Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier: nZvKwcZmidvXcfmj8EBf9JVDSH/tf6qbZMWGAVh18DQ=
Subject key identifier: 02:5E:0D:AB:46:65:60:2B:F1:25:01:51:74:A9:59:5C:21:DD:D9:30
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial: 0199228C789C0A088991D254F6FBD7FB995C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 05:00:55 +0000
Manifest this update: Sun 07 Sep 2025 05:00:55 +0000
Manifest next update: Mon 08 Sep 2025 05:00:55 +0000
Files and hashes: 1: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: AMVUnsL60CZnm6x3nE1IdYc2ALAy4MSgkNsY/pkY764=)
2: Uol637i_aGyEjqsV-G-zBBGF_fM.roa (hash: GHwCfKteNhzkVgd1pFW2ZoKvEFt5K3t+m0uHz8s/0GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:78:9c:0a:08:89:91:d2:54:f6:fb:d7:fb:99:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Validity
Not Before: Sep 7 05:00:55 2025 GMT
Not After : Sep 8 05:00:55 2025 GMT
Subject: CN=025e0dab4665602bf125015174a9595c21ddd930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:c2:3f:d3:2c:b4:ec:a0:d4:64:95:f8:d8:
3b:ab:32:d7:4d:e2:a8:d3:fd:b2:4c:d1:6d:25:bd:
6a:d5:78:8f:c2:98:f5:c7:b3:0c:82:64:c9:f0:f4:
bf:1e:8f:7c:e0:b7:6c:2c:88:8e:65:fc:4f:2e:a0:
bd:ea:76:a7:9d:60:f8:e0:07:c1:c9:58:b7:92:9e:
88:ff:29:5f:3e:22:f0:b2:50:56:84:c7:6d:46:29:
d1:d7:69:dd:22:27:2c:6b:04:1a:1c:71:6f:78:e6:
e4:95:cb:d6:fc:e3:81:1c:40:0e:8c:a0:95:6f:78:
33:b3:fb:b2:18:9f:22:53:bf:1e:1c:98:87:eb:83:
d2:71:a5:34:37:38:d1:4c:68:fe:9d:d6:5a:0d:78:
61:0d:86:95:76:40:b1:96:3c:67:4c:92:da:cb:91:
f2:e5:3c:c1:37:34:be:22:b6:59:4a:39:0c:ac:55:
4b:15:41:72:c7:5c:ac:9a:4f:74:11:f4:54:71:9f:
a8:a8:f8:e1:aa:f6:9c:cb:38:2d:ff:75:72:c3:c5:
77:82:e2:a1:d7:11:e0:bf:4e:cc:2a:70:9f:86:e7:
3d:66:9f:07:c5:2d:66:11:5c:ae:72:02:c5:a9:ae:
ae:70:10:13:22:64:ee:5a:51:d4:4d:49:37:f2:38:
bd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5E:0D:AB:46:65:60:2B:F1:25:01:51:74:A9:59:5C:21:DD:D9:30
X509v3 Authority Key Identifier:
keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8b:b2:9c:b7:c8:c3:35:8a:05:a8:a6:70:e4:ab:e0:14:a5:
9b:79:18:09:24:0f:61:0e:2f:8a:51:99:c6:d3:b7:79:9f:7f:
1d:44:5d:fb:39:34:88:b3:21:7b:a3:e5:94:79:35:62:c1:8d:
45:4c:3e:5d:31:0d:47:78:04:eb:63:2e:1c:cc:4c:6c:07:16:
3c:50:5f:6b:5b:ff:c4:f7:6f:15:0b:c7:c9:7d:ae:bb:ae:2b:
ac:06:1c:18:d3:df:0c:c1:4d:e9:0a:42:8e:fe:de:b6:16:c8:
20:32:54:76:c0:52:dd:d0:5e:5f:f4:53:90:76:f5:05:c1:e2:
76:8b:dd:9b:30:ff:0e:a8:5d:22:c3:02:29:10:bd:3c:00:b6:
44:d4:71:cb:31:b0:32:90:39:9a:b5:06:ac:ba:8c:c0:1c:d6:
53:5d:77:95:af:1f:79:45:1c:27:27:94:48:33:a6:eb:4f:12:
60:9e:b1:3c:1a:81:08:b9:6c:81:83:31:cd:40:57:d2:ef:27:
4b:ad:43:a4:14:8a:82:71:66:55:b0:1c:e5:33:b5:74:21:74:
ec:0f:6f:3d:9b:b6:d7:93:39:cf:88:47:6c:6c:27:d3:66:43:
7a:ba:f2:5a:db:1d:55:99:1c:85:20:db:0a:66:65:05:de:81:
3c:1a:3d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:18 2025 by rpki-client