Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
File: 7LLMRABmS6sLCRvDmYwN4f73FZs.mft (raw, json)
Hash identifier: 0aUajfLQlvMbqzJwYiL8D57iws/jmJRrghyUhkQCGQ8=
Subject key identifier: 82:02:16:FF:1C:04:C6:AC:C6:A3:26:3F:37:4E:11:1A:3A:A7:EE:E5
Authority key identifier: EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
Certificate issuer: /CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Certificate serial: 0198D4745119CEFC391DC5BF4410BF0B5250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
Manifest number: 1011
Signing time: Sat 23 Aug 2025 01:04:09 +0000
Manifest this update: Sat 23 Aug 2025 01:04:09 +0000
Manifest next update: Sun 24 Aug 2025 01:04:09 +0000
Files and hashes: 1: 7LLMRABmS6sLCRvDmYwN4f73FZs.crl (hash: hp/xyZnMllJA6fFcy44oflgdW/MN0815MZkNKfe+IxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:51:19:ce:fc:39:1d:c5:bf:44:10:bf:0b:52:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb2cc4400664bab0b091bc3998c0de1fef7159b
Validity
Not Before: Aug 23 01:04:09 2025 GMT
Not After : Aug 24 01:04:09 2025 GMT
Subject: CN=820216ff1c04c6acc6a3263f374e111a3aa7eee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:71:4e:87:ac:f1:c1:b0:0a:28:7d:cf:be:fe:
d0:47:a2:e0:82:0e:cb:2d:2b:b6:ac:48:d1:7d:8d:
b9:eb:9b:94:6f:7f:98:f6:9d:e6:4d:10:a0:c1:93:
ee:82:7b:92:6a:0b:4a:03:0a:c7:3f:e3:55:50:06:
6e:e7:3e:3c:0b:55:c6:1b:54:95:73:c0:a8:05:82:
1b:c7:a5:d2:87:11:6d:ed:83:70:10:de:76:54:21:
5c:32:07:39:ac:89:66:6b:49:a8:28:fa:5c:19:b4:
46:27:40:4c:d9:d0:b8:a3:9f:1d:29:55:9a:e4:fa:
43:ce:5e:3f:5b:a9:3c:c5:a9:eb:e8:ae:91:d9:cf:
79:ed:87:d1:11:7d:31:ac:12:e4:e7:74:f5:1d:e0:
c1:56:46:bb:28:03:47:f5:9d:66:b3:de:6e:f4:c2:
42:7c:96:53:c1:73:a7:2e:c7:48:4f:e5:b6:f4:be:
ae:93:1d:4f:a5:60:4b:c6:64:02:5e:9e:52:96:c8:
03:55:5a:28:56:e5:ed:ed:9a:6f:1d:ab:11:bc:b4:
60:cf:52:48:db:3b:2f:2b:15:cc:79:fc:f1:f0:be:
6c:47:71:57:17:74:c2:d7:52:20:2f:59:e9:d1:32:
ef:dd:a1:2a:65:dd:79:65:30:84:a8:a7:a4:9d:a8:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:02:16:FF:1C:04:C6:AC:C6:A3:26:3F:37:4E:11:1A:3A:A7:EE:E5
X509v3 Authority Key Identifier:
keyid:EC:B2:CC:44:00:66:4B:AB:0B:09:1B:C3:99:8C:0D:E1:FE:F7:15:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LLMRABmS6sLCRvDmYwN4f73FZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ccc385-20e1-4c68-9ba1-89846ddd941c/1/7LLMRABmS6sLCRvDmYwN4f73FZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:52:89:ab:a0:a3:00:35:b9:69:6d:44:a0:78:de:a7:11:85:
50:59:60:7a:96:b8:5d:56:bd:3f:bf:c7:34:1e:a8:f1:bb:53:
d5:ae:0d:88:67:32:ca:80:c7:30:a6:e3:5a:d6:e4:a5:dc:4b:
50:24:c0:4d:38:7e:b1:5c:47:b2:77:ba:83:27:51:70:22:99:
07:89:ad:23:a7:22:54:3e:81:ef:42:fb:ee:15:12:8a:86:25:
f5:6f:91:8a:73:af:94:5e:1c:6e:f8:e2:e2:67:1b:5d:cd:39:
14:e3:53:e5:8b:af:4c:bc:71:4d:e7:48:12:b5:3d:da:97:1c:
1c:af:3b:15:3f:68:7f:bb:ea:dd:20:0f:1b:56:ac:5f:c9:f6:
ec:dd:45:dd:a4:e0:40:af:4d:c0:9b:0b:45:b0:a4:36:c3:7e:
9a:91:5d:42:95:50:76:de:95:a9:92:f4:0e:2f:df:61:37:a9:
e8:43:a2:d4:e6:1b:89:3e:91:0a:12:1e:d5:dc:de:3b:b2:9e:
2a:1b:d7:37:e1:70:0a:6a:42:33:df:75:60:71:2a:a9:ac:70:
a0:65:21:e0:53:b0:80:00:d1:63:f1:fa:d6:16:ca:85:0e:8f:
5a:66:35:73:28:1b:35:aa:93:52:e6:b5:08:c0:08:a3:65:85:
04:69:de:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:26 2025 by rpki-client