Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier: vMVP+n+RLdanRFhJOWG1EwcshOSSW/RHDrjtdyN8uMY=
Subject key identifier: 7C:43:20:AD:74:68:9D:8B:D8:17:A3:4F:EA:E0:08:1C:FE:9D:97:A6
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial: 0198D54E9BA455025046965E3BD965E94106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 05:02:35 +0000
Manifest this update: Sat 23 Aug 2025 05:02:35 +0000
Manifest next update: Sun 24 Aug 2025 05:02:35 +0000
Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: 8BYpofH57fZD9FjpcQ1t+GoP1Dq5aAPPnexPz6DVF7U=)
2: pWjzKwcY2D4VzPoP5dA0NiOjP1E.roa (hash: COXcfdNp3EzT11F9o1Nm0eGFt9uQRA5Y8hfNNYTi82c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:9b:a4:55:02:50:46:96:5e:3b:d9:65:e9:41:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Validity
Not Before: Aug 23 05:02:35 2025 GMT
Not After : Aug 24 05:02:35 2025 GMT
Subject: CN=7c4320ad74689d8bd817a34feae0081cfe9d97a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:e3:f5:03:7f:20:34:e1:23:de:95:86:2b:
5a:73:fe:70:b1:c8:31:de:e7:21:17:d0:bd:e5:12:
2e:f4:90:dc:d3:f4:a4:a2:22:83:11:1f:e5:3f:a2:
c6:4c:4f:45:38:d6:da:1c:db:b1:65:84:b4:7d:e2:
10:8c:ec:89:37:e5:7b:af:58:75:75:35:9f:75:eb:
aa:4d:40:d0:1c:65:97:c9:8e:37:75:14:57:f3:c1:
f2:b4:94:cc:3b:19:07:2c:c9:14:9d:ed:31:98:83:
c9:c1:14:ea:46:26:3d:fe:35:1a:68:f6:73:90:94:
94:6f:88:d0:75:8d:da:e7:09:76:90:78:58:b8:ae:
ef:99:e2:9b:fc:ea:6b:38:13:01:3d:c8:fc:f4:81:
7d:be:c8:9d:f6:02:04:57:3b:84:e7:6f:47:13:4b:
57:45:4c:12:05:92:c4:e3:e8:93:48:87:18:58:d1:
58:e1:8c:0a:9a:05:d5:94:18:ff:42:d7:ac:53:2f:
85:c9:22:aa:f2:cc:62:1e:da:e3:6a:50:74:f3:92:
e4:f8:16:e3:0b:c8:30:38:21:12:5b:9e:d6:0e:28:
2c:d8:75:ba:9d:76:57:8b:7d:33:de:00:15:c7:57:
5d:e9:04:5a:23:08:6d:12:d9:8f:ee:ce:f2:1d:a4:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:43:20:AD:74:68:9D:8B:D8:17:A3:4F:EA:E0:08:1C:FE:9D:97:A6
X509v3 Authority Key Identifier:
keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a2:7c:ad:c9:c8:62:f8:9b:cf:e2:63:8e:14:74:26:fe:6b:
2b:4f:9e:56:e7:92:b0:e2:5d:96:18:0a:92:83:53:01:1d:fc:
59:42:18:1f:c4:bc:37:bf:cf:cf:4f:63:d1:56:52:2d:0c:31:
a1:45:3a:a4:74:3d:62:9e:58:28:98:6a:fc:56:f2:df:74:87:
6d:a2:e3:1f:b0:41:d5:0b:7a:63:da:1e:0d:66:78:e3:b1:e4:
05:5b:8b:3a:33:e9:fa:3c:21:bb:04:e7:58:dd:91:97:5a:4b:
4c:dc:8e:6d:45:ef:1e:7e:8c:3b:bc:42:0d:6e:68:ef:82:43:
4e:3d:5b:05:fa:16:1f:f4:54:0a:46:78:3b:d0:b3:5c:fb:5e:
e9:56:9b:6b:2c:41:03:9c:d5:79:0e:2b:5e:c3:b8:55:4c:45:
86:c7:fe:ee:24:b4:1d:69:c3:02:b0:2e:1a:a1:3f:a8:37:3f:
30:b9:16:c6:8f:a6:10:a9:87:25:ae:3d:60:5b:68:a9:f0:6b:
96:d9:4b:1d:48:98:00:b0:f6:dc:2c:ea:9f:0c:7f:aa:04:08:
3a:ff:b7:9b:92:9f:f4:5b:19:ab:d8:c3:4c:25:54:86:dc:57:
a7:e1:26:f3:8f:fa:fe:b0:b6:94:80:e4:31:88:bc:ea:c3:23:
5a:5d:c2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:50 2025 by rpki-client