Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
File: 7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json)
Hash identifier: +WouE05IWUDWNeGNJS3dAaENzVYTIOja9usUI5wnfoY=
Subject key identifier: 23:8E:18:33:AC:FB:C4:70:C3:70:70:A9:E3:FE:BA:F9:7A:33:95:F6
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Certificate issuer: /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial: 01983DD0374F96E5DE27A0038E386CCC7DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
Manifest number: 04B2
Signing time: Thu 24 Jul 2025 19:01:52 +0000
Manifest this update: Thu 24 Jul 2025 19:01:52 +0000
Manifest next update: Fri 25 Jul 2025 19:01:52 +0000
Files and hashes: 1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: Kx3ltaBzgYNVCgiMWcCfyya54mx/xgp9qEgTO9kn7U8=)
2: gWV79z64-K00_T5p42GewWgp3cA.roa (hash: WMmpO9e9AU6ZoJLpGqYgkYyyLRC76igWs/Qlt0mpVE4=)
3: hRbNAGx7LG2xMTgP4Ix7XGLNZow.roa (hash: cOuDxG6cm5XwU2pZ0JZKfoGVa6Tbrkfv+67mL24RJLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:d0:37:4f:96:e5:de:27:a0:03:8e:38:6c:cc:7d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
Validity
Not Before: Jul 24 19:01:52 2025 GMT
Not After : Jul 25 19:01:52 2025 GMT
Subject: CN=238e1833acfbc470c37070a9e3febaf97a3395f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5f:93:b8:54:f1:10:b1:62:02:51:10:d5:c7:
99:7e:68:e3:77:d5:0f:1a:73:64:fe:fa:a5:d5:47:
be:22:93:8e:e5:66:04:d8:f3:e4:db:c0:18:8e:2f:
8f:65:cc:4c:e8:70:ce:d6:ed:21:67:45:d9:40:5c:
e8:b6:96:6e:e7:48:06:6f:5e:4b:fe:63:1f:c8:ed:
ba:29:e4:0c:74:de:11:b0:fb:ac:7b:9a:7d:8e:ce:
ab:21:8f:44:66:54:a3:2a:4a:1d:64:b5:2a:f4:89:
cb:b0:f0:73:66:0d:72:f7:a0:7d:5b:a7:7e:b9:29:
09:6c:1e:72:5f:7f:25:0c:43:7f:b7:a2:40:3c:ee:
82:2d:a3:c3:7f:bb:82:7e:b5:f3:2f:b9:34:a9:a0:
cc:7b:5c:1a:89:b8:da:5b:b4:18:af:10:aa:5c:fb:
2f:54:59:87:68:e2:ac:ef:e8:05:d1:c4:11:f6:ff:
04:b2:e7:f3:90:49:ad:c4:31:d2:ad:b3:6b:76:57:
78:e6:f9:6a:bb:cc:99:48:0c:c9:d4:4e:d8:82:c7:
44:61:b5:da:23:af:83:d3:e3:fe:26:ca:c9:ed:fd:
67:c0:a6:73:1c:5d:ee:a5:e7:7e:78:36:3f:fe:c2:
eb:4b:eb:48:df:f4:46:8f:ed:ca:7c:26:21:26:3e:
75:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:8E:18:33:AC:FB:C4:70:C3:70:70:A9:E3:FE:BA:F9:7A:33:95:F6
X509v3 Authority Key Identifier:
keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ad:65:11:b2:32:6d:81:63:17:77:4a:91:4a:09:17:a6:c8:
07:9e:fc:72:4b:1e:f6:7f:ac:6c:0c:14:f4:bc:13:38:45:ec:
55:13:0b:72:c0:7d:17:8e:ec:8d:1a:6a:88:96:3f:2a:a6:4b:
48:68:3a:d7:1f:2b:18:cd:10:67:75:c2:e1:e3:2d:2f:8d:78:
de:ea:6c:a4:d1:be:5b:44:5b:c4:9b:ab:b1:2c:d4:06:2c:56:
8c:a9:6c:82:d3:cd:cf:b4:b4:90:83:b0:ec:58:fb:06:d6:8a:
d3:24:e8:da:ee:61:0a:7b:64:0c:d9:2b:c8:a7:fb:fe:a5:10:
66:98:12:69:70:3a:b0:e6:38:a1:89:24:26:e9:90:1e:68:fe:
aa:6e:25:00:f2:fd:27:30:40:24:5f:bf:aa:14:09:0c:7c:56:
98:df:02:44:d9:8b:14:ed:61:d3:2c:12:20:e8:78:ab:ec:da:
fc:50:48:6e:21:8a:87:d8:20:3e:1a:90:e3:96:c6:63:d6:5c:
d8:9e:f1:56:36:50:d9:6f:6e:2f:19:93:b1:a7:3f:c4:74:a2:
65:22:cd:d4:d7:1d:ab:56:31:af:a7:7b:b8:c3:e7:e9:0d:5e:
cb:a3:54:f5:6f:ad:48:f3:d2:ce:13:88:f9:6b:7a:60:68:eb:
bf:a4:4e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:29:41 2025 by rpki-client