Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
File: 7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json)
Hash identifier: Kd897+2til2Z1IPlsNkW0P6LPhiVA6TAZjloYwk33Lw=
Subject key identifier: D6:B6:31:1C:0A:A6:B5:E0:59:BE:3F:46:54:44:36:6F:15:C9:FF:CA
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Certificate issuer: /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial: 0198D6CE10AE18DDAB2F0207E0D821F3F7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
Manifest number: 068E
Signing time: Sat 23 Aug 2025 12:01:25 +0000
Manifest this update: Sat 23 Aug 2025 12:01:25 +0000
Manifest next update: Sun 24 Aug 2025 12:01:25 +0000
Files and hashes: 1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: RmkNEeqiRzX6+bNxvCPgr4z+SRtbfHC+zzDBZiaHecQ=)
2: cvihALfmaAmPqfCRAQfCnD556fE.roa (hash: XgTAh5vkPS4VZRIrGpxzNJ/k+9BNaFqmON6ZSIkPh2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:ce:10:ae:18:dd:ab:2f:02:07:e0:d8:21:f3:f7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
Validity
Not Before: Aug 23 12:01:25 2025 GMT
Not After : Aug 24 12:01:25 2025 GMT
Subject: CN=d6b6311c0aa6b5e059be3f465444366f15c9ffca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:05:03:ba:d0:a0:46:8b:da:f4:c8:72:46:2c:
e9:db:cd:f0:37:97:86:bf:8d:7a:0e:bf:2f:5c:b7:
c3:01:8a:55:14:b8:2d:f5:2f:f1:92:21:10:3d:46:
72:ca:bc:6b:e8:e7:ce:37:92:22:44:0b:28:f3:1e:
49:c8:6f:01:66:55:f1:26:d3:de:1e:e4:63:a6:7e:
e9:c5:b8:a6:a3:7c:25:aa:e2:2d:87:f7:2d:7b:53:
ec:bc:21:a8:63:43:42:93:a4:97:33:00:b3:0f:95:
2b:df:80:d5:d6:4f:6c:85:f4:7e:5b:fd:5d:4a:b8:
37:6b:83:4b:07:d4:8d:a0:0b:62:3e:76:a6:07:cc:
5c:48:be:ea:cc:f3:54:b3:27:bf:91:10:2f:74:60:
06:76:86:e9:f9:84:01:7c:3b:9d:ca:8f:98:75:8c:
97:5e:b1:9f:b7:e5:52:34:70:dd:f7:7b:0c:da:8e:
67:64:af:03:33:a7:ab:6c:0b:09:05:be:4c:66:20:
d8:21:62:cb:eb:fb:95:d5:0b:1b:c9:50:3d:f8:c6:
f0:0f:70:52:19:2d:13:61:0d:09:a3:8a:f7:4c:39:
62:97:a2:d8:e6:02:55:54:5f:74:6a:d5:f0:5b:20:
46:25:6f:01:49:de:b4:93:41:b6:35:ae:58:23:cc:
f2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B6:31:1C:0A:A6:B5:E0:59:BE:3F:46:54:44:36:6F:15:C9:FF:CA
X509v3 Authority Key Identifier:
keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:89:b9:0b:60:b7:cb:fb:f3:af:4f:52:93:05:4f:3b:23:b2:
33:2f:f7:c2:db:6b:f9:e9:f0:0a:22:36:87:8b:54:f1:c2:8a:
fe:55:9a:73:9b:a4:2e:e4:c7:4a:f7:37:9f:56:f3:f9:9e:fe:
99:48:68:39:f8:1c:95:5b:3c:eb:dd:f5:3d:61:55:96:45:b8:
57:f6:1c:46:cc:30:45:8d:fa:18:40:f5:66:c0:cb:ae:92:3f:
ce:02:52:c1:21:a4:0e:66:65:72:88:8a:86:b1:ef:2e:80:34:
bc:14:9a:df:6b:3c:07:1a:5e:46:d3:a5:fd:7d:80:fd:32:f0:
b8:8f:cb:43:20:e4:4c:01:99:cd:64:6c:92:9e:83:79:95:b7:
94:79:fa:b5:5f:33:2c:29:3a:0f:82:52:36:e0:f6:63:19:e2:
ce:42:9d:d4:3e:89:69:f1:c4:f4:f8:be:7d:be:8e:6c:d9:90:
f9:bd:74:3e:d3:7d:83:d3:00:46:6d:96:43:e9:50:9f:03:40:
cd:52:69:33:1d:f2:21:a5:ad:6b:0d:9b:19:09:ef:de:5e:df:
6f:cd:cf:32:f0:f4:99:13:ee:cd:6d:73:2e:05:23:74:69:17:
7d:8e:78:2b:53:98:94:30:a1:21:0a:b3:1f:d5:57:7c:72:1e:
4e:fb:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:45 2025 by rpki-client