Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
File: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft (raw, json)
Hash identifier: 4o7RG0yoZ8LCOxlGeROY2/bQIN/fGVj5nbxItS9DmyI=
Subject key identifier: 8F:14:43:14:E7:A4:D6:E7:84:D6:6D:1C:E0:B5:F9:48:1E:8A:AC:5E
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Certificate issuer: /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial: 0199394AF96E47D5E401F2326456C323E866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
Manifest number: 12BD
Signing time: Thu 11 Sep 2025 15:00:38 +0000
Manifest this update: Thu 11 Sep 2025 15:00:38 +0000
Manifest next update: Fri 12 Sep 2025 15:00:38 +0000
Files and hashes: 1: 7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl (hash: erW1bF6RZHUl3jiVwPQ2aUh7WNVZ5rkC4TSNfJl3qeg=)
2: UHZDSCwg4-DjCTw2ThSV9YMjtY8.roa (hash: yjuNgWENrQcHvxeDeJWLJxEQH/+1ANaZxCVsNSQeLLY=)
3: iXVDb19kvukiKPCGR7Xk4m4waFo.roa (hash: doLRr6Uuft22RZholuz/UG1fqLztwMyrNWgGHx261cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:4a:f9:6e:47:d5:e4:01:f2:32:64:56:c3:23:e8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Validity
Not Before: Sep 11 15:00:38 2025 GMT
Not After : Sep 12 15:00:38 2025 GMT
Subject: CN=8f144314e7a4d6e784d66d1ce0b5f9481e8aac5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a0:69:f6:cd:39:91:fe:79:4a:c0:7b:75:13:
53:8c:45:4a:9f:2a:7d:1a:cf:e1:61:ba:d7:47:55:
65:04:8e:dd:8d:f3:26:ba:31:b0:7e:d3:f9:a6:a9:
4b:10:63:1f:ab:a2:ed:a5:89:1d:bb:36:4a:f6:cc:
55:62:c3:b9:06:55:10:9f:2f:43:00:0c:f9:b9:68:
ca:8b:50:8e:a9:7c:e6:7a:00:6d:9a:7f:66:81:a5:
85:87:35:67:3a:18:92:49:de:8c:f9:d8:d1:39:40:
11:ca:20:fb:d6:25:38:ae:68:e3:1a:ab:7b:ea:8d:
15:ee:4b:ae:39:ff:3a:4c:51:01:a7:ed:31:a7:5a:
ec:56:0d:8d:52:e2:7d:a2:1b:ec:2c:a5:54:e9:d5:
70:71:56:5d:ba:c3:0c:ae:23:16:9a:33:e6:7f:1f:
6a:63:1c:3e:6c:0c:40:be:d7:c5:a9:44:db:35:0d:
bf:d6:8e:b6:ac:32:4b:c4:f3:ec:2a:8d:e0:a8:b0:
70:fc:83:fb:2d:af:92:0d:80:b9:2b:4b:32:23:53:
91:f2:4e:ff:78:cf:28:02:b8:f7:b0:64:2e:f9:de:
84:9b:2c:66:d0:b2:05:33:89:91:f2:5a:e3:79:04:
0f:63:ff:81:c9:35:96:39:28:dd:7d:1a:14:da:7d:
f7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:14:43:14:E7:A4:D6:E7:84:D6:6D:1C:E0:B5:F9:48:1E:8A:AC:5E
X509v3 Authority Key Identifier:
keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b6:94:e2:bd:34:2b:82:e4:39:57:4e:00:12:c8:3b:f1:a4:
db:99:03:5e:9b:5c:46:93:bf:aa:5f:b9:ca:e3:dd:8f:94:2e:
59:4d:f8:8c:4c:af:c7:6f:40:30:cf:88:20:08:de:3f:a0:06:
28:f2:2d:8a:d1:f2:49:07:26:b5:d6:c9:7f:4c:7e:cb:f3:fa:
7d:2c:5c:a0:59:40:28:5f:4a:a7:5e:d3:87:70:fd:5c:c7:78:
c9:43:b1:16:2a:fb:77:9c:18:8f:fd:b6:a2:a2:a5:59:2d:81:
7f:07:c8:c2:2d:67:56:b0:dc:ac:d4:5e:f7:96:31:31:c8:a9:
81:d6:0b:fe:ff:b7:f5:02:15:f2:ff:00:4e:7d:39:8b:48:30:
ca:8a:68:0c:09:2c:89:65:5c:f3:e9:02:23:78:06:26:65:fb:
e7:ca:78:21:dd:ee:26:42:9e:c3:e8:b4:2b:60:2f:fb:ef:9d:
f8:93:35:47:38:be:27:9f:bd:a4:fe:41:e6:f2:d0:18:4f:7c:
71:d2:cd:7e:14:b7:25:95:e8:5e:5b:9b:ef:a3:00:28:94:e2:
2e:c3:e0:f5:0f:73:3d:44:67:c6:c9:3b:40:20:f3:cb:b4:b2:
c5:3d:9a:a3:0b:a0:0f:cb:14:00:5d:16:01:46:83:47:b1:52:
0f:59:26:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 16:48:12 2025 by rpki-client