Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
File: 7zGgVPyftLFH6KmL2n5xyBrwvP0.mft (raw, json)
Hash identifier: QNuXZ4mFKAvAxXLHTTFcqTLemaY+ENpLDgC32hXP2vY=
Subject key identifier: 0B:78:9A:D2:48:3F:47:D0:BE:6A:AE:C4:B8:B0:91:AC:44:F9:0A:D3
Authority key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Certificate issuer: /CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Certificate serial: 019921B257711F4465DBD324CEA585D238E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
Manifest number: 1674
Signing time: Sun 07 Sep 2025 01:02:39 +0000
Manifest this update: Sun 07 Sep 2025 01:02:39 +0000
Manifest next update: Mon 08 Sep 2025 01:02:39 +0000
Files and hashes: 1: 7zGgVPyftLFH6KmL2n5xyBrwvP0.crl (hash: APDCDL9efndV2ud5qm5YyrqJ/zvwgWLsjP7GJ1eEjIc=)
2: GCDECUA53das4KdfVgJGCGchlPM.roa (hash: Shwn+wjWeeEfwxR+SQ/E/M2IAWkZBzaDnaEJzGSP9FM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:57:71:1f:44:65:db:d3:24:ce:a5:85:d2:38:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Validity
Not Before: Sep 7 01:02:39 2025 GMT
Not After : Sep 8 01:02:39 2025 GMT
Subject: CN=0b789ad2483f47d0be6aaec4b8b091ac44f90ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:66:b7:87:63:ab:34:bd:b9:a2:53:c7:36:
e2:11:d2:d7:97:cb:59:98:4c:cd:79:58:25:7c:86:
f8:c5:a3:44:99:80:5e:32:15:3b:d5:8f:60:af:2f:
8f:52:03:37:34:48:fe:b4:c3:c5:bb:89:c9:31:02:
4e:f1:a9:a9:e1:bc:30:7e:28:b4:15:22:7f:7e:d8:
fc:0b:45:b8:80:76:be:21:a0:3e:53:54:0c:29:e4:
03:e0:31:5c:25:ed:4e:8f:06:34:94:da:67:c7:91:
56:c0:08:e9:32:c8:45:67:a7:d6:e7:33:11:c5:7d:
4e:9c:c5:aa:43:6a:ab:c8:29:96:73:77:c1:a8:36:
4c:e0:9f:4f:bc:d5:45:e8:c8:cc:7c:b1:d3:1f:94:
f9:ea:5b:e2:ea:6c:68:c9:19:82:34:e5:05:57:1f:
02:7a:78:d4:5e:38:be:a6:fc:7f:82:25:2e:58:a5:
55:26:85:62:75:21:db:61:06:e3:80:4f:3c:e0:7d:
da:0b:3b:cf:6a:c2:df:b1:88:00:07:fe:8e:c9:a5:
ce:85:18:22:1e:cf:0a:d4:0a:9d:5f:43:48:ec:4a:
3f:4c:8c:a5:a3:47:29:e3:8c:fd:bf:57:cf:c0:ec:
d8:9e:d5:4a:e8:d0:18:07:57:da:72:cc:a9:3e:23:
00:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:78:9A:D2:48:3F:47:D0:BE:6A:AE:C4:B8:B0:91:AC:44:F9:0A:D3
X509v3 Authority Key Identifier:
keyid:EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:98:45:a9:01:46:d5:40:0c:5a:4e:d9:fd:d7:2b:0f:df:52:
ae:b8:cf:37:23:d5:fc:bf:b4:5a:78:ec:b3:aa:65:54:b0:f3:
f3:fc:e2:5d:04:f5:2b:93:51:da:9d:15:26:7e:8a:40:93:b1:
c9:11:0a:d7:9e:56:70:b7:b3:f6:07:40:ed:50:1a:e8:18:e0:
9c:18:4b:0b:b1:5c:91:78:c2:84:9b:ac:fa:f2:45:c5:ce:6e:
98:5a:e2:ca:60:7c:70:2a:b2:6d:e8:c1:ae:c9:3c:b0:e3:a8:
3c:40:f3:bd:81:5d:14:dd:8a:54:5d:52:b9:3e:f2:56:a6:9c:
bc:9e:80:e7:da:12:97:ba:e8:08:06:72:9c:db:86:52:d4:fa:
a4:4d:1f:9c:96:be:c1:09:58:5f:62:03:f1:7d:94:90:1f:13:
5d:75:84:0a:d1:fc:f6:da:c4:56:9b:45:ed:88:a0:ef:bb:ba:
cf:62:f2:9b:e3:6e:2f:06:3f:e6:d7:17:08:28:67:e4:17:83:
73:0c:11:7d:2d:d4:a8:66:fe:98:36:f0:7d:34:9b:3f:56:53:
c9:8f:81:13:76:5f:08:7e:78:e0:05:a5:f3:6d:6e:ec:70:20:
c3:8d:d9:e6:b8:44:09:18:70:70:57:70:6c:8b:25:0d:25:98:
9f:88:74:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:21 2025 by rpki-client