Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
File: 7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json)
Hash identifier: g7rPlwXZRuI7hVoxUcS3Pb+Bm6tdcD/Rn4fnUOx9/1M=
Subject key identifier: 41:0B:33:F1:9C:86:C3:F0:71:7D:3F:8C:9B:C1:47:CD:1B:2E:9D:52
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Certificate issuer: /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial: 0199233106A1FA784A8D26891D3BE7A90CC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 08:00:39 +0000
Manifest this update: Sun 07 Sep 2025 08:00:39 +0000
Manifest next update: Mon 08 Sep 2025 08:00:39 +0000
Files and hashes: 1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: tr0TMNIbVKA0YClrzGnzSgabIYjMpZkvtVuKQNXub5A=)
2: 8rOJtiLxYHoU0BtAFzn-91ivD_s.roa (hash: Ru+2TW06RDS2clsfzv8MubQ+2olZEzQWBQuJZ31W9Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:06:a1:fa:78:4a:8d:26:89:1d:3b:e7:a9:0c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Validity
Not Before: Sep 7 08:00:39 2025 GMT
Not After : Sep 8 08:00:39 2025 GMT
Subject: CN=410b33f19c86c3f0717d3f8c9bc147cd1b2e9d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7a:d2:86:b5:ad:df:95:21:05:c9:06:a6:d4:
89:94:d3:a3:a0:32:1b:49:0b:b1:9f:df:af:c9:b0:
2d:70:3a:83:fe:00:7b:2a:ce:60:20:37:11:36:38:
53:cd:72:14:55:e6:05:12:a6:c1:5a:cb:73:7a:84:
6b:1c:bc:08:11:e7:e2:9a:59:57:9b:9c:2e:54:4a:
5f:8d:39:49:3a:7f:ad:a7:69:38:4b:6b:d4:26:10:
e2:d5:af:1a:0f:83:91:4c:a1:1a:e8:23:ee:9a:91:
8f:f7:bf:ea:01:d3:21:34:ac:78:16:5e:b2:22:bc:
f7:f6:3f:11:ff:27:42:da:d3:26:a2:e8:0e:5d:08:
03:b8:f6:70:26:2c:6d:14:24:2d:e7:71:5c:52:6c:
f3:13:26:73:1e:f2:9b:66:65:f3:44:98:2e:aa:03:
61:4f:c0:00:b8:35:9f:66:3b:f3:f3:13:ea:8a:15:
9c:2a:22:32:da:54:b4:10:df:51:ab:c7:e5:d4:ba:
ad:a4:77:ac:c7:03:70:05:32:65:af:a2:0a:cd:b8:
2f:fc:75:5c:95:c5:0e:66:d6:ad:c4:06:91:dd:93:
07:68:24:91:92:4a:d1:47:ab:18:a9:a2:f8:ba:53:
d2:8d:d3:9e:53:62:46:92:f5:7f:19:93:2b:44:de:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0B:33:F1:9C:86:C3:F0:71:7D:3F:8C:9B:C1:47:CD:1B:2E:9D:52
X509v3 Authority Key Identifier:
keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e0:d1:30:61:a6:f9:df:a8:52:bd:77:53:08:bc:35:2e:07:
65:6d:61:45:5d:7b:71:ba:71:02:49:ba:aa:00:ec:b7:88:0d:
ab:d3:31:1e:8e:dc:ad:38:ad:ad:54:48:14:55:b8:6f:d8:d4:
74:a8:59:8b:af:81:4b:8f:7e:4e:66:34:4a:0d:a0:f6:35:a0:
71:1d:a2:c1:b5:42:63:78:36:12:73:ff:e1:36:a1:0e:85:4d:
08:e9:ae:7f:55:78:4b:60:bd:04:30:19:50:41:27:55:69:57:
16:36:dc:56:a4:e5:ae:f3:7f:f3:c8:cf:85:d2:21:0d:fe:0e:
31:92:18:71:57:9c:1d:40:d1:cd:ee:aa:86:59:bd:09:65:93:
8c:1c:92:de:09:fc:87:f9:16:0f:b6:40:08:ae:e2:40:7c:30:
e3:a9:de:75:1e:74:69:b5:3a:5b:53:ff:8b:2d:a4:f8:49:e6:
0b:e9:18:32:b0:47:53:cc:48:4f:68:47:7e:d3:de:df:7f:b2:
a1:64:a6:91:ae:e9:94:2f:26:bc:69:39:12:82:f8:95:a6:c7:
47:2d:35:58:5f:0e:41:be:05:d3:d7:a2:c7:82:a9:f2:48:b2:
09:00:ac:f9:15:8c:1c:02:01:56:c2:f7:47:80:45:3e:90:52:
5e:6a:c0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:33 2025 by rpki-client