Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
File: 7dUb8eKlMAC8IwYFYPLMCznUlu8.mft (raw, json)
Hash identifier: 6an6CHvZg3VQaaCiKPCkSPSL0UOO0enbbOMr1HC7O8g=
Subject key identifier: AA:72:41:6F:67:36:4E:28:19:5A:20:B0:D7:CF:1C:DF:E7:2F:33:DC
Authority key identifier: ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
Certificate issuer: /CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Certificate serial: 0199180AA14EF17C21302E49D84834FF6927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
Manifest number: 166A
Signing time: Fri 05 Sep 2025 04:02:53 +0000
Manifest this update: Fri 05 Sep 2025 04:02:53 +0000
Manifest next update: Sat 06 Sep 2025 04:02:53 +0000
Files and hashes: 1: 7dUb8eKlMAC8IwYFYPLMCznUlu8.crl (hash: 9OXhtK0yZgsf2SQm6Vg1PMmY4cAuUK4ybx1DLMzbEnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:a1:4e:f1:7c:21:30:2e:49:d8:48:34:ff:69:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd51bf1e2a53000bc23060560f2cc0b39d496ef
Validity
Not Before: Sep 5 04:02:53 2025 GMT
Not After : Sep 6 04:02:53 2025 GMT
Subject: CN=aa72416f67364e28195a20b0d7cf1cdfe72f33dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1f:98:ff:19:c7:bd:3c:e8:5d:c9:fc:2c:6c:
62:e2:85:2a:4f:5f:57:87:1c:a0:cd:63:10:25:eb:
1e:1c:b1:31:4e:f1:03:06:31:b6:68:dd:11:6d:d5:
ba:13:b5:59:c0:9b:8c:df:65:8a:78:80:2e:5a:0c:
b6:25:76:07:8d:35:6e:78:f1:59:37:ca:59:06:17:
46:6f:d9:c9:7d:45:4f:f0:e6:e2:20:5c:b8:da:6e:
ff:b4:37:a9:c9:9f:7b:0d:5d:b0:66:45:0e:4c:ce:
b1:b5:c8:31:6c:6f:4a:fd:f3:ee:90:0b:3e:d4:65:
24:9d:27:c5:cb:03:52:2d:b8:61:f2:b5:4e:17:6b:
08:81:02:f3:3b:fb:b1:d1:99:f5:b4:7c:a1:59:d9:
32:95:8e:2b:bf:51:a4:26:4e:1c:a5:3c:1c:d7:92:
80:0b:b9:e8:fb:cd:79:6b:33:88:05:1b:0a:82:b0:
9e:78:95:8b:4a:60:21:d0:1f:12:54:f7:a5:de:89:
9c:ca:cb:aa:06:10:c0:36:3b:87:ec:d9:a2:8e:8b:
d6:b0:57:45:93:25:68:42:71:49:ab:78:bd:b9:b5:
98:8e:13:42:4b:84:d7:44:e6:be:f5:bd:99:26:58:
96:11:7c:a6:d2:6b:d1:41:11:f5:b0:2d:41:74:69:
b3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:72:41:6F:67:36:4E:28:19:5A:20:B0:D7:CF:1C:DF:E7:2F:33:DC
X509v3 Authority Key Identifier:
keyid:ED:D5:1B:F1:E2:A5:30:00:BC:23:06:05:60:F2:CC:0B:39:D4:96:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dUb8eKlMAC8IwYFYPLMCznUlu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/803040-fba1-452e-b79a-c757b15f1ccf/1/7dUb8eKlMAC8IwYFYPLMCznUlu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7c:63:0d:13:23:c0:7f:8c:f2:56:e5:8a:92:60:a3:e6:a3:
7c:92:84:c8:b9:0c:4d:1e:56:28:f7:87:ec:0c:d3:10:e3:0f:
c7:22:84:1b:7c:e5:a6:0e:e2:11:fe:95:e9:c7:7f:9a:e3:a6:
35:cb:06:bb:66:b0:1d:9f:d9:8c:d7:a8:6d:45:39:13:70:8c:
64:ad:a3:dd:d7:45:f8:8b:74:ef:d5:a3:59:14:b5:7c:be:d3:
48:4b:c7:2b:09:ad:f3:52:1c:4e:5b:2e:0b:d2:9e:c2:51:2d:
93:69:7c:18:04:83:cd:99:77:eb:76:52:4b:ed:a3:c3:9d:1f:
1a:26:f0:97:2e:8b:cd:42:91:b1:71:5c:ad:e2:b7:74:73:1a:
4c:08:6c:0c:fa:94:12:58:a1:ea:4b:c6:9d:4b:b9:51:b7:fa:
c8:97:2f:2a:c0:26:77:cd:68:c5:51:93:50:43:64:15:c0:ea:
f9:cf:9a:11:94:58:9e:46:d7:be:93:52:8c:d2:f5:c1:ce:cd:
25:56:42:12:a2:51:ea:67:c0:2e:83:e2:dc:e2:6e:32:cb:c1:
93:68:fd:f0:59:5f:08:7f:84:bd:09:e7:b6:b9:a8:20:7d:a9:
4a:9c:ce:76:97:98:23:59:3f:35:30:01:4d:70:cb:54:58:89:
c5:37:a4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:10:19 2025 by rpki-client