Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
File: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft (raw, json)
Hash identifier: YSwXrmF1bPXQCdgmMTD78sTXDDcSAzAzLOO4m3ZNeLE=
Subject key identifier: DE:AD:D1:76:02:22:58:F1:25:AA:7B:69:99:FD:1A:91:EB:CB:E7:E7
Authority key identifier: EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
Certificate issuer: /CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Certificate serial: 0198D70578E5B953E5E10D320424D570AAE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
Manifest number: 03CE
Signing time: Sat 23 Aug 2025 13:01:56 +0000
Manifest this update: Sat 23 Aug 2025 13:01:56 +0000
Manifest next update: Sun 24 Aug 2025 13:01:56 +0000
Files and hashes: 1: 7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl (hash: 4dGSf7nvJJ4+QPmLs7TuYCnkHscYjda4Y3bMlEo+LZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:78:e5:b9:53:e5:e1:0d:32:04:24:d5:70:aa:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec643b4fa3f0e13cca8055833ac70c69dd1ca8e1
Validity
Not Before: Aug 23 13:01:56 2025 GMT
Not After : Aug 24 13:01:56 2025 GMT
Subject: CN=deadd176022258f125aa7b6999fd1a91ebcbe7e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:25:2e:c7:cc:23:16:c6:33:85:4b:ad:3b:4c:
c2:79:18:42:41:16:94:d8:20:bb:5b:17:79:52:1c:
b8:a7:db:0a:0a:5a:95:47:b8:37:6a:d2:62:8f:ba:
e9:7f:9b:24:4f:bb:c3:2e:48:48:f6:5d:10:68:e6:
26:a7:8c:4d:ec:92:db:65:0a:31:71:9b:8e:99:4f:
66:10:0d:30:e3:6d:b9:f6:b8:b5:7b:6b:5b:04:ff:
16:7b:98:f4:93:15:3c:48:e4:10:a8:7e:01:5f:95:
ce:df:c3:ae:c7:59:31:e1:77:6e:d2:f6:fa:d4:e1:
16:9f:39:05:c3:9e:89:b6:7e:3c:c5:00:51:22:fd:
63:46:4a:91:37:4c:91:fc:cf:0d:69:f1:de:8e:e9:
a6:2f:50:7f:5a:43:f1:72:44:e4:ea:eb:82:e7:4f:
e2:36:04:ef:16:19:29:f8:3f:a3:20:2a:b1:01:1f:
39:94:fa:69:5f:2c:cb:5e:26:5a:5b:f3:1e:e0:47:
c3:4d:f5:40:4f:83:46:42:90:fb:ec:40:47:a4:b8:
9a:db:71:38:48:a2:09:a5:be:97:4c:b4:f3:9e:1f:
27:b3:a8:fe:57:cf:6b:ee:9d:ea:6a:0c:6f:d6:c9:
29:c6:f3:7f:e2:9b:d8:b4:34:6f:93:31:84:73:f3:
2a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AD:D1:76:02:22:58:F1:25:AA:7B:69:99:FD:1A:91:EB:CB:E7:E7
X509v3 Authority Key Identifier:
keyid:EC:64:3B:4F:A3:F0:E1:3C:CA:80:55:83:3A:C7:0C:69:DD:1C:A8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GQ7T6Pw4TzKgFWDOscMad0cqOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/74d490-b85a-4939-90dc-79e746383f8d/1/7GQ7T6Pw4TzKgFWDOscMad0cqOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:f0:04:6c:4d:ab:92:ef:00:2b:41:36:a9:85:c3:6d:e5:0e:
47:85:4e:2e:ab:1c:4d:0c:5b:74:53:8f:ef:9c:a5:de:0f:0b:
64:99:3e:cc:fe:60:28:05:0a:a9:2c:57:a0:27:fe:ec:60:0f:
02:0d:1a:86:ff:a8:9a:23:96:ab:d9:4e:ec:86:03:9f:48:f9:
0e:b4:e9:2b:b7:01:8a:09:4a:96:37:eb:dd:9a:6b:30:39:da:
96:c5:d4:30:1c:ef:53:ee:b3:7a:b4:55:cd:6e:53:56:39:27:
8f:18:77:f8:3f:f5:b6:99:00:09:5a:7b:fb:62:11:13:6f:86:
a1:d3:32:ac:78:ba:30:5c:06:ef:5b:4d:a9:7b:41:6a:26:13:
98:5e:16:02:29:e9:0d:56:1a:b3:74:43:0e:df:21:8b:46:24:
94:15:20:04:68:d2:a5:87:c7:8f:ef:06:e0:d7:c9:0a:80:e1:
86:e7:a2:28:92:df:11:b7:c8:40:73:78:cd:5b:65:ef:89:72:
61:69:72:58:ca:bd:88:f4:a3:82:0b:86:15:9f:c0:ed:da:b4:
5e:a5:f9:63:8a:dc:62:a3:ac:1b:97:69:a5:f3:b1:86:ab:dd:
98:f7:f6:ac:fe:bc:e2:e9:ed:cf:4c:0a:f6:93:0d:a8:57:fa:
63:e1:e6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:32:44 2025 by rpki-client