Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
File: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft (raw, json)
Hash identifier: g0zLhB2BwBuYVexcz8nmwtCX7nYeu5GkqWRenic07NE=
Subject key identifier: FA:3B:11:A0:85:7C:85:6E:CF:26:1F:8B:75:32:84:44:AE:E0:53:BD
Authority key identifier: EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
Certificate issuer: /CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Certificate serial: 0198D5F146C77D889853A274ED0375001216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:15 +0000
Manifest this update: Sat 23 Aug 2025 08:00:15 +0000
Manifest next update: Sun 24 Aug 2025 08:00:15 +0000
Files and hashes: 1: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl (hash: j+yUzhQnmphdleW99QjJO8M4gj8BmJXrDqaEJMKlSYM=)
2: qrPDrPXSwyvVn-Qdl0rfUFtGg50.roa (hash: YwVpe+VwfLyswPBaEHJ3Hi4HwV3yhmlk88pkGuhRl44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:46:c7:7d:88:98:53:a2:74:ed:03:75:00:12:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Validity
Not Before: Aug 23 08:00:15 2025 GMT
Not After : Aug 24 08:00:15 2025 GMT
Subject: CN=fa3b11a0857c856ecf261f8b75328444aee053bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c6:f3:6d:51:1a:df:a0:8d:88:9c:f2:69:ea:
a4:e6:e5:38:20:43:c1:68:6a:da:30:2a:3d:76:3e:
f2:b0:df:b0:ea:74:68:46:8f:40:6a:59:75:a7:7b:
57:93:69:5e:0f:93:36:66:6f:69:32:5e:b2:4c:16:
0d:b1:0b:d8:5f:26:93:eb:58:11:e0:21:bc:c9:63:
11:26:09:85:23:13:6b:ef:50:b0:47:39:25:fa:13:
6e:dd:de:74:f9:1e:0e:c6:93:b1:ea:19:5e:5c:34:
f3:0a:51:af:fa:23:e5:2b:84:1e:ae:5c:87:d4:65:
40:13:38:b1:06:9a:c7:51:8b:2f:4d:7f:fe:76:9f:
b2:01:c9:28:f5:99:2f:e4:1f:cd:83:f8:29:fb:dc:
8d:61:d9:b6:aa:f0:07:ac:fc:6f:e5:2e:dd:d6:63:
ca:ec:95:9b:b7:ce:04:25:39:2d:5d:c1:5c:28:a9:
86:b3:90:5e:e8:c3:a1:29:ad:44:96:62:e8:13:40:
f1:31:2c:ab:e2:01:0e:1f:f3:49:4e:82:eb:0f:b2:
d0:55:0d:6c:02:e3:a2:35:72:0b:07:54:05:9d:35:
f3:99:0a:a8:c1:b4:8f:5c:8f:12:aa:66:f6:75:cb:
9a:4b:55:d0:7c:03:3f:b9:16:e0:47:8d:db:16:78:
36:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3B:11:A0:85:7C:85:6E:CF:26:1F:8B:75:32:84:44:AE:E0:53:BD
X509v3 Authority Key Identifier:
keyid:EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:21:e5:b4:4b:54:3f:af:b0:43:c9:88:bb:04:fa:9f:6b:89:
8f:31:9a:5b:56:25:01:14:2e:06:46:77:61:30:63:70:63:16:
f4:2e:2b:31:63:2a:3b:71:1e:8b:07:5d:f9:db:53:00:f0:7e:
da:10:b1:23:3d:d9:24:0a:0b:c6:cc:a8:1c:84:73:1f:bd:cd:
f4:bb:40:99:9b:68:f4:07:03:4f:74:b7:e4:e1:e7:c6:ea:6f:
f2:14:0d:43:a8:da:70:ea:8a:01:5d:e5:95:4a:2f:3a:3d:6d:
3d:70:85:55:39:c4:77:c3:98:c1:de:69:19:0a:6a:61:3a:2b:
41:bb:6e:60:10:7e:1b:c2:00:54:ec:d3:05:4d:ba:c5:ef:e8:
cc:b3:99:a1:34:28:b2:99:db:ff:d6:6e:e3:91:31:ad:33:26:
e4:35:b2:34:94:bf:4f:a7:05:31:9f:f7:0a:ad:b6:2a:3e:0e:
b2:b4:f9:7b:c9:ad:b6:83:71:d6:d7:49:bd:c9:9d:f8:57:bc:
63:08:ac:4d:ff:45:23:a6:dd:e0:91:75:d4:0c:30:74:f4:c2:
ce:e9:5f:52:f3:77:b7:85:c7:b2:ed:fc:2d:ea:40:d5:8c:07:
05:e5:0d:f9:27:df:cb:db:ff:f9:3a:76:b8:a8:9d:86:ea:e4:
48:41:46:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:24 2025 by rpki-client