Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
File: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft (raw, json)
Hash identifier: kf8nPbaLO8pyfZxTH64rRzADuW4HFTWNUAVwYhDXA9U=
Subject key identifier: 9C:C7:5F:1B:3B:53:28:87:3F:E0:23:FE:B7:95:2A:E2:3B:CF:F5:B3
Authority key identifier: EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
Certificate issuer: /CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Certificate serial: 0198D697F272F6C93545A0F50E68C27E973D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
Manifest number: 09D3
Signing time: Sat 23 Aug 2025 11:02:18 +0000
Manifest this update: Sat 23 Aug 2025 11:02:18 +0000
Manifest next update: Sun 24 Aug 2025 11:02:18 +0000
Files and hashes: 1: 7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl (hash: zqhWnsAwl0Z9gFDdB44GbjchaG35RVoIrxJmcVSNjUs=)
2: e64v2Sa7kZCTmVuIe0U1EA1y5UE.roa (hash: 4+uTyAtFS8DAUClwiFHwirOIVJLgQjU/10EzULT806g=)
3: hiAVbhcO1TwVpozBkcEWuw9CQcA.roa (hash: cM6xE/ZqL2V37JUXZnVYtBWEG50dOsPtinGWqXaIJmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f2:72:f6:c9:35:45:a0:f5:0e:68:c2:7e:97:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5fdf6a51b98091e9ec7bdfaf483ec7743a5a25
Validity
Not Before: Aug 23 11:02:18 2025 GMT
Not After : Aug 24 11:02:18 2025 GMT
Subject: CN=9cc75f1b3b5328873fe023feb7952ae23bcff5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:97:55:91:5b:a6:eb:42:e7:cb:b0:03:74:4b:
5c:75:bd:8a:e2:1d:29:15:3d:22:dd:0d:cf:6a:6e:
9f:09:b1:78:f3:97:2c:41:ed:60:50:31:8f:09:05:
61:4d:c7:5b:11:81:24:b0:95:ab:a9:07:39:06:ba:
44:90:ec:20:77:17:41:d5:b4:3f:2d:9a:e4:1c:f0:
28:76:99:0c:33:2f:a2:a8:82:dd:a4:50:80:88:28:
66:0a:95:16:5e:05:4b:77:6e:f8:3c:90:1a:c6:7d:
3a:b8:e1:d3:f1:38:a0:9a:ea:41:34:d6:d1:e5:b9:
6d:4a:eb:48:a7:ab:a1:b2:45:c7:5f:60:59:c6:9c:
7c:bf:a4:b8:3f:7c:e8:cd:1c:63:e3:a6:fe:68:14:
f0:61:fe:fc:a2:dd:c9:25:87:43:bd:70:d9:2b:c9:
08:17:59:e5:86:29:ac:7d:29:fe:23:3b:da:bd:de:
dd:a9:69:d9:d7:2f:8a:12:0d:8f:0c:6c:75:31:ca:
45:c1:9e:28:c0:a9:eb:90:45:e0:69:c6:1b:b7:02:
b4:43:6f:82:a4:6c:74:a9:54:b9:bd:a3:40:00:2d:
9f:85:07:f6:21:48:a5:c4:60:7d:d4:70:0c:7b:37:
52:f8:bf:ad:d1:30:d0:aa:62:f3:4d:a5:97:2e:98:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C7:5F:1B:3B:53:28:87:3F:E0:23:FE:B7:95:2A:E2:3B:CF:F5:B3
X509v3 Authority Key Identifier:
keyid:EC:5F:DF:6A:51:B9:80:91:E9:EC:7B:DF:AF:48:3E:C7:74:3A:5A:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7F_falG5gJHp7Hvfr0g-x3Q6WiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e6a554-d974-4377-becc-cbf343deb7bc/1/7F_falG5gJHp7Hvfr0g-x3Q6WiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:70:2c:12:9b:75:42:db:c4:b6:16:48:5e:2b:ba:02:3a:9c:
fa:5a:02:3b:76:3e:bd:59:67:0a:ce:be:67:ad:a4:24:e3:02:
13:a3:1f:97:7f:44:05:40:12:f0:ba:80:93:cd:ee:51:5e:98:
a2:15:4c:22:fa:b5:88:f4:69:03:8f:5f:e0:4e:d1:07:d4:b3:
56:d6:d3:c5:bc:f2:fa:0b:cb:21:92:e1:35:51:20:e2:4f:31:
d0:b7:85:2a:ab:8d:c1:f2:e5:2c:70:66:08:5a:aa:bf:0f:8e:
09:dd:ec:17:f2:e5:0a:b9:77:0e:a1:2e:93:9f:72:c9:9b:f3:
4f:1c:43:19:10:7e:c7:fa:80:70:f4:a6:37:21:b5:18:18:f6:
1a:51:60:bf:ff:6c:ee:c1:d6:14:d3:dc:4b:c3:e5:a4:c2:d6:
df:39:60:95:f5:4c:a5:bf:83:f2:19:61:4c:a0:86:9c:b9:1c:
1a:0a:d4:8a:4f:53:3e:0c:ef:3c:5f:00:53:96:c7:dd:ca:78:
7b:b0:9a:a5:3f:5b:b2:f8:30:d8:8a:69:9d:db:3d:78:69:b2:
50:20:7d:d0:0e:8c:47:ec:b5:9d:b1:25:c7:fe:5d:46:37:b6:
80:57:09:c9:a7:53:c4:84:dc:ab:50:b0:e3:d9:27:58:8d:a3:
d0:ef:dc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:37:38 2025 by rpki-client