Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
File: n7edKYEQtvsxkwHrwivxgOcFR5Y.mft (raw, json)
Hash identifier: GygTgHscm8KBbK8/wfN5+z58MI/D7bUcA52GLVcqA7c=
Subject key identifier: 2F:DB:51:80:86:FB:92:B4:E5:DD:6E:51:CA:8B:7C:0E:72:71:95:75
Authority key identifier: 9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
Certificate issuer: /CN=9fb79d298110b6fb319301ebc22bf180e7054796
Certificate serial: 019921E7ABB8AE21280DA2D1AAF1455E12F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 02:00:54 +0000
Manifest this update: Sun 07 Sep 2025 02:00:54 +0000
Manifest next update: Mon 08 Sep 2025 02:00:54 +0000
Files and hashes: 1: 2zu7oCjT-KVZRR2HzaLDOvNTLj0.roa (hash: D7mApAX4YmoA8emuHbADon4rwd+qyVDHh/ZdGBtTqIs=)
2: n7edKYEQtvsxkwHrwivxgOcFR5Y.crl (hash: IfjMunoelCiVa1oIrnP6bKN6tEATkpkL2/ZyZZhAfyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:ab:b8:ae:21:28:0d:a2:d1:aa:f1:45:5e:12:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb79d298110b6fb319301ebc22bf180e7054796
Validity
Not Before: Sep 7 02:00:54 2025 GMT
Not After : Sep 8 02:00:54 2025 GMT
Subject: CN=2fdb518086fb92b4e5dd6e51ca8b7c0e72719575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:29:8f:57:07:f1:3c:e5:0b:81:84:c7:06:9b:
fb:b9:21:f9:0d:a0:5c:a0:c5:d3:78:6d:5c:d8:e0:
89:99:c4:bf:21:08:01:00:46:65:e1:07:a6:61:d0:
77:52:ba:fd:1c:c7:fc:44:dd:67:7f:76:96:7d:8d:
1a:fc:cb:c3:31:1f:6a:1a:97:50:01:10:91:5a:f1:
24:f7:10:53:ce:19:4a:1a:af:9d:b8:b9:dd:00:30:
bd:a3:6f:43:46:2e:39:3a:9a:09:23:4b:d2:d2:64:
d4:3b:db:fd:cd:89:5e:c0:ec:02:c2:d4:44:46:17:
75:b3:8d:22:35:9e:60:b3:3b:da:64:ea:aa:df:d3:
4f:e9:5d:fd:02:83:6b:46:27:da:fc:62:03:cc:e8:
85:1f:07:70:bb:e3:69:02:7f:fe:3b:70:99:81:85:
b3:ed:7e:65:f8:7c:b3:28:5d:63:85:5e:20:1a:1f:
db:4f:be:a8:7a:95:e1:a7:70:b7:1b:8e:b1:57:7b:
c0:2a:17:67:35:be:5f:f8:33:ab:d7:24:47:7a:a0:
9c:45:97:0d:64:53:9b:7c:5b:fe:85:80:6f:17:0a:
39:33:12:56:a8:82:28:23:1d:ba:0c:a3:84:28:ed:
90:69:e4:1e:c0:0a:b3:aa:78:4d:a2:e1:16:f0:4f:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DB:51:80:86:FB:92:B4:E5:DD:6E:51:CA:8B:7C:0E:72:71:95:75
X509v3 Authority Key Identifier:
keyid:9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:44:90:bd:0e:96:85:f6:7a:e7:d9:3d:b3:c8:29:2a:3b:93:
82:7e:f2:ed:99:ea:bc:da:fd:31:46:7c:e8:1b:c0:33:31:78:
09:4e:e1:2a:d8:fa:1f:9f:21:8a:16:15:c5:5b:1b:b1:80:1a:
7b:ca:8c:ae:2e:bc:e6:d2:28:58:8b:a5:f0:c1:e9:cd:d5:33:
ef:3d:ac:48:10:c2:3b:35:7f:f2:8e:4a:94:c4:93:b2:39:cd:
4d:11:88:f2:56:a1:72:09:a1:71:06:dc:d9:31:c3:ca:55:11:
be:74:c9:aa:1f:b3:49:33:3c:d1:dc:cb:a3:eb:28:00:d4:c5:
86:a2:23:60:35:d3:ca:71:62:e5:a2:08:e9:98:f6:66:71:cb:
cc:74:07:38:b5:1e:33:7a:c7:70:12:57:92:e2:6c:38:78:44:
f9:b0:29:79:73:6e:e0:dd:45:dc:b8:88:ba:4e:d7:75:1b:0f:
3b:f9:af:6a:1f:a9:a6:19:0e:b4:4e:37:cc:9e:9e:41:e3:57:
88:34:dc:65:ba:da:f1:5c:27:72:69:62:ac:94:9b:fb:d9:01:
d8:73:67:22:dc:e1:cb:f4:29:a8:2b:0c:d5:31:bf:b2:66:8b:
ca:ba:91:e8:0c:18:bc:bf:2c:ae:d1:e2:a8:de:5d:8b:77:28:
aa:63:20:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:28 2025 by rpki-client