Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
File: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft (raw, json)
Hash identifier: EwM8Wxu4Vkv7kx9T+gsWBTA6EHDwLZmrJ9/8r5h3dNk=
Subject key identifier: 23:54:98:F5:61:D2:B5:B4:02:91:5B:EA:7F:BC:3A:30:72:99:FF:3C
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Certificate issuer: /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial: 0198D6981746C701DB5BF3867B5E280E24F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 11:02:28 +0000
Manifest this update: Sat 23 Aug 2025 11:02:28 +0000
Manifest next update: Sun 24 Aug 2025 11:02:28 +0000
Files and hashes: 1: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl (hash: mMbL7zqG9mcYYzOguD6kFTXsE0PwtlP8L5782q193Jc=)
2: EiUuk_NOU4Yk3nk2nn56zZabZvk.roa (hash: 6qv2yhWzsdq9RqBF8lz3ldQ0Ka6+KKmmMeovRbBrbQI=)
3: MBu8VTmpr04x0tshZWj7vlWVLfA.roa (hash: ulHARLad6WzWUuYeIJe/P7G2yuuz8lPKXAfu9iAhsvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:17:46:c7:01:db:5b:f3:86:7b:5e:28:0e:24:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Validity
Not Before: Aug 23 11:02:28 2025 GMT
Not After : Aug 24 11:02:28 2025 GMT
Subject: CN=235498f561d2b5b402915bea7fbc3a307299ff3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:e5:3c:5a:3c:3d:51:de:0d:bf:a8:a5:69:
26:42:b2:f8:ac:cc:1a:a5:4a:fb:ad:9d:20:8e:3b:
c1:75:d3:99:48:84:5e:4a:91:a7:58:d7:4e:a0:ce:
0d:3f:9a:33:9d:0f:07:64:1f:71:52:17:ff:38:e9:
e5:5d:3c:3f:7f:d7:02:97:f4:c1:42:d0:36:60:09:
8a:fa:da:6c:37:f7:f9:53:d2:66:ea:9f:b9:a5:ff:
73:f4:35:31:c7:ce:1b:d9:84:9a:f4:58:8c:0e:d0:
32:3a:aa:e8:4b:78:70:70:89:07:ac:e6:b0:d8:35:
21:9a:52:b6:d7:58:c0:f0:e5:44:c6:34:81:73:85:
d7:f5:37:0f:84:4f:fd:24:f8:07:c9:2a:64:a7:81:
71:9b:3b:25:95:8d:4e:20:47:32:c3:2a:90:95:04:
8a:10:b7:f1:a3:31:c9:4a:05:42:58:67:f4:8c:e5:
b1:6e:01:20:65:be:b2:6e:17:d2:bc:31:2d:23:f0:
e4:ba:6a:14:17:e3:ea:76:79:00:5b:a7:b4:9e:bc:
14:9e:a3:09:90:83:67:12:93:d5:56:f6:16:83:e5:
be:85:b9:f3:83:49:57:67:4d:2c:51:c8:cd:c1:21:
23:41:08:a8:f7:94:95:66:a1:4b:dc:6e:1c:48:b6:
47:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:54:98:F5:61:D2:B5:B4:02:91:5B:EA:7F:BC:3A:30:72:99:FF:3C
X509v3 Authority Key Identifier:
keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:59:f3:2c:4c:e7:4c:f4:e6:65:1c:7d:53:95:53:fe:43:f6:
79:25:7d:66:8a:4d:0f:50:ea:6c:07:81:a8:f5:78:d1:44:64:
df:44:3b:d0:b5:f6:16:38:e1:57:92:c6:21:b5:46:28:de:18:
90:5f:2b:19:85:1b:f1:ba:bf:16:ae:af:ba:80:6c:94:13:a4:
a2:6b:35:a5:71:57:2b:fe:a9:17:4f:d7:0d:49:d3:11:0f:46:
df:0e:85:76:46:01:52:4e:79:86:c4:1e:df:f4:12:fd:04:02:
fe:3f:b6:40:35:e8:c0:72:79:ea:02:7a:08:b3:0a:50:36:e4:
6e:5b:01:21:af:35:28:b3:bc:4f:21:ab:f0:77:95:e2:59:bc:
31:b0:95:9e:7f:cc:61:c1:c4:87:36:c7:57:de:8e:d8:4d:75:
dc:a4:88:46:aa:e9:e1:23:05:27:40:41:e7:d1:cf:54:67:77:
aa:0a:81:f4:fa:22:0a:c4:a4:bb:1a:2d:ae:a0:79:be:ea:6a:
69:80:2c:26:f1:14:47:a7:d5:0d:ec:c1:99:52:cc:50:1b:53:
a2:45:c5:4a:32:0a:27:08:25:42:0f:26:4e:1d:5a:0e:d0:c9:
9d:cb:bb:88:f5:b9:87:f9:67:7d:5e:7e:20:9a:d4:83:b1:ee:
49:d0:72:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:02:55 2025 by rpki-client