Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
File: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft (raw, json)
Hash identifier: kRvzVNLW46xxp3475/MkcMgQPIUdYNGjuVOPMzCvU3c=
Subject key identifier: 49:45:EA:87:C4:7C:03:ED:A6:8E:2D:3B:0B:10:83:DB:E6:D2:0A:50
Authority key identifier: EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23
Certificate issuer: /CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
Certificate serial: 0199228C9D16408B96E60E54512DD263DA28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
Manifest number: 0A98
Signing time: Sun 07 Sep 2025 05:01:04 +0000
Manifest this update: Sun 07 Sep 2025 05:01:04 +0000
Manifest next update: Mon 08 Sep 2025 05:01:04 +0000
Files and hashes: 1: 7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl (hash: qbm+bu1oRow0ctJVCMiK0G87qV7ERfvEDEH60UonpsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:9d:16:40:8b:96:e6:0e:54:51:2d:d2:63:da:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee68b664ccd50ca767d46ffb34f53a06d120b523
Validity
Not Before: Sep 7 05:01:04 2025 GMT
Not After : Sep 8 05:01:04 2025 GMT
Subject: CN=4945ea87c47c03eda68e2d3b0b1083dbe6d20a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:01:43:fd:49:d1:29:d5:22:a9:cb:2b:69:92:
e0:60:84:87:fa:b5:0b:d9:eb:5f:60:55:0b:b2:eb:
74:23:1c:ee:62:6c:3f:65:09:33:ee:8a:96:58:8f:
8d:7b:89:dd:e2:19:b8:da:b9:90:41:b4:6b:3a:01:
c3:91:cd:3b:9e:4d:ac:71:58:dd:ce:c3:9d:75:73:
4e:43:bc:89:12:21:f4:e2:9e:5b:e3:17:16:14:3b:
d7:d8:88:bd:ef:b1:d6:ea:ed:93:8f:c1:b0:3e:86:
62:f8:6c:3e:87:59:a5:e4:62:be:74:23:f4:89:65:
70:6a:6a:12:5f:40:52:a1:f5:56:04:17:0c:e0:a9:
9d:35:b1:9d:b9:25:2c:c2:d6:7f:30:cb:c8:01:b3:
1a:87:58:f2:e9:5c:23:cc:c3:b1:20:e6:a5:e9:11:
a3:96:99:2f:78:6e:e7:57:fe:58:dc:5a:71:a1:8a:
a8:8c:9e:84:e7:bd:c9:fe:c5:18:aa:09:51:ea:ff:
73:33:27:ef:95:a1:56:37:bb:ec:0a:cc:fb:4b:8b:
9f:fd:5c:ab:e0:6e:15:16:ab:59:86:06:fd:4d:c2:
d9:59:ef:93:9c:bc:a6:a4:39:06:8e:bd:4a:e5:23:
55:4b:d8:3e:be:15:f2:6b:cd:3c:03:1e:e4:8f:d4:
5a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:45:EA:87:C4:7C:03:ED:A6:8E:2D:3B:0B:10:83:DB:E6:D2:0A:50
X509v3 Authority Key Identifier:
keyid:EE:68:B6:64:CC:D5:0C:A7:67:D4:6F:FB:34:F5:3A:06:D1:20:B5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ba76ec-5d1a-4375-849e-ded7ac252544/1/7mi2ZMzVDKdn1G_7NPU6BtEgtSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d5:a2:7b:4c:0a:bd:cb:5b:7b:5a:f8:b2:bc:51:04:05:73:
9d:11:05:77:be:eb:bf:6e:92:d0:52:29:54:66:47:f1:88:9d:
59:4f:5a:37:27:95:25:c4:0c:3a:73:cd:a5:d4:c9:84:77:e4:
c2:ed:b7:f0:e2:47:1a:b4:4f:5d:1c:bf:98:63:a1:25:96:aa:
88:7f:99:70:11:58:3f:a6:23:77:99:0f:70:f4:3a:42:1b:89:
0f:93:e5:6e:1a:91:25:03:09:4f:f9:e2:96:bd:11:89:be:7f:
9b:81:9e:52:99:00:02:bf:a2:28:45:81:e4:75:3d:5e:ad:3e:
a0:25:21:db:b7:4e:65:32:b7:31:a2:87:d6:5f:d7:de:19:88:
4f:9f:61:f6:1e:7f:0a:43:1a:4a:a8:ad:20:42:66:84:05:57:
2d:52:a3:ba:16:86:cc:d8:56:9c:2a:a2:50:3d:1f:dd:f6:99:
80:b9:f7:63:f8:60:2c:95:65:fb:77:a4:18:31:a6:6f:74:6d:
1c:82:8d:a1:81:64:b9:ec:fc:fe:86:e8:ae:a7:f4:3d:08:c4:
a6:2c:55:86:5c:70:6d:3b:37:c4:46:8f:4d:c3:c2:ec:87:31:
05:b6:40:4b:33:bd:20:02:d4:72:03:5e:7d:fd:e6:2d:e0:f0:
12:72:15:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:51 2025 by rpki-client