Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
File: 7PsAOB5zPcbkHQbbnsjd0xEoG90.mft (raw, json)
Hash identifier: hTymMbxvgmrtMZNWZbeK8sP8jWAulyTyg7Hatq3uWqE=
Subject key identifier: 43:F4:4A:31:AD:7E:E3:D0:40:41:D9:5D:A1:D4:CE:F3:66:67:2F:88
Authority key identifier: EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
Certificate issuer: /CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Certificate serial: 0198D54EC1F050F855883A8F7513B4E83BC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
Manifest number: 1069
Signing time: Sat 23 Aug 2025 05:02:45 +0000
Manifest this update: Sat 23 Aug 2025 05:02:45 +0000
Manifest next update: Sun 24 Aug 2025 05:02:45 +0000
Files and hashes: 1: 7PsAOB5zPcbkHQbbnsjd0xEoG90.crl (hash: kBYJzkAJTgD1QaeiAvloyUjCCKFa3YNJk+aych7BsKI=)
2: C24hBvMCpb8Fi_DpEmPZdmz8EJo.roa (hash: UzgGmOtFh4KbFiZPVXPVFFT0H/bS5Q5Sw4mu6gaXkiU=)
3: tm-3rVf0ehgs47GKD5YmZeDML_k.roa (hash: aedX2HvF/sm/iXzrh2IiIlyk4l283LOsdtZCcAa/KWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:c1:f0:50:f8:55:88:3a:8f:75:13:b4:e8:3b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfb00381e733dc6e41d06db9ec8ddd311281bdd
Validity
Not Before: Aug 23 05:02:45 2025 GMT
Not After : Aug 24 05:02:45 2025 GMT
Subject: CN=43f44a31ad7ee3d04041d95da1d4cef366672f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8d:d4:8a:11:84:80:6d:d5:82:42:dc:10:30:
aa:03:32:46:8f:f0:ab:bd:fc:fe:b3:50:c7:eb:2f:
d4:12:cf:1f:5a:cd:3b:4f:2a:bb:85:94:d6:04:28:
3b:a8:a6:04:5e:2f:10:66:86:af:fe:f9:20:51:1b:
df:0e:26:7c:a0:06:e1:1b:9a:ee:c2:2e:89:fe:18:
fb:91:07:fe:2e:d9:ef:ea:1d:fa:c2:c0:c2:07:e6:
0c:08:fb:dd:4d:60:6a:c7:1d:12:5e:36:33:fb:fb:
8c:19:33:f4:ec:83:9e:c2:64:08:c2:68:7e:9a:62:
e5:6f:49:8a:2e:67:f0:be:d9:8f:ee:a0:a7:a4:12:
c9:6d:bf:c1:e4:14:d9:d2:86:b6:d9:ee:e1:0a:85:
78:18:49:39:4e:08:3d:9e:8e:ff:31:d2:f3:1a:80:
a2:8c:78:8e:f4:4d:b2:47:37:50:12:0c:ce:8d:46:
b8:41:05:84:74:d5:d5:a1:ea:ce:ef:eb:77:4d:6f:
2e:7b:ca:f1:97:54:32:24:78:91:bc:18:60:40:72:
f6:fd:08:fd:fe:7a:a9:ee:fb:0b:d5:e1:b1:34:86:
c3:c7:75:03:10:29:93:80:c7:80:27:b4:53:9a:7b:
34:44:c5:df:27:e7:e5:78:f5:36:06:d5:d5:46:cf:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F4:4A:31:AD:7E:E3:D0:40:41:D9:5D:A1:D4:CE:F3:66:67:2F:88
X509v3 Authority Key Identifier:
keyid:EC:FB:00:38:1E:73:3D:C6:E4:1D:06:DB:9E:C8:DD:D3:11:28:1B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PsAOB5zPcbkHQbbnsjd0xEoG90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/7PsAOB5zPcbkHQbbnsjd0xEoG90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:92:fe:53:86:a1:c0:2f:c7:e5:f1:ee:0e:13:53:00:03:58:
5f:ea:5d:92:c7:3c:50:6e:ff:9e:8c:68:78:ba:99:f4:ab:6b:
99:88:fc:e6:ea:2f:8b:15:be:d7:77:21:b5:3b:18:fd:18:d0:
2f:e5:95:4e:b8:98:08:3f:db:11:d0:bb:17:1b:96:32:d5:4e:
83:bd:e4:58:55:20:56:a0:12:17:3c:79:61:81:2a:e3:2a:56:
f1:c8:17:e3:5f:0e:48:a2:cb:a8:2f:04:b3:46:57:14:20:c7:
55:44:78:0f:79:86:ad:80:66:d9:75:13:89:29:5b:bb:b2:f6:
b3:92:f6:c8:f9:1d:cc:f6:bd:c0:f5:f6:2e:00:35:55:a1:1a:
1d:aa:d7:72:06:1c:73:14:98:de:fe:f3:06:e5:ff:c6:3c:18:
f6:bb:e5:a7:01:1c:bf:9e:b3:b4:7a:4e:c8:fa:0c:a7:76:26:
bf:ba:7a:59:81:07:dd:08:e1:d3:92:19:3f:61:d4:f4:ce:c8:
7a:f2:d4:17:c4:14:39:fe:8f:9d:8f:ce:30:b6:41:21:e6:d8:
00:ad:34:43:a9:60:c0:33:d7:11:68:1c:cc:4d:69:b5:0e:91:
2b:ef:61:47:bd:db:f3:4c:7d:99:f7:cc:ec:32:20:ae:5d:91:
bb:61:f9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:48 2025 by rpki-client