Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: YxB7i1sHmzYJ527v3qD1W6raU4OcZ1FEHrs7TuDSa/U=
Subject key identifier: F5:1F:AD:4F:99:A4:B2:9E:8D:9B:1E:8D:FC:AD:2A:0E:CA:B7:C0:7F
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 019922553073978A1D05F20C3609AE9D4EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 04:00:32 +0000
Manifest this update: Sun 07 Sep 2025 04:00:32 +0000
Manifest next update: Mon 08 Sep 2025 04:00:32 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: 5BepMop1gdAnWRGNu2sHi32lcmHl8dUoj9YnxRgcTlo=)
2: nigLCn7wWT0ueFZoLpA3hlPaWgA.roa (hash: q+VheV55aItc4rpRaaib9XdkzvuIJSEg9slh0BtNQXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:30:73:97:8a:1d:05:f2:0c:36:09:ae:9d:4e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Sep 7 04:00:32 2025 GMT
Not After : Sep 8 04:00:32 2025 GMT
Subject: CN=f51fad4f99a4b29e8d9b1e8dfcad2a0ecab7c07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:ba:cd:da:15:f3:59:99:24:a4:92:95:c1:
05:21:15:50:f3:fa:e3:b8:80:b4:25:2b:d8:88:f9:
ee:50:59:be:8b:f9:ae:dc:49:d7:8e:bd:d7:52:b3:
5c:de:68:f3:f9:8d:42:37:fc:d2:63:75:75:38:71:
54:28:4a:2a:39:5c:7c:81:ed:ba:cc:2b:c8:d7:7e:
c1:a8:07:a5:0f:09:02:31:4d:5c:e3:82:25:cf:f9:
5c:90:9b:c6:05:e5:53:17:5f:43:e7:bb:ae:99:58:
bb:9e:a5:ad:7b:98:23:29:c4:61:75:84:a2:ef:b5:
4c:31:38:9f:b2:96:1d:9e:98:1f:a7:f8:1b:9a:84:
8d:88:8b:2e:77:3d:a4:79:95:6a:22:ad:d9:42:ff:
9a:ef:ae:02:fe:4c:f5:72:01:e6:54:d3:05:ae:e4:
b6:dc:3b:13:99:92:7d:05:bf:b8:46:9d:f2:77:1c:
45:9d:4d:12:6a:ca:c4:2e:91:42:72:65:16:3f:bb:
9f:a6:c1:1e:fc:97:04:8c:77:1d:e0:3a:97:6d:75:
3c:9f:00:a0:43:69:f5:c4:d6:e9:38:4a:be:80:a4:
bc:40:a7:bd:dc:7d:1c:6f:6d:8d:bf:11:aa:f5:39:
35:df:1f:f2:b3:61:cc:6d:fd:04:99:6c:00:99:11:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1F:AD:4F:99:A4:B2:9E:8D:9B:1E:8D:FC:AD:2A:0E:CA:B7:C0:7F
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:34:97:92:a5:df:28:a9:7e:dd:ae:be:d5:59:34:32:a6:bd:
dc:94:4c:95:a4:93:00:55:3d:82:f6:c9:3b:84:91:f7:b4:f6:
96:a2:a6:59:c1:f2:08:f2:fe:2f:1f:a2:f6:26:f5:5d:f1:b3:
38:d8:37:9b:73:47:a2:90:2b:02:a3:23:df:ca:5d:e7:38:2c:
cd:da:45:34:9d:28:c5:10:af:c3:6b:d0:a3:51:d4:8d:7d:e9:
c5:63:71:68:4b:10:4b:82:3f:49:60:df:9a:a8:e1:27:7f:64:
13:d7:4e:29:30:91:ab:bd:2b:71:b3:54:28:ba:73:99:9c:45:
7d:18:05:dc:20:d0:a3:69:7c:1a:dc:bc:e0:28:9a:d8:52:a8:
67:a9:c4:58:a6:ab:b7:7d:31:e9:7e:2d:e9:c7:8d:07:a9:40:
1a:94:42:5e:93:b9:fc:75:c0:1c:b3:13:ba:f1:25:3b:54:28:
1e:77:d9:41:61:90:62:69:e5:ce:9b:8c:60:0f:aa:76:f5:26:
15:47:71:17:49:ba:f5:41:75:4c:d1:4b:a5:06:a0:4b:f1:55:
72:8d:28:d2:d7:7f:7f:22:68:3c:cd:53:24:5f:d9:8c:53:d2:
cb:88:36:5c:07:91:8c:72:fd:87:a2:f5:28:c4:9d:b0:95:14:
84:1b:e2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:26 2025 by rpki-client