Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
File: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft (raw, json)
Hash identifier: skyyWvEwKtGH0ky0nGcHxLYNngtY9HO9Xb9Nd1BP1zc=
Subject key identifier: 91:7F:F5:BC:57:44:A3:65:D3:72:52:B5:4B:24:42:C9:87:C5:E1:D5
Authority key identifier: EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
Certificate issuer: /CN=ef1e225614c65ce2cf5275eb464334395c06f430
Certificate serial: 0198D54DF94D7A12BAC5F61B6683EEAABCDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 05:01:53 +0000
Manifest this update: Sat 23 Aug 2025 05:01:53 +0000
Manifest next update: Sun 24 Aug 2025 05:01:53 +0000
Files and hashes: 1: 7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl (hash: QNGN4Ls2Tlym/pPHEBD3PgYzpM1p13CvFlXu2TSTtUk=)
2: kr-CQEDCmSYwuOSJOe0IGac-Ph4.roa (hash: wykL6q5xBW3wpH/kqH9sAqNTf3knNHNn6bzejjuBpOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:f9:4d:7a:12:ba:c5:f6:1b:66:83:ee:aa:bc:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1e225614c65ce2cf5275eb464334395c06f430
Validity
Not Before: Aug 23 05:01:53 2025 GMT
Not After : Aug 24 05:01:53 2025 GMT
Subject: CN=917ff5bc5744a365d37252b54b2442c987c5e1d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e6:5e:72:f4:ee:90:5c:79:15:e0:9e:5e:cf:
48:3e:ed:45:c1:78:7a:fe:fc:e3:2a:d3:1e:f9:88:
ed:a0:61:51:6a:be:fc:1f:9c:e7:12:ce:b4:5b:c8:
4f:c4:bb:1d:2e:73:62:db:48:da:7c:8e:bd:91:2c:
be:c0:a0:c3:f9:25:90:73:89:e1:54:72:a3:5f:39:
af:d7:98:73:d2:6e:fd:2e:33:f2:4f:fe:16:32:45:
8d:ef:36:3e:92:ea:c0:dc:1d:7d:53:ae:54:70:70:
4c:93:4b:e9:51:14:d8:12:d7:1b:0d:65:49:4e:48:
6a:18:21:1f:80:c3:0f:85:9e:71:e3:30:dc:1f:77:
93:dd:0e:61:ef:55:eb:1d:04:42:2f:b2:3c:0e:5d:
54:c5:0c:46:62:b8:cb:9c:ed:26:fb:0f:0c:17:db:
18:3e:eb:34:72:59:8f:2c:03:89:ec:0d:35:56:f0:
10:1c:b5:fd:be:95:d6:6c:d1:93:ce:ca:2f:b6:e6:
6c:31:1f:04:b7:27:5c:49:5d:66:84:6a:f9:e4:b4:
87:54:17:4e:08:95:86:33:20:3a:ae:0b:e6:b8:b9:
1e:f1:ba:a9:85:dc:f9:cb:30:0e:5a:1a:2a:d0:92:
c6:d3:68:3c:7c:80:30:d7:20:c5:59:3c:d8:08:5e:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7F:F5:BC:57:44:A3:65:D3:72:52:B5:4B:24:42:C9:87:C5:E1:D5
X509v3 Authority Key Identifier:
keyid:EF:1E:22:56:14:C6:5C:E2:CF:52:75:EB:46:43:34:39:5C:06:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7x4iVhTGXOLPUnXrRkM0OVwG9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d455ba-7ec6-4f3e-acd6-11f95268ea74/1/7x4iVhTGXOLPUnXrRkM0OVwG9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f8:47:a6:6c:48:99:d3:17:a9:34:e3:b1:12:31:20:ba:9b:
81:5d:cd:51:64:f9:5e:f5:20:6f:d1:82:96:dc:1a:e4:6b:d4:
15:dd:0b:aa:8d:d6:d8:b5:f2:be:28:f6:23:c3:98:9d:c0:f9:
da:c5:2a:ad:92:92:83:fe:b6:16:3b:c2:f5:f2:2d:ba:1e:4f:
e1:20:16:4b:af:c8:49:a1:1f:16:ec:14:62:21:50:99:dc:8d:
3d:00:93:bb:b8:fa:6b:fc:02:3c:91:23:d4:83:be:df:98:18:
16:93:d0:a7:1d:65:57:5f:e4:d5:46:c9:23:fe:f8:fb:64:90:
af:27:41:d0:8c:30:70:fd:c7:0a:34:66:fe:bf:3a:db:b2:3f:
69:1f:a0:16:49:9d:4d:69:10:40:e2:5b:fd:84:d3:8d:20:b1:
77:f7:23:8f:4d:06:6f:f8:ef:d7:4b:68:ea:16:e2:d7:a1:07:
37:87:5d:08:c5:a2:19:0f:0a:ec:25:44:07:5b:72:c3:6c:8c:
35:0a:0b:0b:ed:02:2d:73:d5:b5:d0:8d:19:ff:d5:dd:c4:ad:
87:91:d5:12:58:04:dd:cb:39:b2:19:30:cb:62:92:fa:86:46:
b9:26:ff:34:ad:5d:44:e4:0c:5d:e3:d1:09:e0:ab:6a:62:7f:
b6:36:11:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:43 2025 by rpki-client