Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
File: 7FraDckAoTyDtwrD9Yf7jC4d8DA.mft (raw, json)
Hash identifier: rlvMvhTllLzP1w/+cXyX6YToCKKgPSOTz3PYJBUMxtY=
Subject key identifier: 5C:B2:32:52:97:3A:62:D4:FE:30:DC:52:99:88:1E:E1:63:25:9E:FB
Authority key identifier: EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
Certificate issuer: /CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Certificate serial: 0198D4A7F1CE19CDC49FC60C71F320C8FEE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
Manifest number: 1654
Signing time: Sat 23 Aug 2025 02:00:32 +0000
Manifest this update: Sat 23 Aug 2025 02:00:32 +0000
Manifest next update: Sun 24 Aug 2025 02:00:32 +0000
Files and hashes: 1: 7FraDckAoTyDtwrD9Yf7jC4d8DA.crl (hash: IXaWqxk3CesWbHZM6MV4qjwe2402ZG3FInHlBzOnNhU=)
2: RH-c_C366T2N_z1aBpgE1Ll4n5E.roa (hash: hwd4T2rxr91cL7njvOW+DLOJ5xoMkW8XsS2mxk5ZIks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:f1:ce:19:cd:c4:9f:c6:0c:71:f3:20:c8:fe:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Validity
Not Before: Aug 23 02:00:32 2025 GMT
Not After : Aug 24 02:00:32 2025 GMT
Subject: CN=5cb23252973a62d4fe30dc5299881ee163259efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:04:8c:ae:c6:84:6a:05:48:54:f2:83:dd:d1:
3e:7d:33:b7:08:8d:42:96:80:d7:01:be:dc:08:91:
b2:a2:d5:23:58:05:56:e3:e8:ad:c2:42:6c:84:53:
66:71:2f:72:c9:21:a6:fd:fd:e1:61:2e:28:89:61:
7c:f2:44:02:ab:e8:59:32:28:d4:67:fc:bf:5c:54:
c6:f1:ac:08:17:5b:ad:6d:aa:33:c3:1b:d3:da:76:
35:64:39:3e:78:64:d2:c7:26:2c:58:5b:73:4c:27:
79:f7:6f:c5:1e:8f:01:a7:54:0f:31:a9:75:84:9c:
d7:d7:19:0b:92:86:42:13:42:35:c5:8c:52:b6:8f:
43:cb:e7:86:a5:ec:a5:64:e9:a4:cd:27:67:29:d8:
a8:93:66:d9:78:4d:65:12:ec:d8:1d:12:5e:15:74:
2a:da:be:11:f9:3c:02:60:45:7b:8c:48:da:c5:92:
30:61:a1:e8:19:98:da:af:1b:a0:86:41:f7:c2:3b:
83:95:93:ff:ea:44:ca:8a:a3:0e:ff:4d:a4:67:9a:
38:90:ed:1f:56:72:40:7b:19:56:99:f6:e4:9e:e7:
61:1d:fe:0e:7a:4f:12:96:84:4f:be:c1:ae:d1:3c:
af:fe:43:0c:01:c2:62:35:1c:83:1c:95:43:74:d4:
bf:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B2:32:52:97:3A:62:D4:FE:30:DC:52:99:88:1E:E1:63:25:9E:FB
X509v3 Authority Key Identifier:
keyid:EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:84:c1:8f:0b:b3:6d:bf:20:3e:39:b9:fe:67:25:b4:35:cb:
2f:5a:51:1b:02:ac:8b:a9:35:79:26:35:c1:af:ae:06:31:eb:
93:02:b2:fc:e7:b3:78:8c:8c:05:9d:f4:1b:8c:4c:c0:30:69:
29:7e:85:a6:59:54:e0:67:f8:05:85:85:e1:c2:ee:dd:02:ef:
28:a3:37:00:cb:c1:75:ab:4c:77:0e:a5:97:c8:6e:8e:70:fa:
70:3a:1b:77:93:9c:58:51:02:33:18:4a:6a:00:3b:97:18:af:
ba:fc:44:f0:3f:5c:43:ca:6b:4f:48:f1:94:0c:c7:e8:0d:33:
71:4f:91:db:d2:90:42:17:a4:94:f0:95:cb:76:cc:0a:3a:a3:
0e:e0:f1:55:64:e4:4f:c9:34:e2:89:33:1c:59:5b:e7:9e:f3:
09:ee:3c:1c:3f:7e:34:c2:1d:a5:2c:7b:fc:d8:d9:03:54:97:
ae:d0:ea:d9:7e:5a:d7:d1:3c:09:de:bd:d5:6d:de:94:f5:d4:
99:59:b8:2b:d2:d6:99:bb:fb:ba:55:67:4b:a1:72:27:eb:5b:
4b:a0:d2:d8:57:cb:3f:f8:86:6e:e8:79:62:fd:bc:5a:04:a7:
04:a9:87:a0:79:d6:96:be:11:bb:9a:4e:be:2c:7e:97:42:f1:
71:bf:78:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:22:51 2025 by rpki-client