Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
File: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft (raw, json)
Hash identifier: 3MHoMyEdGuQ/M0XW0fURKmu4tgoEqoF8dzO48LWkBY4=
Subject key identifier: D8:BA:2F:F4:AC:7A:69:59:CF:CE:16:B2:A1:CC:AF:C9:73:A3:21:A5
Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
Certificate issuer: /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Certificate serial: 0199277D49D85B86C177B4744CC81F7D8E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
Manifest number: 03E9
Signing time: Mon 08 Sep 2025 04:02:25 +0000
Manifest this update: Mon 08 Sep 2025 04:02:25 +0000
Manifest next update: Tue 09 Sep 2025 04:02:25 +0000
Files and hashes: 1: 7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl (hash: PkP4nl+g5NyvlPA3+vfDi9BgxuETwO2Evy+F1vBXS4E=)
2: m0FdEd7qA5TjbE6u-KPGxVuqdzo.roa (hash: YB/7zgnoht2aguJRWPrUhzZwqPvY+5PbEOGpRfTLI+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7d:49:d8:5b:86:c1:77:b4:74:4c:c8:1f:7d:8e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Validity
Not Before: Sep 8 04:02:25 2025 GMT
Not After : Sep 9 04:02:25 2025 GMT
Subject: CN=d8ba2ff4ac7a6959cfce16b2a1ccafc973a321a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:6b:44:92:8e:f8:b1:c3:c5:76:75:c9:a1:
d4:1e:23:9a:46:60:bd:9a:7a:50:77:7b:26:bf:de:
c5:95:f1:72:0c:83:dc:0d:45:86:66:f2:44:a6:09:
4d:fb:6a:d7:19:13:39:cd:8f:fb:55:f6:eb:dc:64:
bc:23:80:9c:58:1c:ab:89:3e:9e:00:af:61:3d:d4:
aa:d4:b5:0d:11:7d:b0:65:8c:e7:76:01:b5:a7:a3:
fe:0b:e8:2d:e8:4c:08:92:7b:89:70:a3:61:e0:01:
19:f9:59:61:5a:06:ac:a4:a3:36:ba:36:79:04:cc:
73:1d:c7:9a:67:5c:39:9f:5b:67:71:a8:42:f9:e3:
be:2c:3e:d4:de:ab:be:8b:7a:40:1a:65:cc:7a:ac:
c4:ab:e8:d6:b3:d3:6a:b7:1d:31:4e:3b:a2:f8:51:
2e:9a:2c:14:83:54:78:cc:aa:47:3f:fd:34:1b:3c:
5b:47:85:9b:20:60:9b:a6:db:75:2a:7f:94:73:df:
ff:f6:f0:c7:e1:72:f1:9c:a1:5a:9e:a3:dd:72:e2:
f9:bc:ab:bb:d9:20:0b:0f:ce:de:51:e6:83:0c:80:
bc:30:c3:a0:9b:66:09:d1:1b:d1:93:8e:ef:03:f8:
6c:e2:5b:38:27:47:69:82:f6:d8:f8:4b:c4:09:b0:
66:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BA:2F:F4:AC:7A:69:59:CF:CE:16:B2:A1:CC:AF:C9:73:A3:21:A5
X509v3 Authority Key Identifier:
keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2a:73:01:1d:cb:af:8c:b2:5b:18:77:b3:a1:cb:55:88:ea:
19:cc:1d:21:34:ea:da:d9:55:d4:20:07:b0:2d:e5:54:09:b8:
e8:21:db:e5:1d:ef:8b:b8:6e:c2:d8:6f:b2:ff:54:ab:84:a7:
06:93:58:e3:dd:cc:fe:af:46:1d:15:ea:4d:c7:07:2c:1d:67:
be:c3:64:6a:7f:87:15:1e:25:d7:f4:a5:18:b8:be:d5:34:cd:
05:c6:2c:20:3b:e7:e2:31:c7:07:e0:18:c9:26:0d:59:28:4a:
89:f9:bf:c9:0b:e1:b1:8e:97:18:b3:22:2f:33:34:18:db:be:
0b:f7:e2:a6:90:3b:d9:94:b9:60:64:6a:f6:44:ac:77:c4:e3:
fe:32:f8:b2:83:a8:2d:53:17:2b:0d:a0:ed:f1:46:c2:79:a0:
df:82:b5:7b:7f:4b:80:f6:11:da:59:87:b8:04:18:d0:4f:2f:
8c:c3:83:5b:c2:88:41:93:39:24:9a:27:8e:1a:63:bc:20:4d:
87:81:a8:c0:f3:05:f3:6e:d1:30:53:cc:e3:2b:66:6b:13:e6:
3f:a1:78:70:e5:55:92:fd:45:69:c7:36:fa:b4:c3:37:fd:16:
f2:90:c5:d1:52:6e:f6:fa:bc:5d:67:56:d9:e3:8a:d0:1b:e1:
ce:13:d5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:38:58 2025 by rpki-client