
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: G/kAOXjE9EUTg803M1YoKbbA8hONp17BIhnbAkOSqqw=
Subject key identifier: C5:A8:21:52:60:1F:9E:93:2A:50:D2:36:28:9F:0A:31:95:38:CC:99
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 0198CC4AD2CAE49ACBD9DBD4EFF52FE87DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 1644
Signing time: Thu 21 Aug 2025 11:01:52 +0000
Manifest this update: Thu 21 Aug 2025 11:01:52 +0000
Manifest next update: Fri 22 Aug 2025 11:01:52 +0000
Files and hashes: 1: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: MP2Q7BTbGF4liggsY3wvq3ffCY60pX1Fkvy0ejNVML8=)
2: jJfOPh4XYz0bStaxv-izcSg_mmc.roa (hash: I9zOxo3FRJE3Zqu7rer6Rr4TRL9Sp9aojJllGRgbeX0=)
3: pp9HRbSEXg1Djpwq9U2x1ut0P3A.roa (hash: eLTqAfDKOrIieHKE4CKftQ8WCB5K7yV6FjmVMCdNg0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 11:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cc:4a:d2:ca:e4:9a:cb:d9:db:d4:ef:f5:2f:e8:7d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Aug 21 11:01:52 2025 GMT
Not After : Aug 22 11:01:52 2025 GMT
Subject: CN=c5a82152601f9e932a50d236289f0a319538cc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:bd:1b:d5:d6:82:ab:89:a7:1d:10:04:fe:
59:6a:1e:6c:da:b6:b2:bb:83:27:75:32:ba:73:7d:
42:61:15:f7:de:99:a7:6d:9b:92:82:0f:35:2f:5a:
cc:1c:29:bc:09:b6:85:c1:15:49:62:87:9d:7b:18:
7b:bf:4c:88:cf:36:b3:24:30:1b:67:7d:54:96:e7:
9c:ac:7d:33:7f:ba:92:7c:7d:f5:30:82:e0:0e:a7:
d4:52:ef:a1:16:95:0a:5a:75:6c:1f:5c:d6:8e:b4:
5f:9e:ad:b7:a0:e8:98:1c:66:34:ec:f9:ca:2d:7d:
66:13:8d:55:c3:b7:74:65:aa:f5:2e:54:14:09:1d:
95:3e:2a:f8:31:0f:72:cd:0d:33:41:d6:9e:ee:8a:
b5:6c:47:31:dd:ac:82:c6:1b:6e:7d:1d:f6:a5:1b:
61:96:24:06:b5:32:b6:6e:b2:e6:15:9c:8f:f9:41:
93:5b:10:46:2b:c8:2b:95:51:a7:32:62:4e:9d:d5:
33:4b:24:cb:9a:10:91:be:a8:a7:9e:60:64:f2:78:
62:5f:8b:49:75:1d:b6:de:94:b8:8f:61:e0:22:16:
9e:1b:fa:ce:f0:44:cc:3f:cd:28:8b:70:6c:93:49:
69:a1:88:bf:8c:57:9d:a7:ac:e1:54:c7:5d:7c:24:
90:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A8:21:52:60:1F:9E:93:2A:50:D2:36:28:9F:0A:31:95:38:CC:99
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e6:f8:0a:9e:2d:1a:fe:06:a5:26:ab:ec:7d:d7:0f:b0:96:
45:0e:ae:6f:be:1c:45:7c:87:d3:0d:81:58:19:a5:d4:36:8b:
f7:b6:7c:2e:1a:e7:e8:55:44:a6:0b:8c:26:4a:31:67:62:84:
36:69:1a:4d:80:d9:a7:ee:65:b9:6a:30:39:07:7c:f0:9b:71:
c5:cc:76:d3:28:94:76:42:ae:20:2d:e7:95:f6:5f:58:ac:a3:
47:b4:ac:8b:7b:35:e9:b0:f2:a4:9d:d8:fa:49:ea:b2:3e:ef:
3b:90:48:93:ea:f5:02:fd:6c:dc:ff:95:e9:39:af:e1:05:7a:
72:dd:bc:82:d4:f6:6f:a6:91:e1:15:4f:e0:d5:99:ee:2d:67:
e5:72:f8:c0:88:50:ac:87:95:1a:13:9a:8a:00:bc:f9:70:d5:
f6:cb:cf:21:81:00:6f:54:82:9c:6e:69:55:d8:e1:ab:c3:94:
80:cc:f6:88:60:19:70:d3:9e:46:3d:97:27:74:cd:46:65:35:
da:76:e2:43:64:18:94:08:16:f4:be:99:98:d4:48:61:c1:dc:
dd:9a:4f:12:2e:ae:9e:9d:c9:a1:75:e5:65:70:1a:34:1c:10:
1e:6b:d5:31:42:5b:15:f9:e7:c5:bf:eb:de:e2:24:12:ef:c2:
b2:92:8a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 20:23:17 2025 by rpki-client