Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
File: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft (raw, json)
Hash identifier: u4+T/5upISIqZ+EZXi23BQiKelx+YIzwxYjhMNFsBRw=
Subject key identifier: 2C:77:3C:C8:9F:C3:F8:7B:92:57:4C:39:55:22:B7:12:56:97:80:9F
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial: 019921E799F3B3422144866F26358D8442E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
Manifest number: 1098
Signing time: Sun 07 Sep 2025 02:00:50 +0000
Manifest this update: Sun 07 Sep 2025 02:00:50 +0000
Manifest next update: Mon 08 Sep 2025 02:00:50 +0000
Files and hashes: 1: 7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl (hash: V5OCEZDWDyEUXoVUn679MfQRKOXKo1RNRYEeQ7Qaz3s=)
2: KrFqFiDpj3KTLxxAsjJyiKgAjFA.roa (hash: 1PmMv3UcI9fAXjZSi6jxq86mVNekWxeQeV4OVG0h5eY=)
3: QEP4j9JVsbgw6u0dNGwjp_dEBOM.roa (hash: cfwWMXWNZBAAjCKALqzpLbct9a8WBHygXbGOplIqMXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:99:f3:b3:42:21:44:86:6f:26:35:8d:84:42:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Validity
Not Before: Sep 7 02:00:50 2025 GMT
Not After : Sep 8 02:00:50 2025 GMT
Subject: CN=2c773cc89fc3f87b92574c395522b7125697809f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:29:9a:71:1e:7e:20:8d:bd:cb:d1:4b:c0:
42:80:fe:75:57:9e:15:44:f7:dd:2b:76:67:7f:b9:
f6:c9:25:3f:e2:cf:81:91:61:aa:f8:05:db:f5:90:
d2:de:1c:df:4b:d0:16:4f:ab:be:ca:e8:bb:be:42:
ff:65:37:97:42:82:af:b9:36:b4:0d:2f:b5:05:52:
d4:6d:82:8f:37:bb:46:98:d0:8b:25:96:9c:d4:b9:
16:6e:57:5d:cd:59:b6:1d:d8:1c:33:ff:8c:92:5b:
57:32:2b:89:e9:cb:9b:d6:b0:72:5f:af:94:28:6c:
68:06:33:d9:ce:a7:50:d2:eb:83:e7:2b:9d:75:bf:
70:41:9d:3a:df:c1:79:00:42:51:87:8b:83:e9:79:
c2:f3:2c:09:53:74:9c:2c:b5:f7:34:38:d3:57:61:
76:73:92:19:38:24:ef:3d:33:d9:ac:ee:50:00:87:
0b:46:dd:07:1c:0c:f9:b8:8f:4f:1f:39:0f:b5:2b:
b5:a5:9f:08:3a:97:bf:dc:38:a1:64:6b:1a:a1:57:
3b:79:a3:fe:bd:e3:7f:68:ba:c4:66:75:5b:58:29:
69:25:94:0f:90:94:83:7d:6e:07:b3:ca:2d:cb:b4:
66:f6:4e:23:77:87:e6:40:8a:1f:76:d8:69:5d:b7:
0d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:77:3C:C8:9F:C3:F8:7B:92:57:4C:39:55:22:B7:12:56:97:80:9F
X509v3 Authority Key Identifier:
keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3b:fc:d9:b6:85:b3:13:5b:0a:10:5c:02:57:36:58:b0:81:
dd:31:2a:2f:48:a9:57:42:f1:1b:9c:5f:54:da:2e:6e:f1:f5:
d0:08:57:50:30:f8:63:32:b9:6e:c8:5e:24:76:e4:85:4c:09:
c4:5b:8d:b2:52:2a:98:df:ec:60:ad:b7:1f:2a:7d:99:24:8b:
e0:8d:17:c1:79:7d:c4:1f:16:20:5c:1f:1a:9e:fe:f5:1b:8b:
16:c5:44:78:42:f9:41:56:ce:dd:1e:42:d8:81:94:dd:78:39:
1f:36:3c:ae:4f:54:86:e0:63:78:2f:7c:d8:a4:fc:ce:f3:ca:
c6:5d:93:37:7f:5d:f0:92:1c:da:fb:54:1b:11:f7:e6:38:39:
23:21:28:51:16:28:02:0e:02:fc:64:19:fb:e6:b4:15:8c:33:
0c:bb:7a:0b:49:b4:ef:3f:b2:2c:6a:b4:ee:ec:da:4a:34:fe:
d4:ba:be:a2:44:32:43:54:08:f9:a6:1c:98:7d:29:47:96:5b:
59:e1:80:d3:0c:e5:1a:b7:0e:d7:ed:83:1b:03:71:ee:1b:22:
5a:4d:4c:ff:e9:1b:30:69:c9:69:aa:b3:90:ea:d3:2e:bd:91:
a2:41:58:85:9c:8a:b8:54:d8:fc:26:71:fe:2b:cd:bd:d0:6a:
4d:22:0d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:38:59 2025 by rpki-client