Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
File: D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft (raw, json)
Hash identifier: aHjXrvgprhmjmUFuVPm1+P/Q2RouV7371YqoOika0uI=
Subject key identifier: 3D:8A:BC:D2:45:0B:54:89:75:EA:04:64:60:D8:3B:39:43:5F:3C:D6
Authority key identifier: 0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3
Certificate issuer: /CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
Certificate serial: 0198485288FFED45F986B395DC678E578B9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
Manifest number: 075B
Signing time: Sat 26 Jul 2025 20:00:25 +0000
Manifest this update: Sat 26 Jul 2025 20:00:25 +0000
Manifest next update: Sun 27 Jul 2025 20:00:25 +0000
Files and hashes: 1: D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl (hash: uDjMGVyDy/nHkYLyPKZcEH0ED9kmnwb32NsxBs8DBUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:88:ff:ed:45:f9:86:b3:95:dc:67:8e:57:8b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fb7f1fd8768e21163542afcf55a83c6980215a3
Validity
Not Before: Jul 26 20:00:25 2025 GMT
Not After : Jul 27 20:00:25 2025 GMT
Subject: CN=3d8abcd2450b548975ea046460d83b39435f3cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:80:a4:31:9a:7e:af:72:89:59:3d:aa:3c:85:
a4:13:6d:65:c1:a9:36:64:3f:23:6a:a8:39:99:4e:
b3:ca:35:f7:2b:bd:a6:9b:27:e3:28:08:6d:77:fd:
49:34:68:13:08:2e:18:5f:74:85:27:7c:30:97:90:
d9:01:42:d7:dc:6c:64:53:66:68:a2:5b:bb:cd:7c:
03:ba:fe:54:54:50:38:c4:19:71:9b:fc:cd:e6:c9:
60:b2:6d:61:77:f6:e9:3d:5b:7a:f6:b0:f0:2d:e7:
0c:60:9a:db:6e:96:d1:50:ea:0a:f0:9f:b5:1f:d8:
e3:9c:92:f4:89:48:11:f2:6f:9e:73:66:28:8e:9b:
a5:6d:96:f6:2d:d4:72:52:7c:c5:d8:80:53:8b:a2:
02:f1:d0:7b:99:46:55:b4:75:06:ed:a2:18:ee:1d:
da:41:cc:13:5d:56:f6:b7:76:dc:b3:2e:ed:43:1e:
ee:30:73:44:2b:5c:5a:d5:5b:31:3f:ad:1a:f9:0b:
07:a1:92:19:c9:67:7b:9c:7a:4c:dd:cb:f3:57:c0:
47:f3:74:64:b9:5e:1d:a2:a5:49:19:2a:30:01:a5:
eb:f5:dc:93:c6:6e:c0:91:28:44:85:7d:18:70:2b:
fd:d9:1b:a0:f2:a3:45:ec:59:e7:ae:4a:db:ec:a1:
41:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8A:BC:D2:45:0B:54:89:75:EA:04:64:60:D8:3B:39:43:5F:3C:D6
X509v3 Authority Key Identifier:
keyid:0F:B7:F1:FD:87:68:E2:11:63:54:2A:FC:F5:5A:83:C6:98:02:15:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fx_Ydo4hFjVCr89VqDxpgCFaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e7c8d0-749b-452d-bff0-a0e28dcfffc7/1/D7fx_Ydo4hFjVCr89VqDxpgCFaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:38:4f:fb:fd:46:7e:33:12:9c:c4:0b:5b:f4:ac:c1:d5:b2:
74:d1:ef:86:85:a2:8b:6e:83:6f:89:3b:f3:77:dc:70:c2:eb:
e8:99:3b:5c:b5:db:6e:90:c6:25:d6:32:b6:4e:ac:ef:41:0d:
a9:64:1c:19:a2:85:96:3d:8d:72:b3:85:ba:12:48:39:18:f1:
8a:50:cc:ab:a8:ff:3b:19:2c:db:b6:7a:9d:68:84:f4:04:f3:
87:1d:79:8d:6f:ce:d9:ae:fe:4b:d2:61:47:a9:ce:79:b3:93:
40:dc:ac:ed:e7:18:58:f1:b0:ec:45:04:28:b0:6f:6a:66:8d:
14:df:7e:d8:64:ba:de:1c:4e:c6:d0:5c:16:28:0a:62:eb:49:
fb:54:e4:c4:f5:7c:8c:76:0d:dc:cd:2e:56:f2:22:2f:08:c3:
14:99:7f:b7:bb:15:be:6c:66:c0:40:30:ac:ed:a7:b0:ca:5e:
f5:63:63:55:1d:c5:79:f6:45:54:9c:bd:45:6c:41:98:e6:d9:
da:41:95:16:b0:b7:80:a1:ad:46:71:f8:9c:ae:c7:19:9c:c6:
ef:14:20:60:5a:38:c1:cc:bc:e0:15:9d:f7:e5:e4:cf:25:65:
60:76:b5:da:2d:5f:14:9b:42:66:23:0e:c0:a2:c0:f2:5e:e6:
7d:bc:c2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:14:59 2025 by rpki-client