Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier: gzxXJHuAeVpTDOdn0M28tWGKGdYVZdjOSAlobcWoAoM=
Subject key identifier: 55:09:6C:86:3A:79:8D:B5:0B:3A:4B:C2:D9:12:A9:1F:D5:90:9F:3E
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 019917640E3D5B735953B0255EDF98A6BEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number: 0DDB
Signing time: Fri 05 Sep 2025 01:00:57 +0000
Manifest this update: Fri 05 Sep 2025 01:00:57 +0000
Manifest next update: Sat 06 Sep 2025 01:00:57 +0000
Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: TXVgc8kJcfi9Mfg+gP9cpkibkM9NEAYRCK9SSKWRex8=)
2: _JGWiygFUesXv5bnUwI668QYMo0.roa (hash: tSMCpwe6YrahqMRkzD/bacyXkbLZAIyumbRrGFQA0qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:64:0e:3d:5b:73:59:53:b0:25:5e:df:98:a6:be:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Sep 5 01:00:57 2025 GMT
Not After : Sep 6 01:00:57 2025 GMT
Subject: CN=55096c863a798db50b3a4bc2d912a91fd5909f3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:89:91:83:07:27:9c:60:61:1f:4c:4d:b8:c3:
39:f9:17:f5:41:c2:f4:e6:8a:93:3d:62:01:57:2b:
99:2c:98:9f:45:b0:c1:24:ae:57:5a:7b:0a:6b:1a:
31:3b:c9:23:f0:61:ef:94:b1:43:be:a5:32:a1:bf:
df:27:b3:88:5d:b1:40:98:ae:27:81:13:14:bb:a2:
a5:94:f9:6d:0a:14:b2:e6:9c:cc:58:34:c4:1b:a4:
f0:cd:41:b8:47:7a:0e:fc:f1:b7:b1:74:32:f5:d0:
a8:67:76:f3:d2:4c:3d:91:42:71:3f:eb:af:b9:a9:
62:7c:8f:ca:b3:12:c7:90:85:1a:b1:c6:2c:b2:93:
a8:67:09:ec:89:62:90:55:fb:02:9c:ad:cb:6f:f9:
ae:55:99:cf:12:4c:c5:f0:1f:92:bf:db:14:ab:93:
82:e2:db:00:d2:66:88:00:d8:92:29:a4:a7:65:42:
12:40:f0:1a:4e:fd:b2:66:4e:83:0d:1e:f6:5f:c3:
ed:24:8c:80:dc:1e:44:d1:b5:0c:c6:f5:fd:12:c1:
0b:b1:ba:a6:ef:cf:2d:a3:09:f8:b5:12:f6:51:1b:
fc:4d:ea:dc:45:c6:43:1c:b0:e5:99:ad:7f:f9:a4:
43:ca:e9:dc:39:bf:09:ec:ae:73:53:71:1a:79:c1:
0f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:09:6C:86:3A:79:8D:B5:0B:3A:4B:C2:D9:12:A9:1F:D5:90:9F:3E
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:28:78:d6:2a:ec:66:55:d3:bb:6e:41:52:81:2e:b7:97:a2:
9a:00:61:c4:5e:34:26:3f:97:1f:43:bc:5c:ec:03:f2:02:97:
c3:ab:0e:ff:af:a9:d9:b9:3f:3f:cb:28:fc:87:df:3e:01:e4:
39:a8:01:a4:34:4f:a8:4d:13:fc:c1:6d:fe:5d:68:ac:45:39:
2b:eb:60:10:72:3b:d7:6a:d3:9f:1c:d3:1c:8d:af:78:09:7f:
9b:34:a6:c3:d4:16:91:1c:22:96:55:ef:33:10:c0:8d:ff:a2:
93:1f:a9:eb:52:cc:ce:20:c4:88:2a:3f:7b:5d:1c:8d:16:a9:
2b:e4:34:73:bf:28:08:60:ae:86:45:cc:12:8b:09:12:3e:12:
5c:2b:ae:e5:85:32:b7:32:7f:a5:3c:6d:bb:2f:d0:a3:b3:e7:
97:1d:74:0f:1d:ea:57:0c:6c:8c:bd:d5:b9:90:97:04:e6:03:
6d:0a:de:8b:ea:38:87:56:8e:bd:14:6b:0f:72:44:b7:eb:7f:
7d:79:9c:3b:a8:82:53:ae:19:74:aa:30:fa:fd:b8:90:0b:f2:
78:3b:e7:67:f7:b6:4f:76:0d:bf:df:b6:f2:ef:a5:c1:9c:11:
b0:9b:f0:c2:2c:ea:e5:4e:24:79:e5:53:27:0d:5f:71:4f:33:
ec:da:14:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 05:55:43 2025 by rpki-client