Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
File: 7iUCbllV3N0RFHb5toSdcoGFRps.mft (raw, json)
Hash identifier: +9zQwXffrnSq5ud2ZVGnAjpYXPdeOcQofSoFVc8nFzU=
Subject key identifier: 9D:DD:21:B6:1D:8A:76:9A:D2:92:9D:87:65:72:63:41:0B:8C:48:75
Authority key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Certificate issuer: /CN=ee25026e5955dcdd111476f9b6849d728185469b
Certificate serial: 019848F7579ABE1AAEA53FE176395A98A9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
Manifest number: 046E
Signing time: Sat 26 Jul 2025 23:00:25 +0000
Manifest this update: Sat 26 Jul 2025 23:00:25 +0000
Manifest next update: Sun 27 Jul 2025 23:00:25 +0000
Files and hashes: 1: 7iUCbllV3N0RFHb5toSdcoGFRps.crl (hash: 8hHv8PeSubtessZ9Je6LmhhZiLW+/8iRaThB040iU3M=)
2: jO8_WTUfYU8WgAweNsy-XdM5HxE.roa (hash: DSCWbkkOzf+/qzK5D7cI20PP8IqsbGas6Mu8jntukrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:57:9a:be:1a:ae:a5:3f:e1:76:39:5a:98:a9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee25026e5955dcdd111476f9b6849d728185469b
Validity
Not Before: Jul 26 23:00:25 2025 GMT
Not After : Jul 27 23:00:25 2025 GMT
Subject: CN=9ddd21b61d8a769ad2929d87657263410b8c4875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:59:39:b5:81:bf:4a:f2:20:e5:64:a6:0d:cf:
fc:2c:ec:d2:91:f2:d0:de:0b:8a:c0:d8:b0:d6:5f:
91:84:02:dc:3d:6f:34:3e:67:69:c1:2b:8d:bb:d3:
60:2b:4e:35:00:35:c3:3e:b9:ee:f1:cb:c3:3f:00:
af:3e:75:a3:d7:2f:9d:96:10:34:37:dc:e8:fa:d8:
ac:ba:1d:24:d9:4f:5b:eb:ff:bc:26:c9:36:8f:94:
4d:19:13:c0:cb:26:a7:1b:1d:c4:58:12:6b:1d:23:
ce:77:36:f3:73:50:70:f0:a1:5b:8a:44:bb:10:02:
b0:65:95:56:c2:de:e0:32:a3:7c:c1:fd:de:6c:21:
81:6e:62:9e:3c:8a:12:fc:0b:a8:9b:0c:88:d3:f4:
13:7a:72:ed:a8:5f:4a:24:9d:96:a8:58:c3:99:85:
f1:b7:93:04:eb:b2:5a:f9:ec:f1:c2:d5:3b:7f:ab:
6b:d1:4e:ce:0b:8d:94:66:77:17:db:0d:fb:b5:e2:
b9:ae:16:32:07:66:5d:ae:d1:04:61:2c:70:7c:5f:
9a:63:9b:82:89:f9:2b:26:d1:2a:51:d3:ab:b9:03:
41:d8:2f:96:31:da:2b:53:7d:49:97:8d:1a:90:20:
39:4c:6f:0f:6d:35:8a:54:6f:d9:3a:6a:08:30:56:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DD:21:B6:1D:8A:76:9A:D2:92:9D:87:65:72:63:41:0B:8C:48:75
X509v3 Authority Key Identifier:
keyid:EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ba:f1:a7:55:3c:64:d4:c2:2a:2d:a1:02:f7:fb:b2:e5:f6:
f2:4e:35:0f:48:3b:48:b4:17:17:24:a5:4e:09:e0:e2:fb:28:
3b:82:dc:20:83:7e:b4:57:11:0a:40:51:0b:61:64:2d:50:e6:
7d:a4:f9:41:4d:32:4d:56:ad:e0:4b:58:0b:ef:f8:7e:21:a0:
b4:87:b2:86:1f:da:3a:2b:85:fa:34:2a:c8:a9:26:27:19:4e:
76:04:46:a9:4b:e9:ff:43:5a:58:26:a0:fa:2a:ca:3a:3a:db:
a1:69:b0:13:73:f2:7b:4c:17:f4:50:3d:0b:3f:23:f4:b1:cf:
7f:72:08:70:5f:22:9c:8f:8e:eb:cb:b1:b8:92:c3:01:b4:7b:
46:0f:3b:a3:ba:98:3b:c0:91:1d:a7:42:c1:f6:c8:37:7b:e5:
13:26:e7:d5:cf:04:9a:df:8a:e1:60:d4:68:d2:67:45:44:f9:
3b:64:e7:01:45:20:56:6b:cd:0f:43:ae:1c:c9:77:66:b6:e4:
61:cc:3c:da:af:f2:b5:fd:38:63:d1:56:27:0e:db:3b:d1:0e:
12:e1:ed:bf:17:c7:af:0a:dc:f3:4f:cf:c5:99:28:30:b0:3c:
24:88:8d:83:53:3a:7a:00:a6:67:3d:c3:a8:e5:65:ce:a3:d7:
7f:b8:2e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:13:09 2025 by rpki-client