Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
File: 7w7IG5xlO440BQj_hI2wZuNncrA.mft (raw, json)
Hash identifier: lR0Yn3z9P+GrXeoFsVvGC+sEbJ1CS6/1+cuUTfsias4=
Subject key identifier: A3:6F:B0:4F:BA:3C:7D:64:98:28:00:DF:1F:1C:03:BD:E5:D8:1B:58
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 0198D6980704CE182A491F5FE9BC5BD2A69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
Manifest number: 067B
Signing time: Sat 23 Aug 2025 11:02:24 +0000
Manifest this update: Sat 23 Aug 2025 11:02:24 +0000
Manifest next update: Sun 24 Aug 2025 11:02:24 +0000
Files and hashes: 1: 7w7IG5xlO440BQj_hI2wZuNncrA.crl (hash: Y9mTbH3O/4gbJa8Dai94Z6jhfb3kZNqAw4d7yEphTn0=)
2: _JZCaLt9Be62ENSNemRuRzThRaM.roa (hash: URuN9NpiQl5cKKOQiReY1w86ew5C0wnGONnwQYzQctk=)
3: fT9EDZcB-n7jKd_0sXTlTpOCVoU.roa (hash: ErzOKvcft9LuwLT6n685AHi6g3MUyqRhRkHGEZcgw3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:07:04:ce:18:2a:49:1f:5f:e9:bc:5b:d2:a6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Aug 23 11:02:24 2025 GMT
Not After : Aug 24 11:02:24 2025 GMT
Subject: CN=a36fb04fba3c7d64982800df1f1c03bde5d81b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4e:0d:57:a1:17:3d:f0:59:ca:24:80:e6:64:
85:dd:4d:28:1b:b9:14:9a:11:07:18:43:b5:eb:e3:
b5:f7:18:2d:4c:34:32:07:22:61:c2:0f:45:88:31:
5f:a3:48:bb:b4:ad:83:a8:88:23:36:b3:2c:a9:7d:
87:a7:4b:64:fd:da:d4:96:8a:e1:11:b6:e1:08:37:
f8:b7:bc:04:97:a8:70:49:e8:60:4a:e3:3e:d7:84:
6f:d2:e1:bf:97:63:88:0e:a4:e8:ce:d8:7c:ee:b4:
0c:f4:df:3e:13:bb:35:0c:94:57:b0:eb:a2:98:12:
56:3a:61:f7:e4:e6:f9:ac:ea:e8:de:0f:35:44:a5:
af:bd:4b:4d:c7:61:74:6b:02:0e:22:6e:8e:9b:64:
59:98:bc:a0:19:0e:34:03:8b:c9:7a:3d:88:6c:de:
33:df:e2:a4:ae:98:db:ee:ee:94:2d:16:5c:84:25:
23:cc:44:26:61:71:c0:84:01:01:17:95:9c:89:43:
c0:8d:75:33:18:02:27:5f:33:d5:91:1b:0a:48:0d:
82:1b:79:bf:6b:5c:fc:bf:70:e3:2a:5e:84:40:01:
53:a2:5e:83:f5:91:34:bb:c5:57:3a:46:c3:05:57:
da:fd:77:51:ec:5e:9f:43:56:57:e7:a8:73:88:0b:
a8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:6F:B0:4F:BA:3C:7D:64:98:28:00:DF:1F:1C:03:BD:E5:D8:1B:58
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:77:43:9c:df:32:8c:a8:c6:1b:05:ca:a6:e0:70:6d:f9:b4:
9f:e9:40:8d:84:78:c6:45:62:41:a9:09:8b:35:85:15:9a:32:
9b:5d:c6:24:f5:7c:a5:89:ed:7f:05:65:cd:8c:74:0a:fa:66:
15:62:a0:55:59:fb:70:e1:65:bf:65:7a:86:be:e2:92:fc:93:
57:20:02:f7:bc:19:26:c2:1b:3a:c2:70:a3:49:cc:d8:d2:88:
e0:c3:51:0c:f8:3d:d5:b4:d2:65:43:21:90:1a:90:2b:02:02:
74:9c:a9:78:e1:60:76:24:66:bf:d0:f8:f7:3f:99:81:e5:8a:
6c:76:2b:b7:c6:98:b3:77:99:82:82:62:c9:eb:12:c8:7c:fb:
6b:a6:5f:25:36:0e:a9:c6:01:09:69:76:5f:05:df:1f:16:77:
53:af:8a:b0:96:78:d9:a1:65:52:57:e3:69:1e:0f:91:d2:ed:
a8:af:df:74:cf:2f:9a:b5:0d:56:a4:99:9b:da:80:a5:c5:f2:
51:41:0d:f3:d9:7e:dd:63:e8:37:a5:8b:0c:75:89:33:c3:c2:
b8:c8:a2:0e:c8:5a:1e:30:cd:4e:03:ce:8c:b2:fc:3c:f8:fc:
41:b9:3a:83:fa:bf:95:7c:9e:92:ec:30:32:1f:48:a3:48:e1:
c1:5b:de:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:28:15 2025 by rpki-client