Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
File: e7M4LBagpWFZkNS85jTcUWgvLqo.mft (raw, json)
Hash identifier: x26y2HcCc9nvZq3MZvHc3n+t4nC+A2UY+s8Mg026RIk=
Subject key identifier: C8:20:4E:84:DD:67:8C:CE:08:CD:DC:E0:D1:D1:F9:D4:A4:99:30:A9
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Certificate issuer: /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial: 0199326CF8B50BDD8A0F7F90039C686A7140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
Manifest number: 096D
Signing time: Wed 10 Sep 2025 07:00:26 +0000
Manifest this update: Wed 10 Sep 2025 07:00:26 +0000
Manifest next update: Thu 11 Sep 2025 07:00:26 +0000
Files and hashes: 1: e7M4LBagpWFZkNS85jTcUWgvLqo.crl (hash: xcqdzklKNwa4hWokDfot9dnm1LooIpnR9Ul9jVQvi+Y=)
2: qGUXVQ_YIWaxyPrsBvv99Mi17Xk.roa (hash: ahyxLXkQdJnYzPf9suZu/LdsDie1JIPApAeOAOCQ4OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6c:f8:b5:0b:dd:8a:0f:7f:90:03:9c:68:6a:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Validity
Not Before: Sep 10 07:00:26 2025 GMT
Not After : Sep 11 07:00:26 2025 GMT
Subject: CN=c8204e84dd678cce08cddce0d1d1f9d4a49930a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:09:ec:08:6f:e1:fe:e9:de:92:cf:4d:84:
99:e5:0b:1b:a0:fb:26:f9:e8:97:cc:95:c3:03:38:
bd:48:83:3f:f8:0c:72:ab:02:5f:fc:42:61:76:9e:
7a:6a:0a:aa:a0:e8:c2:0d:d9:37:68:f5:df:2d:e9:
c3:be:39:32:c9:d0:34:cf:cd:dd:85:d8:e2:dd:89:
95:8c:23:bf:e5:be:86:d8:09:be:77:1e:fe:f0:58:
15:a0:6e:29:fa:f3:d8:c2:e8:a0:78:2e:63:82:b8:
78:a2:6d:ed:2c:30:73:f6:7f:93:22:f1:27:7d:07:
18:21:7d:b0:df:d3:43:c2:78:0f:1c:15:5c:96:2d:
61:ff:28:d4:15:c5:17:69:b0:0d:32:69:ba:07:2c:
57:40:cd:37:91:fd:27:92:7f:2b:f8:57:2f:52:b2:
2b:7d:4c:c8:30:3c:dd:e9:25:c4:41:d6:b4:5e:9e:
ce:58:56:12:08:c8:73:47:84:4d:ed:7f:f8:c1:09:
31:d2:60:49:d1:5e:b0:49:02:6f:63:42:73:0e:61:
cf:3a:77:df:54:1d:ed:ed:7c:54:90:e3:ea:39:cb:
64:73:70:10:c2:64:b3:35:0b:37:e5:9c:69:2e:9f:
1c:bd:d8:02:bf:9e:38:ae:78:e5:b9:a9:6c:3b:31:
17:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:20:4E:84:DD:67:8C:CE:08:CD:DC:E0:D1:D1:F9:D4:A4:99:30:A9
X509v3 Authority Key Identifier:
keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ed:36:af:7d:46:ae:46:76:0e:b3:0c:d7:f7:95:cd:37:4d:
e2:52:6b:e3:a1:a4:9f:89:4f:08:2f:fa:bd:c7:1c:64:bf:09:
55:33:a2:b7:0e:f9:88:7b:b6:4a:34:b5:82:43:91:d0:f4:8a:
fb:e3:90:ef:eb:0b:7e:61:9f:8a:40:31:a9:36:0c:e3:f9:7d:
24:d7:26:62:d8:15:cf:36:68:18:40:6f:1f:1d:68:eb:05:60:
5f:09:c6:e4:26:b5:bb:a6:fb:ce:e9:d8:99:0a:bc:7c:77:9c:
72:2c:03:a7:f9:38:63:2a:00:8b:7e:f5:12:24:8c:6d:a8:d0:
5e:e7:1d:64:4f:b4:98:e9:75:3c:30:3b:91:d2:7d:a8:91:80:
7e:80:b8:0e:46:c7:8f:19:af:88:fe:06:01:39:05:bc:82:25:
02:25:e0:76:47:1f:80:79:11:fb:9c:5f:7c:9f:b8:dd:59:74:
60:a3:ec:b8:6e:a1:09:aa:15:d0:9e:ba:36:a8:20:8b:3f:1f:
f7:20:8e:fc:5c:53:0e:33:c4:36:0c:06:62:d2:3d:fe:bb:1a:
df:4a:76:97:4c:23:15:3e:08:2b:ed:26:9d:16:18:54:c0:a6:
4c:f8:93:82:88:70:e3:de:5c:0c:d8:da:f0:6a:15:eb:60:69:
5c:18:28:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:43:31 2025 by rpki-client