Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
File: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft (raw, json)
Hash identifier: h7ex4NQFd5g+pLeRxLRToj4prbTSlbM4VvMJ6hfEy9U=
Subject key identifier: 43:49:80:BE:7E:67:E2:73:DA:ED:93:7B:8C:CD:6C:3D:B9:22:C0:73
Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
Certificate issuer: /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Certificate serial: 01984C2FF4388D798D8F77642AB9F7E059BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
Manifest number: 055F
Signing time: Sun 27 Jul 2025 14:01:07 +0000
Manifest this update: Sun 27 Jul 2025 14:01:07 +0000
Manifest next update: Mon 28 Jul 2025 14:01:07 +0000
Files and hashes: 1: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl (hash: SqzjUSUkuzafSV1emj7ctKZ7YgWgdKUHu/TCBgE7C6I=)
2: eVimXbeUG-mEaqJ8wWvzirp1aiE.roa (hash: O9VHdGh9iSLdn0Tv56KJfU/KKXIBvl+hkZsad3bOt5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:2f:f4:38:8d:79:8d:8f:77:64:2a:b9:f7:e0:59:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Validity
Not Before: Jul 27 14:01:07 2025 GMT
Not After : Jul 28 14:01:07 2025 GMT
Subject: CN=434980be7e67e273daed937b8ccd6c3db922c073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:92:a9:61:a0:44:57:af:33:31:ac:f9:02:
97:dc:f6:b4:f9:0b:10:4b:80:f7:06:37:96:f1:c2:
8a:89:62:12:2d:d0:e8:5a:d4:da:2a:da:cd:3a:b7:
c5:21:5d:40:23:7a:bf:4d:95:fa:f1:8f:4d:2e:77:
3b:70:d5:6d:61:17:f4:3b:6d:99:00:aa:42:32:53:
13:2c:73:2b:3b:de:b8:8d:8b:93:c3:b9:0d:21:d2:
51:52:be:41:03:97:83:f1:26:d1:30:23:6f:9d:01:
57:7f:de:60:88:b7:31:d5:fc:a7:40:ee:cb:53:97:
3e:74:6f:6d:df:10:9e:92:aa:27:c5:7d:63:07:b7:
c0:88:40:20:04:f6:65:87:02:49:f7:59:23:c9:0b:
ac:c8:e4:7b:c7:30:c9:c7:4d:c1:e8:31:75:7b:ac:
e3:82:03:2d:e5:c6:e3:ee:10:f8:fb:c6:fc:04:9e:
76:1a:99:54:a7:97:6b:61:f2:41:84:97:5b:b0:65:
7e:1e:21:0c:82:36:82:c7:44:51:60:83:26:42:11:
d1:fe:91:59:41:aa:f0:c1:8b:49:a4:41:c4:20:7e:
20:14:e2:89:a5:2d:d7:5c:4c:2f:bf:d7:2f:76:ca:
df:bb:d7:19:ac:10:b8:41:1b:be:23:29:16:19:b0:
f9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:49:80:BE:7E:67:E2:73:DA:ED:93:7B:8C:CD:6C:3D:B9:22:C0:73
X509v3 Authority Key Identifier:
keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:3b:43:52:64:cb:6a:36:6b:4d:49:cb:b2:43:df:3e:9f:86:
03:86:3b:bb:9e:52:0c:cd:6f:30:d2:5c:a2:28:05:0a:73:1f:
a1:cd:87:c0:1e:fe:ff:44:76:3d:5f:e5:5b:88:48:ec:f8:8d:
b5:82:68:98:0a:4e:91:70:7f:7d:7e:3a:9a:5c:fc:de:26:7a:
d3:63:5f:13:f0:d2:28:02:d0:6b:ec:c7:8f:a2:8f:74:a6:10:
8a:e0:6a:bf:8a:16:ce:2b:a2:d0:79:1f:96:34:34:54:d6:1a:
68:e2:0b:f8:28:03:c6:3e:f4:4d:c0:50:64:5c:9a:72:41:e8:
45:ad:9c:4c:30:1e:24:0a:2c:82:fc:07:30:28:31:f9:e7:6b:
92:00:02:a1:74:48:16:a6:28:88:92:be:f8:77:0f:75:9d:e9:
3d:26:dc:3c:e5:06:48:de:42:25:db:f0:2c:25:cc:e8:a6:4b:
42:83:d5:b3:11:a3:6f:ac:db:37:0b:1a:9f:b3:86:74:50:ae:
f7:a6:d0:09:9c:c6:e7:c4:34:8e:c9:e9:16:5a:6b:00:0f:17:
3c:e6:cf:b3:27:1e:27:bb:59:3c:5e:9b:0a:11:f0:29:89:96:
a8:03:ef:16:b5:40:da:b2:4f:33:ca:2e:a6:87:ca:a0:1b:02:
84:1a:1f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 23:01:53 2025 by rpki-client