Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
File: 7xM1mLsQVCEUaB6oajXfFpgxzwM.mft (raw, json)
Hash identifier: ybJ5eu7V9hXrUi8UrhX/BK0T2OOeohm61VpJg9jieRU=
Subject key identifier: 6C:9D:16:59:98:55:C6:7E:1C:06:80:D9:DC:ED:7C:7C:5D:49:82:09
Authority key identifier: EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
Certificate issuer: /CN=ef133598bb10542114681ea86a35df169831cf03
Certificate serial: 019847E54EFA5BE2288F51DB9E6D5F370DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
Manifest number: 0644
Signing time: Sat 26 Jul 2025 18:01:06 +0000
Manifest this update: Sat 26 Jul 2025 18:01:06 +0000
Manifest next update: Sun 27 Jul 2025 18:01:06 +0000
Files and hashes: 1: 7xM1mLsQVCEUaB6oajXfFpgxzwM.crl (hash: Y8AxeUn5dGFkr/h7nSlQici+FyRlzUrR1TRjmam1yTg=)
2: cvihALfmaAmPqfCRAQfCnD556fE.roa (hash: XgTAh5vkPS4VZRIrGpxzNJ/k+9BNaFqmON6ZSIkPh2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:4e:fa:5b:e2:28:8f:51:db:9e:6d:5f:37:0d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef133598bb10542114681ea86a35df169831cf03
Validity
Not Before: Jul 26 18:01:06 2025 GMT
Not After : Jul 27 18:01:06 2025 GMT
Subject: CN=6c9d16599855c67e1c0680d9dced7c7c5d498209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:9a:c0:fb:1f:65:64:2f:41:5f:3a:df:61:
54:4d:04:2e:be:76:33:ca:0a:cf:14:91:01:2d:da:
11:32:e1:1b:e6:e9:5f:4f:90:f7:8c:79:24:d0:f8:
50:24:48:17:96:c8:c7:ab:f0:02:2d:dc:17:78:a2:
71:c3:61:11:78:db:b8:3c:11:71:46:12:53:e1:cd:
93:b9:06:9d:72:39:b7:18:c8:4b:f7:1d:35:a3:ec:
39:2d:24:53:e9:ce:fc:5d:2e:12:57:cd:f1:0e:f0:
eb:ec:77:03:8b:60:bb:ad:62:6b:45:17:7a:f3:f9:
39:23:6c:42:e8:7a:12:c3:98:4e:a6:ae:71:69:bc:
5f:62:3b:70:10:79:20:cd:9d:07:38:d3:6c:7e:6a:
5d:93:11:b4:60:95:66:82:6e:9e:7f:b1:a0:09:4c:
60:ff:11:1d:c1:fe:9a:5c:57:16:78:17:e6:a8:ec:
ba:12:27:22:1b:4d:3c:36:74:7f:98:42:71:79:71:
2f:22:0e:e7:7c:bc:d2:7d:8b:b1:bc:ed:7e:2d:47:
cc:54:9d:93:5a:35:64:26:1b:6c:c8:28:2f:79:39:
ab:ea:5b:e8:4f:07:d1:06:3e:03:e6:5b:3b:df:c5:
f5:95:48:e7:c2:9d:98:e0:e6:de:a4:ac:e6:5d:48:
8f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9D:16:59:98:55:C6:7E:1C:06:80:D9:DC:ED:7C:7C:5D:49:82:09
X509v3 Authority Key Identifier:
keyid:EF:13:35:98:BB:10:54:21:14:68:1E:A8:6A:35:DF:16:98:31:CF:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xM1mLsQVCEUaB6oajXfFpgxzwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/45b9e3-5fa6-4534-91af-f4c7a7925975/1/7xM1mLsQVCEUaB6oajXfFpgxzwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e8:34:dc:94:88:d1:c6:22:89:05:f3:f2:87:65:23:49:cc:
ac:65:15:a6:45:91:56:3c:01:8b:91:3c:98:19:b7:30:28:93:
b5:b3:c1:12:8c:be:6a:da:2c:5e:fb:30:29:41:32:fc:3d:19:
66:dc:83:f5:91:31:ff:51:b4:b6:4a:f9:e1:4c:d9:d2:51:4c:
fe:e8:91:e9:08:1c:65:3e:a9:f3:04:4f:f8:3b:89:05:be:3c:
a1:56:f2:07:e7:cb:5d:53:c0:a9:23:05:72:64:9a:0f:0b:bf:
51:36:06:be:33:02:b2:6e:3f:9c:dc:be:34:13:b6:46:ad:66:
81:b2:44:f7:b6:e8:4a:70:0c:6b:67:75:2d:4c:c0:05:89:ef:
da:cf:65:6b:41:a9:29:e1:9d:6f:54:fc:00:0d:79:4d:00:58:
fa:e6:71:36:97:52:ee:06:c1:56:1b:9a:82:97:e0:f5:b6:09:
cb:d9:00:47:ae:49:86:44:e0:34:bb:81:10:d9:03:bc:19:14:
f8:42:91:87:00:dd:05:d0:e6:87:cf:3a:a4:e8:77:e9:dd:81:
30:e0:e6:3f:e2:20:61:a3:58:01:dd:b2:34:16:15:62:2c:cc:
58:b2:e8:69:72:c0:5a:f9:5b:8e:15:81:38:b4:cc:31:eb:a1:
49:6d:9f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:02:27 2025 by rpki-client