Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
File: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft (raw, json)
Hash identifier: COJuoNLxYM+yRqM3/yFBj2BlEVF7Lv3G3YpVm4We9Ks=
Subject key identifier: B9:21:BC:96:40:1C:A7:D9:7C:8B:39:08:84:7D:01:E3:FA:A7:4E:9B
Authority key identifier: ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
Certificate issuer: /CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Certificate serial: 0198D66121302AEB5974DF7ABD02105E2D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
Manifest number: 09D2
Signing time: Sat 23 Aug 2025 10:02:26 +0000
Manifest this update: Sat 23 Aug 2025 10:02:26 +0000
Manifest next update: Sun 24 Aug 2025 10:02:26 +0000
Files and hashes: 1: 7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl (hash: 9mmn+X1bsOrGk0PYWQleAETdy3N3T+y83MG2A31nObs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:21:30:2a:eb:59:74:df:7a:bd:02:10:5e:2d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd97f6078d22e82fd3d04aec5d6721715256f16
Validity
Not Before: Aug 23 10:02:26 2025 GMT
Not After : Aug 24 10:02:26 2025 GMT
Subject: CN=b921bc96401ca7d97c8b3908847d01e3faa74e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d4:2d:1a:ac:b8:32:f5:97:4c:07:c8:d6:7c:
70:63:05:88:87:a3:45:6c:a7:97:8d:42:47:85:a6:
4d:3b:ba:21:9e:83:a8:78:4c:3e:3f:3d:19:3b:49:
7a:f8:b4:ec:83:93:f0:d0:50:53:44:4d:27:9c:a7:
a9:e2:51:97:a1:9b:8b:08:3e:59:45:16:12:0a:56:
e0:64:64:9b:1f:5a:26:bb:1c:7e:02:60:84:c4:8f:
52:cf:07:32:78:e3:77:8a:33:ff:b4:e9:41:c4:a6:
65:e9:bb:d5:11:e7:c2:a1:e7:4f:9b:d4:60:c8:0a:
79:44:73:98:6e:01:d3:19:60:6e:38:16:d1:d0:3e:
b7:65:79:c0:0a:75:ca:02:ce:08:4f:7b:66:e0:cb:
f8:ab:8e:df:62:e1:2c:81:48:8b:8b:23:91:a4:21:
72:23:46:51:b7:d7:b2:9d:31:db:bd:9e:18:7c:70:
26:ac:b7:b7:e8:70:69:56:21:ad:41:85:84:6a:b0:
db:6c:95:3d:7e:08:d8:a7:e7:2d:e2:4b:20:52:87:
dd:1a:94:72:dc:b1:d5:b8:6e:6b:d2:47:50:92:7d:
4c:99:43:65:a3:8a:8c:a3:36:f7:85:03:71:a3:fc:
e5:43:81:bb:3a:d1:a0:9a:c7:c7:38:1d:38:c5:d7:
2c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:21:BC:96:40:1C:A7:D9:7C:8B:39:08:84:7D:01:E3:FA:A7:4E:9B
X509v3 Authority Key Identifier:
keyid:ED:D9:7F:60:78:D2:2E:82:FD:3D:04:AE:C5:D6:72:17:15:25:6F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dl_YHjSLoL9PQSuxdZyFxUlbxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/3acdd4-73cb-41ee-b052-4fadad085823/1/7dl_YHjSLoL9PQSuxdZyFxUlbxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:fd:d7:53:90:00:a4:07:88:c5:ad:80:ff:1b:98:eb:73:a9:
7f:fb:bb:32:1d:c3:72:8e:6b:61:9b:99:25:a7:c9:04:ca:e9:
31:bb:69:13:4a:17:73:fb:82:a1:05:f2:f2:36:0b:1a:f6:fa:
4f:4f:ae:57:18:5a:fa:a1:55:8f:9a:b5:51:78:05:34:a1:38:
9d:4d:b1:2c:e7:67:a6:ed:c4:44:fa:28:c9:65:c3:1e:23:cd:
81:b5:a0:9f:dd:76:87:fe:4c:d5:af:2c:fc:5c:ed:1d:c7:8b:
24:55:85:61:c7:7b:db:00:7b:d8:20:60:ac:8c:ef:d2:57:12:
18:0f:0f:d1:4b:2d:fd:fe:e6:86:2c:a9:f6:a7:66:4a:11:ee:
24:a0:7d:9a:2f:f5:40:5f:c4:1f:1e:8c:75:1d:b1:28:60:50:
22:50:a5:17:88:cb:a3:77:ff:98:ac:15:3d:ad:fd:c8:bb:4f:
80:16:b7:1a:57:d8:84:c2:c8:37:7d:7e:bb:9a:67:a7:c8:76:
aa:b2:da:2a:de:c2:cf:e0:d4:87:bd:90:36:53:58:20:a6:7b:
b1:06:70:6d:11:b8:9a:d4:c2:d5:dc:cc:0a:34:74:bd:8b:21:
02:fb:d8:f5:81:4a:45:09:af:06:1c:17:0b:5a:5a:bb:f2:5c:
d9:6b:51:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:05:36 2025 by rpki-client