Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
File: 7O2DGd7RXV8LarRBAJ3hmxnRUps.mft (raw, json)
Hash identifier: LRzlNCxkK0WTNB2IUNe2XlNN0KbcMLsz2CQQyIadWwg=
Subject key identifier: 3F:93:28:0B:E4:83:54:D3:43:46:87:CF:46:B2:E6:FC:67:9D:0F:2F
Authority key identifier: EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
Certificate issuer: /CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Certificate serial: 01992255C62E339D38D2F46A6033743F9FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
Manifest number: 0676
Signing time: Sun 07 Sep 2025 04:01:10 +0000
Manifest this update: Sun 07 Sep 2025 04:01:10 +0000
Manifest next update: Mon 08 Sep 2025 04:01:10 +0000
Files and hashes: 1: 7O2DGd7RXV8LarRBAJ3hmxnRUps.crl (hash: c75Xx6xYncArnd1euhwIj1NmpbHWbg9Kf8Ibr5CYzpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:c6:2e:33:9d:38:d2:f4:6a:60:33:74:3f:9f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eced8319ded15d5f0b6ab441009de19b19d1529b
Validity
Not Before: Sep 7 04:01:10 2025 GMT
Not After : Sep 8 04:01:10 2025 GMT
Subject: CN=3f93280be48354d3434687cf46b2e6fc679d0f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:12:7d:fe:ec:60:e9:be:87:13:24:a7:5b:
30:f6:c1:ca:9f:5a:53:46:5f:5b:fb:49:5b:2c:93:
4e:22:0c:3a:b3:10:dd:f5:92:13:78:34:7c:8e:20:
f4:96:15:5f:d2:70:c5:dd:e8:c7:f0:14:a2:de:fe:
74:76:51:a1:c3:44:48:b2:0e:f9:ab:db:77:04:04:
89:b1:04:21:bb:16:1b:c3:43:aa:d4:2c:5c:f7:60:
a5:89:2a:05:10:86:44:2f:ce:0f:b6:a4:74:15:3a:
4b:3c:72:77:74:29:e1:47:8d:9e:b4:9f:1c:db:51:
f6:7c:79:8a:25:2d:c8:38:22:06:a4:a9:e9:66:61:
db:7a:16:3a:58:04:18:a0:f3:a9:46:4f:31:fc:bf:
67:cf:4b:aa:bf:72:4f:0a:86:47:31:37:c9:32:69:
c3:a1:36:a7:50:fb:56:b0:d0:a9:41:f2:58:55:0f:
12:37:87:80:cb:90:af:b1:ef:09:05:fd:ed:fd:af:
4f:e1:c0:64:a5:48:69:5a:58:da:b6:7c:a6:1c:0e:
f7:fc:62:fa:84:a5:cd:6f:04:8d:b8:80:b8:5f:4a:
0b:7e:84:2b:2d:e3:7a:11:af:a3:27:b0:30:85:b3:
1d:26:0d:ff:08:21:45:34:22:29:52:ac:e3:19:f2:
7a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:93:28:0B:E4:83:54:D3:43:46:87:CF:46:B2:E6:FC:67:9D:0F:2F
X509v3 Authority Key Identifier:
keyid:EC:ED:83:19:DE:D1:5D:5F:0B:6A:B4:41:00:9D:E1:9B:19:D1:52:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7O2DGd7RXV8LarRBAJ3hmxnRUps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/1f6ed2-50ca-4d3c-bb57-7069f4382cab/1/7O2DGd7RXV8LarRBAJ3hmxnRUps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:cb:81:81:0f:2a:6e:30:15:22:bf:69:5d:42:ed:cc:9c:b3:
6d:bb:f3:ba:8a:f1:09:3a:95:50:55:c9:f0:25:3d:fb:bc:04:
95:66:05:d2:5b:4e:d1:7e:5a:34:76:31:ce:44:38:8c:97:69:
83:5c:92:d3:59:39:24:c8:fd:5e:0c:f2:26:63:3f:f2:b7:91:
f1:f7:ca:12:9b:54:41:cc:21:8a:96:6b:00:cb:3e:7e:45:03:
4a:8b:7b:16:25:e7:9b:43:5a:aa:a7:09:1f:b5:78:87:99:a3:
a7:56:d5:d9:1b:9e:7f:8a:fb:04:53:a6:16:f6:ba:a7:16:09:
1d:21:99:24:14:fb:1a:92:cb:d6:28:e3:67:f8:5f:a2:47:d3:
16:13:e9:28:8a:b9:95:fe:ec:83:5f:34:14:3b:ee:23:85:9a:
50:fe:20:47:d9:79:a7:a7:47:d7:df:a6:da:09:57:94:6f:53:
bf:bb:1b:b2:42:ca:f5:8b:80:0a:c1:a6:3f:91:2e:65:99:26:
e2:4f:88:a2:7c:5e:95:6f:89:47:6e:1e:4c:ac:be:00:89:a5:
4d:30:6e:50:eb:17:cf:1c:5c:43:d7:8f:25:e2:c4:98:33:a2:
46:57:77:3d:ae:b5:48:1d:04:2c:49:82:c8:ee:b2:c1:45:06:
c6:1a:18:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:19 2025 by rpki-client