Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: oOlQvzTfndcsDmMzPtfMmAeKCuxXp1YzjlFk/Um8ots=
Subject key identifier: 9E:DA:54:09:10:BA:9B:C8:A1:D5:E4:6C:ED:25:F0:A9:5D:2A:FD:49
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 0198D5160D9CC63E00D8CE3A7AFD366FCA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 1413
Signing time: Sat 23 Aug 2025 04:00:48 +0000
Manifest this update: Sat 23 Aug 2025 04:00:48 +0000
Manifest next update: Sun 24 Aug 2025 04:00:48 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: M5OBBYSHB1pqsX4NebmV0sNyuElPoLh2zvSCrblfvJ0=)
2: Fy9dAaWIGt3DDwam3RK8I1POnD0.roa (hash: mN5AYrqpl0VfVq4+AtyPnI39fV2fuW1S27zeiDc2nYY=)
3: iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa (hash: iCHtjZhnNNI84krnhRcpRLsDA1PIVF/eAzRpZb4b+rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:0d:9c:c6:3e:00:d8:ce:3a:7a:fd:36:6f:ca:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Aug 23 04:00:48 2025 GMT
Not After : Aug 24 04:00:48 2025 GMT
Subject: CN=9eda540910ba9bc8a1d5e46ced25f0a95d2afd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:29:bd:11:7c:4c:73:fb:c0:71:51:14:b3:
75:0b:7a:3b:9e:d3:92:07:e5:52:af:4b:f0:c5:c9:
4d:b3:fc:6c:18:9b:64:3b:e0:09:0b:b1:5e:bb:d6:
31:26:64:92:1a:2f:62:38:db:ac:15:83:46:71:80:
cd:8c:db:dc:62:1e:d7:eb:47:2c:64:ee:05:7b:4d:
d1:5b:32:d1:c0:1e:89:cf:3e:d6:ce:89:55:ac:5c:
a0:28:b8:b1:bd:f0:3d:70:2c:e8:7e:fc:c2:f5:11:
4c:db:0a:39:3e:f8:88:89:72:bc:bb:01:3e:e2:92:
d3:80:40:43:41:1f:12:58:53:e9:22:17:4a:92:30:
87:af:c2:49:9b:be:98:46:27:dc:67:98:4b:89:5e:
5a:27:dd:21:91:a5:68:9b:16:03:14:fa:1e:da:65:
5b:1f:70:27:36:75:7e:e4:60:8d:00:67:bd:ac:00:
93:58:2d:b9:9c:aa:ff:2c:ad:04:b0:db:bc:97:b2:
0a:54:47:41:ee:ee:79:e3:91:a2:26:0a:4f:ab:48:
1b:a6:ba:98:1c:c2:6d:92:4e:20:5f:75:a2:03:d4:
65:df:35:c1:5c:fb:c8:f9:43:aa:e8:2d:2c:c9:e4:
60:d1:67:13:e0:4e:a1:0b:f6:df:30:c4:2b:50:3b:
7b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DA:54:09:10:BA:9B:C8:A1:D5:E4:6C:ED:25:F0:A9:5D:2A:FD:49
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2b:53:f0:2c:a4:ed:cb:97:08:4b:40:26:e6:16:b9:1a:07:
8f:b2:8e:5d:0e:8b:af:f4:80:f5:39:08:e1:8b:86:fe:9b:fa:
ba:5f:d8:dd:ec:15:9e:1e:62:e4:42:83:0c:e9:09:65:44:0a:
74:3b:c2:03:a9:f8:e8:96:11:18:a7:e5:92:ce:cd:57:c9:21:
03:22:5e:68:db:6b:e2:23:37:a5:ad:e0:0d:b5:7e:01:d7:af:
85:90:51:0d:cc:80:67:35:fe:2f:61:4c:f5:6e:2e:cf:bd:f4:
4b:36:de:2d:5d:e1:d5:92:31:a3:fb:66:0e:b4:ad:d4:93:cb:
9f:64:bf:fc:d6:aa:6a:db:b5:c2:1d:c5:02:98:e6:c5:7b:9a:
a0:41:d3:c5:23:06:c6:61:3e:9c:61:ae:6e:44:bd:af:48:96:
8c:2e:7f:dc:6d:7a:46:26:67:de:25:83:76:45:a8:bb:2d:fb:
25:16:da:cd:ac:eb:fa:1c:53:b3:2f:4f:7c:ef:a6:d2:72:ee:
29:a3:30:04:d5:c9:12:6d:de:75:64:d2:02:92:78:f6:12:f4:
e0:97:67:19:ed:da:07:96:eb:5e:62:bc:c9:7b:a0:11:c1:f6:
78:50:92:4e:89:0d:fb:d9:4c:6a:39:c8:a9:44:a0:d6:81:b7:
72:2a:e8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:12:23 2025 by rpki-client