Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
File: A7sK13ZWE5U7krbL9M2pP5wTcuY.mft (raw, json)
Hash identifier: nqTczVVyS1CuwjnhhvphhsywtJVGuikzwedowcs9pPE=
Subject key identifier: EC:77:E6:E2:AD:13:69:68:59:FE:DC:8E:DC:2C:D2:E5:05:2F:21:9D
Authority key identifier: 03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
Certificate issuer: /CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Certificate serial: 0198D5F16733D4367529A985765998A33BEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
Manifest number: 02CD
Signing time: Sat 23 Aug 2025 08:00:24 +0000
Manifest this update: Sat 23 Aug 2025 08:00:24 +0000
Manifest next update: Sun 24 Aug 2025 08:00:24 +0000
Files and hashes: 1: A7sK13ZWE5U7krbL9M2pP5wTcuY.crl (hash: /b8xgeX2LTS1AmWNJ/DR7FY8G/HuxeGT1DwPiflrwgM=)
2: E09vqP6Dhzwi3swUd7vdKQdAZ-E.roa (hash: MzWcZL4YZkWICabmNLBtwrsQlq2zb5xWQgY5PAU+5oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:67:33:d4:36:75:29:a9:85:76:59:98:a3:3b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03bb0ad7765613953b92b6cbf4cda93f9c1372e6
Validity
Not Before: Aug 23 08:00:24 2025 GMT
Not After : Aug 24 08:00:24 2025 GMT
Subject: CN=ec77e6e2ad13696859fedc8edc2cd2e5052f219d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:25:28:e7:97:c8:f1:07:aa:47:30:ff:7e:49:
2c:b9:76:6b:95:30:84:c6:34:52:62:38:a4:b6:2d:
12:86:0d:d7:6b:8e:c8:7f:ef:06:db:69:a8:5d:6f:
fd:70:aa:ce:0d:b3:7b:40:ef:c5:80:19:4c:8b:92:
a4:37:d3:26:d0:67:57:d6:aa:7d:df:34:1a:89:85:
a2:8e:9f:89:71:fa:0a:ad:19:37:af:fb:92:90:be:
e8:a9:04:07:d6:e4:fb:cf:9b:ba:04:64:ca:02:b8:
5a:60:08:92:95:db:db:64:b0:4b:d2:89:44:b2:28:
eb:ea:a0:79:10:ba:27:2c:31:5b:c5:51:86:44:99:
c5:f3:ab:33:eb:5f:aa:9d:06:d0:b7:86:a2:ba:66:
0f:07:81:be:3b:03:2a:13:27:8d:38:e1:a1:68:51:
24:b6:29:61:b0:e0:84:0d:66:7c:8f:f9:5c:a8:82:
c6:4e:77:4e:17:cb:de:38:ca:a7:0f:5d:25:33:d8:
c5:f4:b3:d5:8a:3e:d3:4b:b0:d9:b7:e1:64:fd:21:
c5:f3:ca:82:26:2a:5b:89:04:96:fe:2b:4c:35:a0:
e3:90:eb:29:5e:fe:38:65:98:79:56:f3:7b:13:7a:
f6:60:69:32:66:6c:2a:79:16:d0:5f:11:64:e7:17:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:77:E6:E2:AD:13:69:68:59:FE:DC:8E:DC:2C:D2:E5:05:2F:21:9D
X509v3 Authority Key Identifier:
keyid:03:BB:0A:D7:76:56:13:95:3B:92:B6:CB:F4:CD:A9:3F:9C:13:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7sK13ZWE5U7krbL9M2pP5wTcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/bd9e55-d20a-4259-b712-d7582589bb59/1/A7sK13ZWE5U7krbL9M2pP5wTcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fe:f3:ad:94:5e:c7:ef:4b:a9:bd:fe:14:0c:bf:98:82:0b:
b2:a1:b4:64:e4:c1:95:75:86:bc:15:fd:3c:0a:8d:21:69:c7:
36:23:6a:8a:c6:d0:64:df:96:cc:03:79:c2:19:1c:0d:81:10:
ed:bd:d2:ad:72:6f:b9:3d:3c:44:30:fa:e9:3d:14:7c:4f:11:
75:45:d2:30:77:f2:9e:7d:0a:24:67:54:ad:4c:54:34:4a:32:
58:6d:b8:3c:a8:8b:b8:1c:8b:52:9e:0a:ba:61:69:6d:30:72:
24:fe:6f:86:36:85:96:52:98:4c:ea:f2:2b:5a:fd:5d:5d:bb:
f2:27:78:1a:1e:c7:35:11:c9:b0:f8:73:58:91:d6:4a:00:a4:
04:cb:57:4b:2b:61:57:42:e2:be:ad:64:29:e3:fb:ec:68:b0:
98:16:cd:d0:08:b1:2f:ba:ce:5a:d8:67:77:77:21:32:0d:b8:
87:e2:b4:5a:17:af:2a:37:f8:40:a1:c6:df:3f:e0:43:4e:de:
7a:df:90:6a:ee:09:11:a3:36:a7:f5:bf:65:95:c6:04:4c:76:
c0:06:ab:0f:02:94:eb:85:32:91:61:9b:48:e8:9e:a5:ed:49:
9c:ca:71:9b:39:de:aa:5d:b6:04:dc:6b:95:03:52:c8:b7:61:
8e:ae:30:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:25 2025 by rpki-client