Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier: dF/zDSlFjKzPNXq/l2qaZqSvnQ3k8eJqGswmv/PcpzU=
Subject key identifier: 85:4D:09:8D:01:5B:2D:6D:42:08:92:9A:2A:60:CC:2B:C9:FA:53:67
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial: 019922556E987D9ADC12A3C5B96BB74830C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number: 0BCC
Signing time: Sun 07 Sep 2025 04:00:48 +0000
Manifest this update: Sun 07 Sep 2025 04:00:48 +0000
Manifest next update: Mon 08 Sep 2025 04:00:48 +0000
Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: WxZ5ehwqJlb3/jg1yFC2onXdUlajxctk9BM35TleMvs=)
2: sQ3JYG1qE-VbpJkkUv7gjERWISw.roa (hash: Eu9amXI9PIYJvHJFlrP4Ds55UyoCv7usyPM4xlXYBx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:6e:98:7d:9a:dc:12:a3:c5:b9:6b:b7:48:30:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
Validity
Not Before: Sep 7 04:00:48 2025 GMT
Not After : Sep 8 04:00:48 2025 GMT
Subject: CN=854d098d015b2d6d4208929a2a60cc2bc9fa5367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:ba:63:6d:23:24:b0:f7:67:d7:d3:44:44:
b2:60:83:50:6f:47:41:83:09:11:a3:33:70:9f:5b:
48:85:3f:06:9e:cf:13:25:40:a1:f4:0b:54:60:ce:
60:f8:99:54:fd:17:a8:62:de:65:ec:19:8b:b1:f7:
17:ae:82:58:73:d3:9b:87:8d:e8:ea:00:ca:3d:eb:
9a:9d:e3:3a:79:18:94:54:e0:b9:eb:e9:a8:72:c5:
aa:08:d0:3f:90:3a:2b:9f:c7:15:8d:10:4c:de:3a:
3a:83:e0:bb:2c:16:9d:f7:e0:03:c9:48:1d:5d:e7:
12:69:15:a2:01:e3:14:cd:0c:b2:98:68:29:fb:df:
80:5f:82:28:81:ca:c0:4b:12:c0:86:1b:65:a8:43:
c4:8a:8d:c6:a9:f5:1f:6e:94:07:30:cf:cc:0d:95:
1f:f9:a4:38:4f:eb:7a:47:70:23:c4:e3:5e:74:03:
ee:f5:2e:3c:69:67:34:88:90:b9:ae:29:4d:bf:8e:
f7:3e:fd:20:bf:99:19:cd:fa:52:02:10:98:22:b6:
30:95:2b:73:a7:53:30:3e:bc:a3:ed:7f:f7:d8:cf:
2c:48:c3:2d:a9:e5:94:4b:a6:05:37:59:22:b3:3c:
18:45:9a:cf:3d:7b:c1:b7:4f:bb:6f:1f:a6:f0:c1:
59:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4D:09:8D:01:5B:2D:6D:42:08:92:9A:2A:60:CC:2B:C9:FA:53:67
X509v3 Authority Key Identifier:
keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bf:1b:6f:eb:f5:f2:2f:b8:fe:a4:a5:6b:64:ce:9e:29:9e:
f2:f4:d2:cb:41:26:cf:aa:6b:6f:66:12:c3:2e:e4:2e:a0:40:
a0:73:af:0d:60:09:33:7f:d9:cd:55:bc:ce:f6:5c:f5:78:78:
58:91:29:11:d1:d0:51:83:0d:b4:e5:b5:89:21:92:cb:2a:91:
d2:2d:cc:23:48:12:4c:c7:35:fb:50:14:4a:66:f2:8e:ad:c9:
08:59:84:73:f6:30:14:cf:d7:a3:fe:58:93:d5:a7:2b:71:a7:
b3:90:7b:1b:dc:70:09:eb:bd:a4:f4:23:85:f7:49:72:82:8d:
55:70:86:a6:f8:9b:85:31:f1:d1:21:9c:a3:1d:14:72:d8:ec:
93:46:26:70:13:ea:15:2d:27:eb:c4:18:dd:40:9b:4a:14:4e:
cb:c2:6d:e0:69:5c:bf:a3:fe:32:e4:41:72:2c:de:01:21:ee:
fa:cd:f6:e4:51:65:61:50:27:9c:b9:17:c3:dd:11:4b:7f:4c:
63:d1:6b:91:cf:79:ce:18:a8:02:ab:fc:2a:1f:17:17:38:34:
ac:33:58:50:e6:97:47:4a:4e:aa:d2:cc:fe:d3:58:24:9b:df:
5c:4d:fc:76:2c:f3:dd:99:3d:6c:42:e6:c3:9e:3b:5f:87:1a:
74:ba:c4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:35 2025 by rpki-client