Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File: p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier: F/eIuufcxqiEaMdcDLU0d3v7PsBA9ieYNrbQbSa7f7k=
Subject key identifier: FC:64:5B:DF:B6:77:0C:B2:13:43:1B:69:1F:B2:7B:D5:1C:AC:73:D6
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer: /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial: 0198D47426B18D0FD47B764C48571D71A61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number: 135A
Signing time: Sat 23 Aug 2025 01:03:58 +0000
Manifest this update: Sat 23 Aug 2025 01:03:58 +0000
Manifest next update: Sun 24 Aug 2025 01:03:58 +0000
Files and hashes: 1: N0eHqNrggmbXdN8YP7o5Fb0Yns0.roa (hash: qT9/mEc5C1UH5p/xUpYvOvJn3BjOEx+x0C4t/XVyfCg=)
2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: fY3IibMfcg9srfiSHlH1h3B8kLTWyLrSqkd06hU4GZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:26:b1:8d:0f:d4:7b:76:4c:48:57:1d:71:a6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Validity
Not Before: Aug 23 01:03:58 2025 GMT
Not After : Aug 24 01:03:58 2025 GMT
Subject: CN=fc645bdfb6770cb213431b691fb27bd51cac73d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b5:ad:7f:d5:89:df:ed:2b:ef:8b:c4:2e:62:
6d:c5:89:f2:01:d7:35:c0:7e:be:ed:f8:62:61:09:
b7:6c:06:92:b3:c6:7f:2f:d6:1c:c1:ff:34:21:b5:
e0:e0:03:89:57:e7:74:1c:d7:ff:3b:91:4a:93:76:
6c:4c:03:9c:a2:62:5b:6b:8e:13:22:ea:7b:68:b9:
de:d9:c0:7d:23:65:0f:0b:a5:83:04:61:a0:07:c9:
c7:c8:6b:61:94:0d:0f:5f:fa:6c:50:21:54:f9:75:
83:b1:77:e7:d2:31:f2:c1:bd:47:e1:e9:31:f7:f5:
21:96:90:98:a8:4d:ee:cc:83:7d:2f:bb:20:1f:b1:
af:d6:b3:e7:cd:36:8d:13:26:1c:58:92:8a:60:52:
87:0e:c7:af:53:82:02:fd:0d:1f:64:ec:58:0a:a6:
e7:c6:e0:06:58:3b:10:10:c9:9e:df:eb:52:58:07:
39:2f:3c:bf:03:b7:92:1c:00:86:87:15:fe:90:6d:
44:7f:ab:f5:80:ae:cd:6b:81:d9:c7:64:4f:52:e7:
f2:c2:10:a2:e8:02:02:11:b4:e3:db:82:3b:48:fb:
58:f5:5f:04:b7:1d:1e:29:bf:37:09:03:ba:6f:5b:
ab:f5:a4:a7:3c:e8:aa:f8:f8:8a:dd:3f:99:f3:9c:
09:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:64:5B:DF:B6:77:0C:B2:13:43:1B:69:1F:B2:7B:D5:1C:AC:73:D6
X509v3 Authority Key Identifier:
keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:99:b7:cf:71:1b:9f:99:bb:da:69:b7:bf:ec:d2:97:09:93:
76:22:d2:0c:68:b9:80:d4:d2:25:6d:38:17:99:06:ad:02:e1:
b7:d0:c3:be:83:b1:41:95:24:80:7d:4c:69:09:df:e9:21:5e:
99:04:1a:91:8a:d3:1b:35:c3:90:13:a0:76:cf:b7:09:7f:55:
9b:c9:7d:9c:d9:0e:4f:24:4a:69:c7:fa:82:00:78:e9:67:ed:
1f:5c:f7:78:05:e0:bb:23:8b:c5:d9:8d:3c:82:1c:05:ae:f0:
2c:76:e4:34:81:bf:1f:36:bb:43:40:cc:72:52:eb:1d:c5:c5:
32:10:35:11:eb:ee:75:a6:ba:ed:bd:0d:b3:93:73:cf:52:2c:
a9:98:d8:7d:00:3c:26:ba:ae:d6:27:08:05:e5:1a:6f:e5:e0:
6f:3f:b3:17:f8:69:31:da:80:6e:d8:f0:69:aa:23:ff:dd:c0:
2d:ac:0a:6f:2f:17:46:f3:6b:da:d6:ac:6f:3e:a3:f4:53:c5:
03:db:b7:19:eb:cb:94:1f:67:d5:5a:4f:19:70:38:38:cf:a8:
9a:99:96:04:56:38:71:18:36:b7:d8:07:de:ff:b5:ed:c2:8b:
55:d7:6b:6d:6a:07:0b:d4:8d:79:a0:c1:8f:bd:d8:00:90:8d:
76:31:da:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:17 2025 by rpki-client