Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
File: 7JsJMRGPCL9KNLPgUv2PilweyrA.mft (raw, json)
Hash identifier: zUV8v6+DrLysqVbXjelOVLTdV+Be8l5s8xS/OmNf8yQ=
Subject key identifier: 0C:3E:D7:6F:E3:29:0A:1D:74:39:20:08:52:1A:C1:CB:69:6D:70:DC
Authority key identifier: EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
Certificate issuer: /CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Certificate serial: 0199180943204B20FEC57D92C1816F6C91D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
Manifest number: 1671
Signing time: Fri 05 Sep 2025 04:01:24 +0000
Manifest this update: Fri 05 Sep 2025 04:01:24 +0000
Manifest next update: Sat 06 Sep 2025 04:01:24 +0000
Files and hashes: 1: 7JsJMRGPCL9KNLPgUv2PilweyrA.crl (hash: I3/qhR757/6dHeYMZ9Jhqb41SjyDKaV1GLuLL1fCYaI=)
2: Rzcqv3xRVA9-aH1zwnBZyOoYf_Q.roa (hash: t72fBqaq4f2yTVDlVEtEdGwLwQR8XcXVLoCv44pVZGg=)
3: _1DWCHYZt3IJUPgYrKUZaMInep8.roa (hash: +nXF4K7xpaQsUmrfPkqndd6oPANpWarX/ugo0T1Hdh8=)
4: i79NCekW-Qk2f37cnLIHdMaGWGk.roa (hash: AKre+y+5gfaRsBEkefmwYRikUDRD13fBVo1kOthyjfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:09:43:20:4b:20:fe:c5:7d:92:c1:81:6f:6c:91:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9b0931118f08bf4a34b3e052fd8f8a5c1ecab0
Validity
Not Before: Sep 5 04:01:24 2025 GMT
Not After : Sep 6 04:01:24 2025 GMT
Subject: CN=0c3ed76fe3290a1d74392008521ac1cb696d70dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6b:23:e5:12:51:0f:b1:09:da:31:fd:cb:25:
47:c9:47:79:77:bd:19:ea:1f:ba:c0:73:e2:77:ff:
ed:d6:47:4c:4d:4e:de:06:59:7f:7a:c6:4c:61:f1:
72:85:ff:43:94:60:39:6c:ed:c4:9f:b9:15:b0:92:
9f:93:16:2f:18:d9:87:74:5e:f9:e8:58:89:ff:ff:
bc:c5:2a:9d:c7:9a:c2:ee:00:3c:43:8d:b4:7e:ed:
05:1f:ff:1c:1e:98:5a:3b:da:c7:72:d1:c8:5e:2c:
78:e1:c0:11:d2:5a:de:8d:eb:98:10:d0:15:f5:9f:
61:a5:22:7f:b7:38:13:b3:ac:14:e9:bf:1d:95:27:
d4:b0:b3:4c:23:3c:04:3c:65:1b:42:9d:f8:bc:99:
de:fd:6d:1e:e7:df:3b:73:9e:76:b7:d5:e2:9e:6d:
a9:1c:c5:4b:1e:f3:00:ac:29:7c:5f:8c:19:7d:89:
2c:20:4b:e7:6c:5a:1b:e3:3c:d3:82:33:c5:40:50:
67:94:36:eb:9f:e5:e7:94:85:2a:97:6c:a0:ca:37:
17:bd:85:99:a0:0b:3d:a0:99:26:e9:99:7a:01:32:
67:3e:b6:70:62:97:86:cc:c3:a5:d3:35:a8:3e:01:
0c:c6:63:cb:83:9b:fa:e7:6d:8e:b6:91:9a:8d:f1:
c6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3E:D7:6F:E3:29:0A:1D:74:39:20:08:52:1A:C1:CB:69:6D:70:DC
X509v3 Authority Key Identifier:
keyid:EC:9B:09:31:11:8F:08:BF:4A:34:B3:E0:52:FD:8F:8A:5C:1E:CA:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JsJMRGPCL9KNLPgUv2PilweyrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/0776a2-5e89-4e2c-9370-5b304eec0025/1/7JsJMRGPCL9KNLPgUv2PilweyrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3e:85:0f:46:9f:f4:e5:b1:ca:11:bd:39:4d:cf:94:48:f8:
a4:23:a9:ef:ea:b1:52:0d:22:8d:e3:f2:cd:66:db:1d:ef:a7:
f5:2e:c1:d1:d5:f9:32:e2:4d:b4:c5:dd:e6:45:d1:2e:a7:8c:
8b:46:ae:06:54:0f:1c:83:ce:d4:bf:63:ce:0e:41:47:e3:81:
d1:aa:22:19:d5:4f:c4:37:95:69:10:44:18:9c:24:84:d0:4b:
d1:66:e8:e9:4d:bf:0b:27:6d:3b:c2:5d:da:41:fa:70:cc:45:
c2:b6:af:13:ec:a8:ce:b5:67:17:c0:8e:ec:a5:77:da:cb:b0:
a4:aa:0b:30:c0:3a:8a:b6:25:85:bb:0a:d1:2b:b4:9f:a9:c4:
5d:99:41:df:06:60:43:da:de:8c:f9:38:b4:f6:d7:f5:ba:9d:
1a:30:99:1b:31:00:28:0d:00:22:c5:c6:1e:37:da:8e:89:82:
a7:72:0c:d7:8d:b2:73:57:52:62:da:98:52:ae:ff:d0:32:44:
f5:64:41:34:80:76:d4:11:88:6e:40:ae:21:84:90:9a:19:54:
fc:a1:33:04:e3:08:fc:43:a0:56:3c:26:9c:89:2f:c8:56:9d:
f6:02:c5:ae:0d:35:00:4a:95:db:3b:01:fb:16:a4:84:ca:f2:
ef:d3:f9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:54:53 2025 by rpki-client