Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
File: 7HDF2GfeIA8BSGsaiAqUuEldciA.mft (raw, json)
Hash identifier: XmMazxRf+wScygmyA4XN4Sah1GE+bWTuGocIVaZyQHs=
Subject key identifier: 0B:AD:FA:4F:01:DD:C5:25:51:CE:9E:13:F7:9C:F0:39:1C:4D:50:65
Authority key identifier: EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
Certificate issuer: /CN=ec70c5d867de200f01486b1a880a94b8495d7220
Certificate serial: 0198D6613D29B333E88FC719C52C5012DA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
Manifest number: 0F0C
Signing time: Sat 23 Aug 2025 10:02:33 +0000
Manifest this update: Sat 23 Aug 2025 10:02:33 +0000
Manifest next update: Sun 24 Aug 2025 10:02:33 +0000
Files and hashes: 1: 7HDF2GfeIA8BSGsaiAqUuEldciA.crl (hash: 5k/Gflam53gqCqbu8XkL/17L+wy1ZUeRZIE/pC0YmYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:3d:29:b3:33:e8:8f:c7:19:c5:2c:50:12:da:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec70c5d867de200f01486b1a880a94b8495d7220
Validity
Not Before: Aug 23 10:02:33 2025 GMT
Not After : Aug 24 10:02:33 2025 GMT
Subject: CN=0badfa4f01ddc52551ce9e13f79cf0391c4d5065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a7:00:4e:c8:6d:6d:6f:fd:9e:47:b9:e8:3b:
d8:5d:2d:ad:71:c9:cc:dc:eb:ef:6b:95:c9:55:4c:
9e:35:1f:c8:05:b4:74:f0:95:24:01:bc:c3:9f:f3:
20:7b:d8:75:c3:be:63:25:d6:2c:7e:4f:66:59:be:
81:e2:37:91:dc:c3:52:9c:32:62:98:fa:45:d6:d1:
eb:a7:30:93:ee:1c:7b:2f:20:43:fb:4c:33:45:e5:
ad:cd:d1:ec:51:e2:d6:0a:f3:cd:97:2e:28:46:b0:
b8:ac:cf:eb:1f:f7:0a:44:ed:63:74:f1:6e:f7:58:
01:aa:58:8d:9b:1d:6b:41:7e:b9:e6:12:00:23:7c:
3d:24:bd:b1:86:f7:0b:74:db:b4:74:30:67:51:8d:
71:0b:0a:8d:b0:8b:f7:02:5f:ec:0f:db:cc:b9:d3:
c6:6d:87:73:92:6d:5d:ac:b7:70:1b:3c:1b:cc:13:
68:d6:24:0c:c4:a2:1e:14:21:76:2f:a0:ba:84:92:
ac:da:ed:62:fe:d3:cb:c5:f9:3e:93:d3:81:3e:ff:
a8:cb:e8:17:01:0d:d4:24:79:1b:0e:ba:5c:f1:5a:
45:5c:af:8f:35:17:fd:93:f6:4e:4d:ff:9b:7a:0e:
1c:f7:61:9a:ad:23:ab:ae:b8:3c:03:b3:b5:7a:34:
34:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AD:FA:4F:01:DD:C5:25:51:CE:9E:13:F7:9C:F0:39:1C:4D:50:65
X509v3 Authority Key Identifier:
keyid:EC:70:C5:D8:67:DE:20:0F:01:48:6B:1A:88:0A:94:B8:49:5D:72:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HDF2GfeIA8BSGsaiAqUuEldciA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6ef54c-b034-49e6-8da4-c5ad153c2d46/1/7HDF2GfeIA8BSGsaiAqUuEldciA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:71:5c:21:47:a4:5b:3b:d4:85:bf:7f:98:82:33:77:62:26:
51:c4:60:9c:c4:c2:f0:db:55:86:15:f3:7d:06:d2:8c:fd:f9:
11:e0:2b:23:29:cd:ef:e0:16:f9:be:18:b7:80:62:20:58:36:
1c:b5:16:0a:c8:c0:10:40:28:76:7d:29:c6:db:19:1e:66:bb:
6e:be:e4:fb:ec:69:9e:16:8d:eb:49:62:cb:7e:e8:a2:80:c5:
73:b1:5f:76:d8:f3:52:a6:b6:e4:c2:cb:ed:61:d5:41:9a:13:
d4:1b:79:0f:6b:c5:84:23:75:89:e3:8e:2b:32:be:2a:a4:b5:
1e:78:bf:f6:59:cb:4d:bb:cf:a2:62:21:8a:70:de:a6:fd:9e:
ce:c5:5b:4c:69:69:33:2d:65:20:e3:74:dc:e8:b1:bc:c9:a7:
f7:47:7e:aa:b9:64:ef:7f:dc:b6:ed:c3:39:ab:08:00:d5:ba:
e3:25:c8:07:1c:dc:70:dd:d2:8f:f7:f1:20:44:ed:d1:c4:e7:
ec:8e:f1:10:3c:89:a7:02:c6:cf:0d:50:7b:89:86:ad:df:29:
81:55:03:3c:90:a4:57:f6:22:28:f2:32:59:43:d4:d8:61:3e:
c4:ed:09:8a:a7:d8:da:45:01:a3:af:81:c2:98:24:69:84:de:
83:74:f4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:30:00 2025 by rpki-client