c8:3e:2c:ea:fd:13:23:
54:b3:e0:b0:fc:6e:76:6a:b9:dc:f5:5b:cd:d4:99:0e:35:3b:
28:4b:6d:db:7d:9e:cb:ec:76:75:35:41:3a:b5:33:d5:4f:a5:
cd:ac:da:ff:85:99:f9:38:bc:2c:2f:c7:bd:09:ac:87:69:a4:
81:ef:83:0d:a5:14:b3:3f:cf:1b:d4:50:82:d3:b2:47:bb:ef:
80:3f:ef:c2:12:ad:83:47:8f:6d:e8:9f:91:bd:83:b2:c3:82:
73:36:6a:0d:d8:27:a4:c2:80:00:bd:d5:3d:82:0c:3b:9c:cc:
70:74:8d:bf:3b:e4:52:4c:8f:70:0e:0d:68:7f:a3:ba:70:45:
b8:24:72:5e:77:c3:9d:45:d3:74:0c:0b:51:db:1f:c9:04:d0:
aa:bf:27:3f:06:56:83:5b:10:3c:9a:e8:23:09:1a:9f:f7:bd:
7a:25:11:67:9a:40:51:7d:cd:0c:53:8f:7a:4c:3e:e7:0f:72:
31:69:91:78:7d:b1:e5:6a:32:54:54:cb:1b:57:b8:a2:33:3b:
80:76:c5:cc:0a:6d:2b:c5:41:7b:2e:cc:16:d6:6d:87:ec:65:
cd:df:a0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:19:57 2025 by rpki-client