Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
File: 7fBEw2PXiOdDNOE24DzH_R5JohY.mft (raw, json)
Hash identifier: 5qzS35lhyeeKPr1wZ1wWiaU1G55kICFtInuxRFvvV6M=
Subject key identifier: D2:C3:2E:AF:DE:18:FA:44:4D:04:E4:AB:33:C9:87:81:F4:65:8B:2C
Authority key identifier: ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
Certificate issuer: /CN=edf044c363d788e74334e136e03cc7fd1e49a216
Certificate serial: 019921B16CDB69C1AF3B3E0E9DBF933EBF14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
Manifest number: 08E7
Signing time: Sun 07 Sep 2025 01:01:39 +0000
Manifest this update: Sun 07 Sep 2025 01:01:39 +0000
Manifest next update: Mon 08 Sep 2025 01:01:39 +0000
Files and hashes: 1: 7fBEw2PXiOdDNOE24DzH_R5JohY.crl (hash: fY2wGPceFASFaFEBaMItOmX5N2feo1IzLyfMP6LNiFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:6c:db:69:c1:af:3b:3e:0e:9d:bf:93:3e:bf:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf044c363d788e74334e136e03cc7fd1e49a216
Validity
Not Before: Sep 7 01:01:39 2025 GMT
Not After : Sep 8 01:01:39 2025 GMT
Subject: CN=d2c32eafde18fa444d04e4ab33c98781f4658b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d3:68:2a:2d:62:43:58:d0:1c:0b:40:e5:12:
87:6c:94:e5:c7:ad:09:c2:0e:22:4a:87:ff:7d:c7:
10:84:eb:ca:b8:cb:0d:ac:9e:88:2e:0b:f5:bf:f4:
1c:8a:f4:74:b7:aa:d1:09:2b:d7:63:9f:6b:e9:c7:
9f:9c:63:41:53:89:c7:82:c6:4f:63:e5:52:ae:4f:
5a:2d:d5:8d:06:c5:56:12:7b:8c:7c:a6:e1:3a:cc:
88:15:99:d9:48:8e:a6:6a:19:aa:fe:c5:68:b2:11:
a1:89:b3:1e:90:3c:56:91:75:c6:ea:04:cd:0f:5a:
a7:0b:d6:f5:a4:9b:f1:f1:6e:fc:c4:84:a4:ee:04:
76:d6:0d:42:1e:9f:20:4d:85:d3:20:cb:95:46:07:
73:f7:c3:94:4e:41:96:83:94:d7:3b:1a:4e:5e:eb:
13:f7:6f:64:dd:c8:dd:ce:15:d4:cd:9a:31:e2:75:
b6:b9:17:d1:09:72:55:89:65:d5:2b:9c:d0:00:ec:
63:33:a3:57:38:11:0e:44:9a:da:f7:64:25:71:56:
de:42:3f:02:a6:02:76:54:63:7c:2d:12:8d:4d:da:
39:ed:1f:ad:14:65:22:14:9e:a5:11:0f:e3:e6:ea:
00:f2:e3:dc:8d:1a:23:19:a7:85:7e:ec:09:e2:e7:
78:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C3:2E:AF:DE:18:FA:44:4D:04:E4:AB:33:C9:87:81:F4:65:8B:2C
X509v3 Authority Key Identifier:
keyid:ED:F0:44:C3:63:D7:88:E7:43:34:E1:36:E0:3C:C7:FD:1E:49:A2:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fBEw2PXiOdDNOE24DzH_R5JohY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/340491-d1d2-432c-956d-2fe1594ddc9c/1/7fBEw2PXiOdDNOE24DzH_R5JohY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c4:bd:7a:30:95:45:cd:99:17:f5:cf:58:bd:e9:53:cc:73:
25:d5:49:86:ee:37:5a:d5:e6:d0:cc:54:dc:a0:70:fb:db:95:
7f:50:a9:ae:ea:81:b7:45:47:12:3b:ee:45:68:56:66:4d:14:
48:2e:66:f7:aa:34:ec:00:05:44:be:42:e6:e6:15:ee:c4:27:
63:02:c9:67:a0:65:fd:ad:c6:66:61:63:ad:ff:8c:6e:22:66:
76:c8:d7:55:ad:15:2c:f7:f3:43:c1:14:9b:cd:9d:d4:dd:35:
7e:dd:08:0e:af:c9:a2:18:3d:47:4c:b8:4b:83:2e:cf:97:fc:
d7:c9:16:fd:6a:bd:29:cf:c0:e8:3a:dc:ad:90:0b:98:1c:e1:
39:5b:4c:55:4d:cd:76:89:c4:9e:30:4f:ed:01:e4:10:c0:6d:
9b:3a:64:26:bc:82:43:9c:ef:78:1f:99:c8:54:56:e5:f9:90:
c3:4e:59:16:07:53:c4:2d:b5:15:5b:14:ba:a2:cf:a7:cf:0f:
84:1e:ac:89:c4:af:d3:8b:73:9c:0e:3f:8e:9b:53:9a:f5:5d:
16:26:35:08:8e:81:e9:8c:ce:d8:22:7b:bf:c8:4f:cf:51:7e:
50:c9:3d:15:d6:fe:ef:78:36:53:39:86:6c:17:f8:6a:f2:09:
11:33:18:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:13 2025 by rpki-client