Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
File: s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft (raw, json)
Hash identifier: glQtboWPU3dHxBw7l7m5AZGAtGhD9FCHFWzNhk0ZltA=
Subject key identifier: 09:DE:9A:2A:73:06:DC:2C:A4:C2:E1:7A:78:E7:12:BC:E7:2B:47:04
Authority key identifier: B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
Certificate issuer: /CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Certificate serial: 019923A0E363B850560D8B709BD605B771FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:02:50 +0000
Manifest this update: Sun 07 Sep 2025 10:02:50 +0000
Manifest next update: Mon 08 Sep 2025 10:02:50 +0000
Files and hashes: 1: s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl (hash: i6g0K3uTAvTAFYvb63ZnbWnzvw046gAiANBRXbpzBOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:e3:63:b8:50:56:0d:8b:70:9b:d6:05:b7:71:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3b5e21b845bb1ddfabb3888802c19a622773802
Validity
Not Before: Sep 7 10:02:50 2025 GMT
Not After : Sep 8 10:02:50 2025 GMT
Subject: CN=09de9a2a7306dc2ca4c2e17a78e712bce72b4704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:df:fd:a3:19:ee:f9:f1:d7:67:07:42:58:
c1:e0:7b:93:86:3c:80:2e:fa:f8:8c:f1:f7:67:7f:
c8:cd:9a:0f:e6:e0:3e:30:65:2f:0c:a5:bb:6c:9b:
39:23:94:91:cf:41:13:11:82:b2:1a:4e:2c:27:a4:
b0:d7:25:5e:e5:84:73:1d:34:2c:bb:32:c0:44:22:
50:c0:11:71:1c:25:fd:19:39:74:35:ef:52:87:3b:
39:d0:9f:13:c2:08:4a:0c:24:07:af:d0:b4:dd:12:
3d:f5:12:55:da:01:2d:58:b8:39:53:01:ae:d6:ec:
d4:c4:57:7b:15:27:e7:44:8f:9a:d5:73:a9:71:ed:
00:0f:11:25:cd:31:af:bf:90:be:bf:1f:7f:d2:79:
14:65:c2:bf:cd:62:ab:f5:a7:5a:b6:80:04:78:b4:
d8:4e:78:91:58:6b:ac:3f:c6:25:f3:74:7a:73:b2:
2f:6b:2e:3f:56:5d:49:fc:c9:9f:e0:42:32:86:21:
aa:44:79:86:91:ee:9f:19:20:0a:5a:07:73:c5:10:
3e:7c:22:1a:53:09:c8:fd:f4:00:a7:58:44:7d:8f:
a8:87:c2:38:8f:b6:22:af:28:68:0e:fd:bb:be:27:
6b:26:df:05:71:14:16:0a:4f:47:3d:db:9e:88:34:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DE:9A:2A:73:06:DC:2C:A4:C2:E1:7A:78:E7:12:BC:E7:2B:47:04
X509v3 Authority Key Identifier:
keyid:B3:B5:E2:1B:84:5B:B1:DD:FA:BB:38:88:80:2C:19:A6:22:77:38:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7XiG4Rbsd36uziIgCwZpiJ3OAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/88178a-7f51-4365-aae2-fe50650e1be4/1/s7XiG4Rbsd36uziIgCwZpiJ3OAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:cd:fe:d8:8e:f1:c6:b2:00:91:0b:7f:3a:69:15:19:23:56:
92:30:76:fb:f6:66:60:56:5d:4a:20:0b:40:66:3a:f6:67:f1:
de:4c:65:32:9a:33:00:43:51:24:13:92:dc:96:5b:5e:3d:f7:
bf:8c:ab:dd:fc:48:9a:13:60:64:66:fd:4c:a2:6c:e0:07:91:
c5:1c:63:2c:a3:c0:27:2a:8d:96:1e:a5:94:ee:9c:6d:42:aa:
e3:b9:5f:ca:53:c4:9c:73:e6:5d:6f:c3:82:8e:81:4f:fe:5f:
7f:0b:d5:62:9a:b9:7b:82:85:e7:4e:d0:b1:bf:7d:83:53:1a:
9c:d7:de:10:95:aa:de:e0:c6:a5:a9:0c:44:db:4c:21:f6:50:
2a:30:2a:4d:43:b2:63:86:45:28:17:1b:6e:29:e9:f7:23:96:
d9:f9:12:50:42:3f:d1:d8:7d:ab:ed:0a:27:3d:fd:58:ed:d2:
3b:34:55:24:e4:04:b0:07:4c:cb:e6:af:8d:66:96:f5:95:3c:
7a:84:13:bc:2f:8b:00:ea:64:d1:83:d8:03:74:6b:67:19:bb:
0a:0b:75:2e:44:41:29:31:ae:85:e9:e3:ea:c3:48:03:51:1f:
49:bd:51:28:32:73:31:1b:1a:b1:32:77:13:d9:a1:8e:74:d3:
66:3f:f3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:17:59 2025 by rpki-client