Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: Mn0hlcsbOAhirr+HccCeCosIBNvuiW2f1ivyB10PIlE=
Subject key identifier: B2:DF:AF:E4:AC:D4:61:32:22:78:25:AC:7E:F7:B3:42:92:C9:81:68
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 01984A0A6B0536019DB08E5C77B894F18883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 13CB
Signing time: Sun 27 Jul 2025 04:00:53 +0000
Manifest this update: Sun 27 Jul 2025 04:00:53 +0000
Manifest next update: Mon 28 Jul 2025 04:00:53 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: HfXeBYRYvO6lCvF4nB4zKCXYLOTd1wS16DAhoaU3FKQ=)
2: Fy9dAaWIGt3DDwam3RK8I1POnD0.roa (hash: mN5AYrqpl0VfVq4+AtyPnI39fV2fuW1S27zeiDc2nYY=)
3: iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa (hash: iCHtjZhnNNI84krnhRcpRLsDA1PIVF/eAzRpZb4b+rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:6b:05:36:01:9d:b0:8e:5c:77:b8:94:f1:88:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Jul 27 04:00:53 2025 GMT
Not After : Jul 28 04:00:53 2025 GMT
Subject: CN=b2dfafe4acd46132227825ac7ef7b34292c98168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:86:82:98:43:c1:6e:1a:e2:fe:fe:fb:64:4e:
c7:43:a5:8f:aa:56:78:18:d8:a2:37:19:e8:77:98:
4f:79:f4:14:79:16:4a:d5:55:17:d6:e0:41:71:81:
66:39:e5:95:f0:a9:e7:96:82:33:02:ba:57:41:78:
c1:c7:76:0e:d9:11:7f:2f:0d:5f:1b:3e:e9:c2:93:
70:33:38:f5:ce:d7:13:f5:98:80:f4:63:d1:5f:d6:
e0:56:ec:81:3c:45:d9:45:b2:c1:91:9a:e2:5a:63:
ce:cc:e6:09:7f:37:bd:c6:5a:5c:7c:03:a3:d9:f8:
89:ac:53:0e:82:c4:27:96:5a:d0:54:20:c7:8b:b7:
e0:30:8a:03:0b:1d:06:dd:c5:ba:17:b0:88:26:ee:
51:9e:d7:35:cf:e5:d8:03:c5:62:2d:7f:f3:43:b7:
09:c3:fb:62:a6:29:b4:d8:53:3e:22:0d:86:32:35:
23:42:73:62:c0:8a:60:76:c3:89:6d:17:98:a7:1d:
cc:17:92:b8:6f:4c:47:96:da:a3:25:99:4c:04:93:
a0:2d:73:a4:d7:12:56:64:65:0a:eb:50:c9:ce:77:
d6:d4:ea:7a:28:df:b1:89:65:d5:dd:a5:5f:63:e5:
7a:e2:7b:e1:b0:01:6b:7e:5f:95:38:6a:10:7d:74:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DF:AF:E4:AC:D4:61:32:22:78:25:AC:7E:F7:B3:42:92:C9:81:68
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:46:e3:59:07:f1:f2:89:5f:4d:f5:41:09:19:41:39:39:bf:
02:b5:b7:4b:fe:79:93:1c:74:64:9c:88:9c:a1:21:45:33:e9:
11:10:b0:ed:d6:ea:8f:4d:13:60:b2:78:72:48:9b:17:96:13:
8a:4e:c3:ac:62:4d:ac:29:18:66:fc:0c:a7:7f:2d:87:78:01:
80:1f:3d:ef:8d:2c:23:63:f9:c0:ea:6a:f2:5e:53:ac:a6:86:
94:c9:a6:4e:ca:4e:46:59:73:bc:71:fd:60:2d:19:83:80:63:
fc:27:4d:9d:23:cd:7e:09:0c:d3:8c:bf:3e:af:a4:26:ca:0e:
65:65:52:b3:97:8b:5b:81:c1:d6:62:47:b2:f8:61:59:e2:d2:
d5:50:63:95:cb:d4:71:12:3b:22:ac:6b:64:88:0d:ec:21:b8:
6e:ef:b1:6c:90:47:cd:29:4b:4d:da:5a:1a:58:69:bf:f7:a0:
65:d7:b0:73:69:27:c1:e1:b1:a1:e2:5a:ae:b1:a2:46:54:4a:
d9:a0:dd:ee:6e:06:1d:74:4c:5d:ce:67:68:de:a5:b1:60:c0:
10:fd:94:ae:fd:4d:af:52:9c:86:58:1e:9e:83:42:3b:72:74:
58:38:d6:25:f3:9b:34:70:66:17:8f:43:cf:ac:5c:a0:1b:9e:
f5:0f:b7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:05 2025 by rpki-client