Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
File: 7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json)
Hash identifier: 5Kxs/dPPt/IfusqmEfn4pVj7EFXncCAwSObzWajt9MQ=
Subject key identifier: 2F:5C:CD:44:3F:D0:25:EF:D9:AD:05:D1:BF:6D:8C:CD:77:01:B2:C2
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 0198D65EFA6AB44188BD6F55C0AF68ED2AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
Manifest number: 0501
Signing time: Sat 23 Aug 2025 10:00:05 +0000
Manifest this update: Sat 23 Aug 2025 10:00:05 +0000
Manifest next update: Sun 24 Aug 2025 10:00:05 +0000
Files and hashes: 1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: 4rKwbDYShkcoTA5WHBYuaCIVzASOBNR4JPDxmrJmdXM=)
2: gWV79z64-K00_T5p42GewWgp3cA.roa (hash: WMmpO9e9AU6ZoJLpGqYgkYyyLRC76igWs/Qlt0mpVE4=)
3: hRbNAGx7LG2xMTgP4Ix7XGLNZow.roa (hash: cOuDxG6cm5XwU2pZ0JZKfoGVa6Tbrkfv+67mL24RJLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5e:fa:6a:b4:41:88:bd:6f:55:c0:af:68:ed:2a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: Aug 23 10:00:05 2025 GMT
Not After : Aug 24 10:00:05 2025 GMT
Subject: CN=2f5ccd443fd025efd9ad05d1bf6d8ccd7701b2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:97:d7:58:03:eb:6b:4f:44:3b:68:8e:d4:
63:2b:f3:a2:d1:2e:c9:8f:72:8e:fd:df:69:aa:e0:
c7:5f:10:21:9e:12:8a:ff:e6:f3:95:2d:06:3d:c2:
b5:23:c1:28:e2:2b:8b:1c:40:a4:51:57:60:ff:c3:
c7:a2:9c:58:1c:19:bc:6b:b0:5f:e5:1b:5b:37:87:
fa:99:37:6a:d0:d7:89:74:40:55:70:be:d8:b2:33:
4d:78:e9:22:1c:5f:da:1b:3d:98:4d:d2:98:4c:43:
aa:54:0d:62:53:22:46:fe:60:a8:bd:93:6a:1d:28:
dd:a9:f6:77:de:9c:f0:a3:58:be:c2:b0:db:30:4c:
db:de:6d:80:cd:a5:28:88:ee:9c:82:31:03:04:bc:
46:0a:d3:6d:db:d8:b7:74:3f:dd:26:d7:13:43:a3:
95:e8:05:03:38:0e:39:45:25:ba:48:65:54:5b:c4:
0f:b0:35:5c:41:5d:6b:d0:c4:44:54:28:65:86:74:
89:68:c2:09:74:35:3e:84:5d:f0:b3:b7:7f:b0:6a:
e2:9f:ee:f3:f7:c2:ba:43:62:59:33:d5:52:79:c0:
99:b6:40:d6:0f:3c:b8:29:f1:89:cf:81:49:99:88:
c2:80:4c:1d:dd:8a:b8:ea:cc:96:5b:ec:1a:ae:46:
b6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5C:CD:44:3F:D0:25:EF:D9:AD:05:D1:BF:6D:8C:CD:77:01:B2:C2
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:2c:f4:2e:3c:79:7a:af:3e:be:3f:7e:ea:72:22:42:cd:6f:
48:27:19:4c:2a:bf:94:13:47:c7:60:d5:20:2b:82:80:6a:89:
0e:11:02:b8:99:13:54:f8:e1:53:85:f1:ce:bd:8a:0b:16:5d:
25:e8:d1:d9:bf:66:24:b4:3b:70:70:99:33:04:e6:7e:a8:46:
a9:9f:ce:1d:c0:f2:36:92:20:cd:de:12:e3:c8:05:70:9e:e8:
80:63:d6:df:96:01:92:db:0c:9a:64:e5:47:be:20:0e:56:d1:
fd:d4:72:90:b3:27:13:6c:15:aa:c1:92:26:d5:e3:d6:61:a5:
e2:a3:cf:a0:34:45:16:bf:47:61:fb:94:d7:05:fa:8a:9e:d0:
ff:86:ba:57:54:ba:10:c3:47:92:35:6a:e3:3b:54:21:83:c4:
d9:3e:cb:c7:89:53:48:62:12:7e:38:78:8c:a8:f6:4d:04:98:
2b:c9:e1:9c:e7:e7:57:e7:6c:f5:40:97:7b:0a:36:9a:15:f1:
09:8a:59:d9:eb:6a:ab:ac:8a:5c:24:bc:ab:ff:5e:83:64:24:
09:ac:e2:a4:29:a8:38:4c:8d:a9:b5:45:33:29:e6:24:3d:0a:
72:e7:01:2e:76:3f:87:5a:d4:45:52:14:58:79:91:06:1f:5c:
97:18:59:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:07:20 2025 by rpki-client