Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: o48HUIqEX12VYFDW6lXsSpLN7qEig4LjUA4Vy+70310=
Subject key identifier: 54:A4:84:F9:E6:36:00:B0:BB:6E:3E:91:51:0F:65:B8:20:03:B7:06
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 019832A6F0ABE5E319582F9F402856D942D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 04AB
Signing time: Tue 22 Jul 2025 15:00:58 +0000
Manifest this update: Tue 22 Jul 2025 15:00:58 +0000
Manifest next update: Wed 23 Jul 2025 15:00:58 +0000
Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: T4kTbgb5gLbdQOCDKwl6aShBoVgjF8D2nVOaCpkGDV4=)
2: TaWWlaQdJDy__bPOa0_wHi28kgw.roa (hash: GmxVMkOCc40Mr9ux5EGho294LI1OMaDC/pTrag518As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:a6:f0:ab:e5:e3:19:58:2f:9f:40:28:56:d9:42:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Jul 22 15:00:58 2025 GMT
Not After : Jul 23 15:00:58 2025 GMT
Subject: CN=54a484f9e63600b0bb6e3e91510f65b82003b706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:06:b9:d8:31:51:fe:1b:28:50:1d:38:d6:
1a:ef:36:2b:11:a9:4b:ca:50:fd:3e:37:5e:3c:05:
00:36:45:1d:fd:c9:11:48:cb:f4:73:c2:75:75:30:
3b:5c:96:cc:03:d2:1f:10:53:04:40:b0:09:11:7e:
fc:b5:7e:71:59:8c:0b:9b:bd:72:97:96:d0:89:bf:
3e:41:79:4c:3b:76:4f:ac:20:e3:23:26:fd:76:30:
1e:52:14:f7:64:ac:0a:24:b1:68:d2:04:e6:7a:00:
16:e5:38:87:da:ce:aa:c0:23:54:d8:e1:f5:8a:79:
8f:9d:44:46:85:b3:d7:e8:53:16:07:1f:a4:49:33:
71:01:56:f3:ee:84:72:6a:63:d7:2d:5f:fa:57:29:
f6:19:a1:99:58:06:4e:41:a0:c6:03:8b:ca:a0:04:
5d:4e:91:d7:2a:85:78:1c:32:97:8e:09:56:74:8c:
7a:ff:04:10:65:6a:35:8c:92:b5:c6:8d:31:c0:8a:
43:eb:10:b6:27:31:1a:cb:d5:2b:4a:19:d8:f0:96:
73:83:c4:7e:f0:29:b8:8a:44:d8:ec:bf:82:e6:a2:
0c:2f:66:a5:3e:9a:62:93:d2:d8:ae:78:81:19:84:
a0:ec:24:cb:f8:23:d6:5a:fa:ee:b4:f0:92:d6:aa:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A4:84:F9:E6:36:00:B0:BB:6E:3E:91:51:0F:65:B8:20:03:B7:06
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:69:76:c6:b8:e9:9f:c6:9a:30:4f:d1:df:00:8a:16:81:8d:
ae:f8:f2:87:da:3f:43:54:03:5d:05:e0:9a:e8:1f:67:2f:23:
51:22:c8:20:65:9e:0c:e9:9d:70:ec:cb:71:0f:11:83:bf:b7:
8e:0c:1d:cf:e8:fd:b5:ca:8a:9a:71:e5:73:36:9a:90:d2:70:
71:0d:d3:97:b3:e5:c8:b2:ab:dd:36:bc:ab:5b:3f:8b:55:3c:
14:43:a1:e5:46:ce:a7:9d:37:90:30:e5:0c:e3:dc:5b:84:f3:
09:8a:e4:aa:54:59:84:12:72:09:6b:a9:85:1d:34:07:72:b9:
d5:a2:6d:83:62:2e:a9:90:78:fe:a9:e3:b9:1f:03:6d:43:22:
cf:7a:37:5b:38:79:44:da:2f:5a:d7:52:66:d3:6b:92:ef:7b:
a5:50:83:b6:17:82:83:22:86:0c:19:29:dd:cd:a0:46:1c:17:
a8:a7:8c:53:f4:1b:52:fa:4e:47:41:ad:08:ce:f8:2d:27:f1:
54:b8:26:d1:40:7a:70:af:b8:3a:21:40:78:a6:b3:78:1e:40:
a3:ac:9c:0b:0f:e4:f1:07:27:d5:cd:23:22:8c:6b:80:6f:c1:
5a:2b:e5:64:25:d4:66:b8:71:4c:e1:a5:73:c3:e6:81:eb:cc:
10:b9:44:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:33:03 2025 by rpki-client