Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json)
Hash identifier: i5Iq4wIzKtMzhKoD5UE1gGwA/f3XuE8a89vAD9acy0Y=
Subject key identifier: 9D:3A:FA:4B:A6:CC:4B:31:5F:8C:CC:C8:16:01:DD:FA:1E:4B:F2:1B
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 01992EC75C75F0C70FA54E4ECB140903766D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
Manifest number: 0A70
Signing time: Tue 09 Sep 2025 14:00:41 +0000
Manifest this update: Tue 09 Sep 2025 14:00:41 +0000
Manifest next update: Wed 10 Sep 2025 14:00:41 +0000
Files and hashes: 1: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: zoD5MeZ+ooxRC8Dpi2SH5ofubdGrPXkPA6Mq0sL7qD8=)
2: BDuB9Tdy1bkdHiiKbCLGOLXhLgM.roa (hash: /BEhxsli53ZdIFQcNasA4TXy3qdR7JtPphvJxMDLbVM=)
3: o9u62C62uEKyliiaqilmlCLeC54.roa (hash: IbrVnLHNGZTQPhCJ7F+rZGHYI9Autu0dmXqnxbbk8VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:c7:5c:75:f0:c7:0f:a5:4e:4e:cb:14:09:03:76:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: Sep 9 14:00:41 2025 GMT
Not After : Sep 10 14:00:41 2025 GMT
Subject: CN=9d3afa4ba6cc4b315f8cccc81601ddfa1e4bf21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:89:b6:a3:db:dd:75:33:3c:55:da:43:c9:
e2:f8:ba:47:bf:f2:91:1b:26:88:93:ae:5f:36:61:
ab:7c:f4:c0:31:b6:85:df:a5:39:ea:b4:d3:a8:5b:
b2:8e:12:6d:14:79:8b:a1:be:aa:bc:37:b9:28:a8:
1f:0f:b8:cd:95:f4:74:2d:db:60:1d:2d:4c:e5:3a:
2c:96:d8:cb:80:f7:5e:e4:c4:a2:f5:a4:99:7d:4b:
56:f9:7e:a6:5e:d9:04:f0:f3:85:7b:ad:69:c8:f2:
62:05:1a:8a:f0:ef:e6:ee:c8:8e:8b:fb:b0:f3:00:
3d:54:30:82:de:88:6e:60:6d:da:0f:43:9e:09:35:
83:d0:34:57:95:39:9b:7b:e5:a2:47:ba:f3:42:9a:
93:32:3a:de:0e:25:13:fa:93:8e:aa:5d:4c:53:77:
af:d9:23:47:8a:6e:61:52:47:63:b8:5f:b4:4e:5f:
28:25:3a:f2:29:fd:9f:9c:42:21:fa:da:47:7e:2c:
e5:1f:59:58:70:e7:ba:38:4c:45:4b:0e:b4:20:7b:
be:4f:ac:1d:49:d5:83:99:ff:7d:22:ab:25:fa:05:
6e:b7:d6:ab:e6:1a:3f:57:f6:dc:27:55:ff:f5:33:
07:ec:ba:5e:20:54:62:d0:e8:23:7f:63:68:75:5e:
7c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3A:FA:4B:A6:CC:4B:31:5F:8C:CC:C8:16:01:DD:FA:1E:4B:F2:1B
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ed:de:3c:66:d2:0c:31:b2:eb:ef:e8:27:6f:f5:33:1d:79:
c6:fa:d9:2d:0f:fb:ae:af:9a:0e:38:f1:f2:b6:dc:6a:62:81:
09:bc:32:84:ce:9a:a0:30:31:ee:03:b3:11:66:34:56:4f:f9:
93:70:1a:60:8b:55:7d:63:54:7d:15:ac:42:b8:47:7e:19:da:
87:1f:24:76:06:29:fd:96:af:94:a3:e0:e5:6b:7f:a6:d6:9a:
c5:ee:2f:30:55:3f:e0:c1:80:89:48:1a:5e:df:60:76:9f:5f:
77:f9:01:ab:28:ca:33:69:38:ea:3a:9f:64:a2:cd:e0:14:3e:
c2:a6:f7:7d:c8:f9:e8:18:d1:47:26:1b:06:03:82:1a:f9:b8:
bc:6b:7b:7f:1f:40:25:50:cc:fd:ef:00:6c:9c:bd:ba:42:17:
22:9b:38:86:f6:ad:37:88:19:89:d5:54:f3:58:85:c4:15:f9:
dc:48:33:88:46:30:5d:8d:4e:c7:05:e6:b5:dd:c8:aa:54:b5:
11:a7:25:b7:d9:33:5e:87:12:71:fe:29:2e:78:7a:98:55:b5:
91:93:30:be:36:a2:bf:f5:ce:1f:11:c7:26:aa:0a:fa:7a:03:
8e:c0:2e:b9:90:6b:ce:46:28:d9:a6:e7:93:a8:d4:7c:76:10:
d2:5e:08:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 16:17:29 2025 by rpki-client