Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json)
Hash identifier: Ulyt3yPbzmH7GzTueg7wwPYaEYC9ixdfSV0jWk+dAPg=
Subject key identifier: 7D:CB:18:76:1E:1D:8D:CF:2C:C2:DF:AD:02:B4:F2:A3:12:CB:D1:0C
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial: 0199239F3FBA1A44682920CAF7C40B7C9896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
Manifest number: 0D68
Signing time: Sun 07 Sep 2025 10:01:02 +0000
Manifest this update: Sun 07 Sep 2025 10:01:02 +0000
Manifest next update: Mon 08 Sep 2025 10:01:02 +0000
Files and hashes: 1: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: ViKHmZsWvLSyC19v89z0DXSMWkzc/JExu976xY0RhF8=)
2: f56823CiqLOMuTriNLS3PUZ78yU.roa (hash: jqCq9kSPvKsgvdkfpEOf8qz0/6Off+XucTySJaLEm7M=)
3: zKhksjQURk5K1Dod96pBNAB3OII.roa (hash: gundq1JGdYbfKX8ieC3GIfS0gF7vi8HY0pmpJJSYlFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:3f:ba:1a:44:68:29:20:ca:f7:c4:0b:7c:98:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Validity
Not Before: Sep 7 10:01:02 2025 GMT
Not After : Sep 8 10:01:02 2025 GMT
Subject: CN=7dcb18761e1d8dcf2cc2dfad02b4f2a312cbd10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:11:ea:b9:64:e0:09:2b:6e:e9:13:d5:9a:14:
31:fe:6e:1d:06:02:a9:d6:0c:96:82:bf:2b:fa:bb:
39:0e:4f:f5:f8:56:91:7d:37:a8:08:55:33:fb:c4:
b4:80:bc:48:f2:f2:1b:4c:ed:3e:27:eb:16:04:f7:
e9:93:1e:79:72:48:4f:20:de:0b:4a:6d:e9:1c:bb:
9a:b1:5b:f6:0b:75:98:19:98:53:09:0f:4e:03:14:
70:d6:99:51:0c:51:4c:d4:25:f1:8b:24:3b:86:7b:
45:7d:49:00:a1:42:75:08:0c:2a:ea:7a:75:ac:de:
29:4c:47:31:5c:08:f7:90:22:99:a1:9b:1e:52:5a:
40:0b:35:36:dd:d8:80:3f:87:7f:28:1d:8a:32:b9:
75:ca:fa:4a:7f:27:e3:d7:8f:2a:4e:24:6f:b4:5c:
d4:35:f5:0c:5b:15:2b:bd:68:ee:5e:f8:01:78:4e:
9f:1a:04:4f:c4:98:3b:7e:7d:ed:ab:f6:1e:1d:0d:
15:23:b0:36:d4:35:dc:bd:e0:9a:3a:f9:f5:82:ae:
08:c7:85:1f:5d:8e:6e:4b:70:e2:ad:43:66:bf:57:
f8:83:94:6f:f5:f7:71:3f:6f:03:cd:ea:0a:00:4a:
74:01:8e:b0:da:af:bc:06:11:02:fa:c0:01:74:a1:
23:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CB:18:76:1E:1D:8D:CF:2C:C2:DF:AD:02:B4:F2:A3:12:CB:D1:0C
X509v3 Authority Key Identifier:
keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f4:ad:2c:19:cf:c1:59:e8:ae:96:f7:84:4f:35:eb:e6:a2:
94:fe:2c:2d:d3:4b:5e:a2:75:10:86:42:7a:28:ad:14:89:8f:
68:2f:fb:7a:7e:e3:8c:60:ea:75:a2:75:15:ce:b4:f2:74:ea:
4a:cc:07:1e:31:30:df:e5:5f:21:7a:19:e8:bb:0e:14:18:f6:
69:92:d5:7a:04:e6:f7:32:62:39:41:66:3d:bb:dd:b1:c5:40:
32:69:38:b0:98:07:fe:df:d9:0e:18:6e:15:7e:97:ab:ff:24:
d4:09:fa:8c:b3:88:57:02:e8:ac:a9:86:6e:e1:42:fd:86:1b:
1a:cf:04:a6:e5:6f:ec:6f:f5:1c:a7:6b:aa:93:17:8e:c1:d6:
b6:b7:e7:7d:28:8b:ff:ce:8e:67:6c:a6:3f:1a:ac:2d:f2:8b:
62:a1:2b:61:da:bf:b5:47:cc:cb:3f:36:82:39:01:1b:d2:6d:
60:71:23:5d:a0:75:ab:28:f6:4b:90:a1:13:ea:fe:d8:3e:a9:
6a:d2:d2:8c:71:c7:c3:cc:8e:e0:d1:12:81:3a:88:f4:d4:48:
a7:1a:04:79:a6:f3:64:00:6c:12:1c:f2:bf:18:ef:f1:3d:ea:
fe:fe:b4:9d:f6:08:be:af:6f:e8:b1:df:3e:d9:2a:3e:50:9b:
e9:24:48:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:02 2025 by rpki-client