Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
File: C7rRuSXg5WPbhdQdJwcF1xhApYg.mft (raw, json)
Hash identifier: u8EUPlyJUMx2hdNsP5WiVRD+rDkLr/VP72PuLTL3qIA=
Subject key identifier: 8A:3E:FB:F1:97:F2:2F:A8:66:C1:15:13:F2:1A:BF:42:61:29:78:30
Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588
Certificate serial: 01984B5405A7582B03456296E88EBF877702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
Manifest number: 0D89
Signing time: Sun 27 Jul 2025 10:00:54 +0000
Manifest this update: Sun 27 Jul 2025 10:00:54 +0000
Manifest next update: Mon 28 Jul 2025 10:00:54 +0000
Files and hashes: 1: C7rRuSXg5WPbhdQdJwcF1xhApYg.crl (hash: THHSap+IDrk7xH/CZJAkVrONXCY7SfadeHtwdLjLYgA=)
2: rvyb7Kg7VHmO9XnpFHi1qowlCe4.roa (hash: 7bO/x3Y8T7RLGoQjkYeWq/YNgP20ufR1tvp53Z1/QaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:05:a7:58:2b:03:45:62:96:e8:8e:bf:87:77:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588
Validity
Not Before: Jul 27 10:00:54 2025 GMT
Not After : Jul 28 10:00:54 2025 GMT
Subject: CN=8a3efbf197f22fa866c11513f21abf4261297830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:05:81:3e:40:c2:85:61:7c:dd:ff:64:f8:69:
c0:63:92:d6:29:17:4b:f3:bf:db:a3:18:9d:c1:f7:
a2:39:cc:23:b5:f0:b1:33:85:4a:91:08:f3:5b:63:
b5:3f:b9:9c:df:2f:22:7d:39:c9:08:66:09:7e:ce:
01:32:7a:ab:10:a6:17:26:49:15:8b:e8:e5:cc:85:
06:58:9a:a7:66:3e:54:34:25:b8:f3:f3:ed:ea:cb:
0d:5b:61:7f:45:48:30:86:3f:cc:9c:ea:03:67:7c:
c4:68:53:cc:59:56:8d:05:f5:16:27:f5:0c:86:4b:
5c:72:7d:11:b5:3d:52:e2:47:26:d3:3d:b1:e4:95:
76:6a:b3:4c:46:86:c9:3d:a2:2a:a0:ad:a3:b0:98:
88:95:82:bc:07:89:1a:9a:47:5d:3f:b5:7d:20:6a:
6c:65:9e:27:69:47:3d:59:42:41:ff:12:69:6f:b4:
ff:df:be:a4:a4:cc:06:f0:c0:45:f2:1b:9e:41:d8:
1b:67:16:db:52:d6:37:d4:d0:3f:59:e2:69:92:43:
c0:ca:41:10:28:4b:77:2a:ae:91:8a:91:f8:c7:14:
b9:1a:fb:7d:c9:0b:4b:76:05:82:20:a5:4b:84:f8:
69:84:ca:aa:4f:ae:93:26:a8:83:e8:c4:31:7b:ff:
8b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3E:FB:F1:97:F2:2F:A8:66:C1:15:13:F2:1A:BF:42:61:29:78:30
X509v3 Authority Key Identifier:
keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:35:c0:c1:7d:19:3c:63:ff:4c:9b:a2:26:68:91:cc:1c:93:
7e:08:15:c6:5f:85:4e:1b:82:3a:78:3b:44:51:e3:0a:70:b5:
f1:14:3c:3a:ea:a0:dd:64:4d:a9:b9:3b:82:ed:fa:0f:ee:6a:
9a:1a:7a:a3:68:67:03:af:47:33:50:40:2a:36:ae:76:d7:65:
4d:6e:c1:a8:82:64:9e:19:ec:67:56:51:e9:1b:b5:d5:91:bc:
c6:74:12:76:7c:2c:ee:f2:f1:e7:bb:11:7c:3b:78:91:b2:cc:
43:89:9f:e1:2f:42:31:7e:68:d6:b1:e4:48:2d:31:17:0b:7f:
84:71:d0:df:71:0a:d9:c6:7c:5c:9f:e2:5c:13:bd:f7:28:91:
5c:69:bf:b3:b6:ef:2b:22:a1:b9:0b:68:1b:1f:99:f6:22:f8:
a1:e0:72:7a:67:ce:5a:52:69:e9:2f:2d:96:aa:b4:ba:b0:7b:
37:a8:c1:05:4a:f2:7c:4f:4b:63:50:18:b4:67:e1:13:0f:f1:
73:de:e7:78:57:b5:56:e2:cb:ba:21:90:d2:99:0a:de:95:77:
67:a4:d4:46:b5:30:c3:7a:b3:da:55:7e:ce:cd:0f:98:27:10:
97:57:49:40:19:61:03:e4:0a:77:af:32:09:48:a6:78:18:a7:
9a:53:e3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:17:24 2025 by rpki-client