Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
File: 7-oXe8wrDvZMq2BObmQnsa3gv2k.mft (raw, json)
Hash identifier: tFUPNDWwVZWBepXt/3ayTMqO0+VoznZHxMV2tJzaSSM=
Subject key identifier: 86:56:A8:6B:3D:48:D4:D0:1A:96:B8:F2:3B:68:78:49:51:C0:6C:A2
Authority key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
Certificate issuer: /CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Certificate serial: 0198D54E3C783E8B148790FAD0FF9871BC30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
Manifest number: 0EAF
Signing time: Sat 23 Aug 2025 05:02:10 +0000
Manifest this update: Sat 23 Aug 2025 05:02:10 +0000
Manifest next update: Sun 24 Aug 2025 05:02:10 +0000
Files and hashes: 1: 7-oXe8wrDvZMq2BObmQnsa3gv2k.crl (hash: NTcmAFyQOEDxHxzzjvHOSTjS7j4dYOkzYWTz1eJWYko=)
2: BfBzjofHcSu4a3jygqfPxr7xm38.roa (hash: WZsJkNeqT7b0+zK6F4CNPynL3I93rxtNrXgK5qWCEEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3c:78:3e:8b:14:87:90:fa:d0:ff:98:71:bc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Validity
Not Before: Aug 23 05:02:10 2025 GMT
Not After : Aug 24 05:02:10 2025 GMT
Subject: CN=8656a86b3d48d4d01a96b8f23b68784951c06ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:85:9c:19:51:67:c6:b7:ba:33:8e:de:4a:51:
c5:5f:5f:06:cc:27:31:9c:6f:2d:32:0e:84:d3:0a:
a7:30:57:7d:e0:2e:3e:09:a4:2d:e0:49:65:86:54:
75:cd:7f:1a:7b:2e:8d:16:49:7b:49:f4:78:98:65:
cb:a1:b9:c1:ce:a7:14:bc:91:e1:cc:19:78:ec:cc:
95:8b:1b:32:3d:6b:b9:7d:f9:e1:61:e6:0f:cc:43:
ab:04:13:d4:59:51:d0:54:5a:09:7f:77:5f:bc:38:
f4:61:d0:6d:60:a2:14:1f:eb:52:98:a8:69:98:62:
c4:4d:60:55:72:8c:e4:8d:c0:a9:73:b9:e5:63:d6:
1d:5c:6e:32:2b:79:33:55:b1:6a:9a:b8:e0:0d:38:
1d:86:2f:ea:3d:05:63:90:31:a0:eb:cb:fb:1a:e6:
d8:52:c5:a1:42:22:a7:8a:c6:8f:3a:e0:5d:89:47:
b9:77:1c:41:ff:6c:7c:fa:f0:c8:c2:77:09:e8:39:
23:c2:83:32:4a:cd:6c:13:92:b6:71:99:85:08:a1:
3e:2b:f9:9b:a0:40:3e:5b:9b:71:ce:86:ff:72:45:
cb:39:79:5d:2e:f8:a1:d2:4e:36:24:4e:84:7c:e4:
29:da:b6:72:da:5e:93:1f:16:87:75:48:83:25:65:
ad:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:56:A8:6B:3D:48:D4:D0:1A:96:B8:F2:3B:68:78:49:51:C0:6C:A2
X509v3 Authority Key Identifier:
keyid:EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:10:65:52:82:d7:20:84:64:ef:e1:6f:52:23:70:85:4e:81:
e9:e2:2e:79:c9:c8:ec:67:b4:e8:40:64:0e:b1:08:ee:2e:2f:
5a:6d:a3:d1:2e:e6:7b:b5:62:1d:5c:e2:8f:cb:c6:93:5e:a3:
36:34:11:6b:42:0b:1b:5c:8e:06:dd:d1:59:4a:ec:6e:05:85:
4a:1d:8a:78:c8:96:5d:f6:b6:37:bd:43:99:51:88:f5:d6:d5:
dd:0d:f3:d6:fb:2a:2a:89:1e:24:6f:c0:5a:58:a0:bf:7c:f6:
53:fd:36:2e:03:dc:e0:67:d3:b5:d3:7c:fe:a8:e5:1b:4a:ad:
16:2c:88:e8:2b:04:9b:5f:91:a5:21:0f:79:c9:bc:d5:3c:18:
88:39:39:09:23:ca:87:f4:89:1d:9c:98:f0:1b:0d:ad:d5:6c:
98:c4:85:42:13:2b:61:82:cf:07:e5:f5:47:66:1f:22:91:f4:
be:66:b1:08:05:db:e4:83:11:74:83:8f:20:3c:38:60:aa:27:
0e:e2:24:8e:cb:f9:b8:e0:d0:6d:0b:88:61:19:4d:6b:99:a7:
3d:fa:f4:51:32:c7:16:19:1d:d9:47:ee:01:cb:24:38:d0:03:
d7:a4:95:f3:c3:a4:75:74:17:21:fe:3f:3f:99:66:5e:19:d4:
c4:70:59:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:23 2025 by rpki-client