Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
File: 7FNfTIaAzg26SgPZXmZck8yZzrk.mft (raw, json)
Hash identifier: sFuxRnD9GRAxBQ2Hr20OqqdM3KYJaFQGAE5xtCYS6kY=
Subject key identifier: 51:24:C5:42:A4:47:96:04:59:4A:A4:07:2F:F2:AF:0A:A6:EB:5E:A1
Authority key identifier: EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
Certificate issuer: /CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Certificate serial: 0199239EB33DA877A1F86A1BA77ABFA33F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
Manifest number: 01E5
Signing time: Sun 07 Sep 2025 10:00:27 +0000
Manifest this update: Sun 07 Sep 2025 10:00:27 +0000
Manifest next update: Mon 08 Sep 2025 10:00:27 +0000
Files and hashes: 1: 7FNfTIaAzg26SgPZXmZck8yZzrk.crl (hash: Iovm8fcWxFIVa6XE/Qb+2uSJ/lyBa0g+v9Eg0ump6c8=)
2: xmQ5skD8YtPqUxW5yzoA6bHhREg.roa (hash: JOTsRiuQWzCXcl+Wr2hE6xVJO7LXDTormwzqqmVX6eE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:b3:3d:a8:77:a1:f8:6a:1b:a7:7a:bf:a3:3f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec535f4c8680ce0dba4a03d95e665c93cc99ceb9
Validity
Not Before: Sep 7 10:00:27 2025 GMT
Not After : Sep 8 10:00:27 2025 GMT
Subject: CN=5124c542a4479604594aa4072ff2af0aa6eb5ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:fd:24:23:ab:54:c0:e6:ad:2a:4c:97:a7:d1:
6c:0d:74:87:dc:10:5a:cc:d7:e3:f3:53:5f:2b:9e:
fa:65:42:e3:d9:3a:d0:86:77:45:15:cb:ae:12:28:
17:83:55:84:f2:f2:fd:0f:ea:98:e4:e6:0f:1c:d4:
64:7a:d9:44:dd:8d:60:46:67:27:74:bd:aa:65:99:
1e:cf:7f:7f:65:32:33:f3:c6:50:eb:a3:f7:ce:bd:
a7:b3:0d:01:a8:1a:a8:64:82:c6:ba:b3:ae:35:89:
0b:93:20:c4:bb:40:7e:dd:4a:53:cc:8a:84:94:f6:
1d:47:ac:8f:bd:2b:13:69:f2:6f:7e:66:25:de:b7:
38:ac:0a:67:ea:2b:e9:cf:76:e6:3e:c5:49:1b:eb:
62:f1:a0:ff:60:2d:89:c5:39:e4:d8:e3:96:2b:e8:
f7:62:7d:9c:bf:02:bc:17:0a:cd:a9:ad:c1:fb:f4:
3a:cb:c5:3f:dd:bb:ed:b3:ed:0a:39:b8:b5:4a:56:
8b:87:ce:cf:c0:11:31:29:90:b9:ca:e5:a8:c2:87:
b7:51:28:05:e1:65:a2:7d:cf:20:39:55:1f:4b:71:
91:94:df:f2:ed:10:e2:02:30:0f:dd:44:58:39:1f:
d3:79:6a:a5:bd:f7:d0:30:42:27:48:52:ac:c6:5e:
b8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:24:C5:42:A4:47:96:04:59:4A:A4:07:2F:F2:AF:0A:A6:EB:5E:A1
X509v3 Authority Key Identifier:
keyid:EC:53:5F:4C:86:80:CE:0D:BA:4A:03:D9:5E:66:5C:93:CC:99:CE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FNfTIaAzg26SgPZXmZck8yZzrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7d0029-f330-4a66-bedc-42f2ff859373/1/7FNfTIaAzg26SgPZXmZck8yZzrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:38:8c:91:f4:30:19:34:65:5f:96:db:0c:5a:9c:74:92:da:
e0:ed:3c:f8:33:5d:a0:8c:63:f8:7d:27:25:f4:21:07:83:12:
79:40:f7:8c:d3:c5:09:11:72:2e:c4:09:6a:9d:7a:ae:79:f6:
3d:39:c4:2e:52:69:1a:97:03:4a:74:0f:31:0d:0b:b4:ef:c3:
96:18:56:e0:92:f5:3a:57:c5:f3:74:d3:4d:2c:ee:7e:45:85:
1c:6f:40:2e:5c:e8:5d:fc:7e:1a:8c:5b:2d:f9:7e:b1:e8:e3:
a7:89:91:c2:62:a2:dc:51:6d:c8:62:30:47:dd:38:7b:b3:92:
f0:ba:3a:ed:e3:e3:1a:ef:fe:7a:b1:9d:17:c4:be:5f:33:72:
5f:b9:cf:91:eb:84:8e:b5:d7:87:9f:9d:d8:9c:16:b9:f7:52:
9f:29:eb:ef:64:c4:52:7a:12:be:84:5f:95:be:1b:b9:6d:a9:
bb:5a:c3:9a:b5:47:30:52:2b:32:a8:8e:13:b5:22:b7:94:56:
62:92:6e:21:9d:6d:cd:e8:15:f6:8b:a9:24:1c:74:63:b1:b1:
2e:c2:2c:a1:e5:5e:94:00:5f:65:9a:9c:54:04:9c:a8:26:d6:
a7:9e:e5:58:38:64:37:7d:8d:8d:e5:8f:ec:7b:b9:5f:60:62:
2d:2c:ee:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:11:57 2025 by rpki-client