Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
File: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft (raw, json)
Hash identifier: yK/vKRSUeWsQyNt4ckNSIRpNq/bpk+rzbMbjWOLpRLg=
Subject key identifier: D7:3E:9B:22:FB:2A:1F:30:FF:5F:D0:C8:13:6A:3D:F5:0B:6A:A2:60
Authority key identifier: EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
Certificate issuer: /CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Certificate serial: 0199221EF6C77AE85280772F72904689C5B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
Manifest number: 0AF3
Signing time: Sun 07 Sep 2025 03:01:18 +0000
Manifest this update: Sun 07 Sep 2025 03:01:18 +0000
Manifest next update: Mon 08 Sep 2025 03:01:18 +0000
Files and hashes: 1: 7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl (hash: Qm5kJrX38ATaXXAo2t2e0rvg9Bbg1AkXL4E772SfhT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:f6:c7:7a:e8:52:80:77:2f:72:90:46:89:c5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecfe4a09677b00bbc333f71678eaa80a71b62a48
Validity
Not Before: Sep 7 03:01:18 2025 GMT
Not After : Sep 8 03:01:18 2025 GMT
Subject: CN=d73e9b22fb2a1f30ff5fd0c8136a3df50b6aa260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:ed:2b:0d:16:7e:bc:2b:c3:94:09:3b:23:
aa:5f:0d:5f:de:1a:94:1a:41:9a:6b:4a:00:e5:77:
d1:70:d5:06:b1:48:d4:35:7c:3b:1e:d5:63:14:aa:
02:bc:c6:5c:15:15:1f:9b:a3:8c:35:83:c2:67:92:
4c:0e:4f:34:ca:bb:01:36:10:6c:1d:fc:9d:bf:d0:
f5:5a:47:80:b4:cb:39:92:ae:6a:75:35:98:3f:d0:
3f:d2:61:04:93:20:73:22:7d:8f:00:13:84:71:89:
e9:8f:d3:d0:4d:c3:87:3c:1b:92:d8:70:e8:b1:ad:
2a:0f:66:36:f7:f2:ec:aa:d1:65:72:50:7f:f7:ee:
80:87:d7:36:27:a3:82:33:1f:cd:da:c6:43:85:45:
b7:90:1c:a7:87:05:25:a0:ba:be:4e:96:3f:8a:ab:
32:67:2f:01:d6:14:55:81:e2:48:01:28:16:b9:6b:
65:61:d7:df:f8:96:8e:8a:ab:13:a4:e8:ac:09:fe:
16:d4:f3:ef:03:1a:7d:23:a8:83:f3:a4:4a:2d:f7:
f6:51:93:09:7a:de:b6:a1:31:c5:eb:39:6c:1a:1a:
98:38:04:9b:e1:b3:8e:cd:4c:eb:c6:79:96:e4:80:
b7:6f:ab:49:55:d5:ae:44:03:98:45:df:8c:a6:73:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3E:9B:22:FB:2A:1F:30:FF:5F:D0:C8:13:6A:3D:F5:0B:6A:A2:60
X509v3 Authority Key Identifier:
keyid:EC:FE:4A:09:67:7B:00:BB:C3:33:F7:16:78:EA:A8:0A:71:B6:2A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a4a4a8-2a93-48ad-b891-ed9302feddcb/1/7P5KCWd7ALvDM_cWeOqoCnG2Kkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:9b:8c:79:f2:20:16:93:4f:ed:53:76:72:c2:e0:5b:94:83:
3b:77:66:89:87:4a:8b:6b:38:31:60:1e:ae:29:c5:27:30:db:
bf:fe:76:19:f9:90:48:ec:70:eb:94:be:30:b6:9c:89:c2:1a:
15:b5:c4:68:d7:3b:e7:c9:2b:8b:b1:96:a8:9a:8f:d9:68:1b:
48:c6:7e:26:c5:a2:20:4c:b4:e4:cb:de:a9:74:b2:4c:38:0e:
b6:1a:11:b7:0c:77:9e:41:f8:c5:26:56:04:87:c0:7c:f8:16:
9e:45:89:b8:ea:42:0c:92:bf:26:1a:10:2c:64:22:57:cf:c5:
72:ae:05:ff:8a:f0:ab:11:bd:ce:de:f1:5a:ca:fa:08:a5:b8:
07:4b:27:18:f9:04:b7:7c:91:09:6d:7f:57:3a:a2:7d:80:37:
99:e8:8f:ad:cc:27:4a:4e:fa:31:51:93:68:af:b4:53:5a:9e:
63:34:e5:10:ef:41:ea:64:46:78:18:a7:b7:b7:26:fa:ea:2e:
b0:a8:51:85:db:a7:2d:3d:c9:1f:72:bf:96:90:fa:f6:e9:de:
ae:d8:85:99:27:80:3d:30:1f:03:af:0c:c2:07:c9:5a:ac:13:
6a:f2:0d:11:a6:a8:38:c9:59:43:85:e7:f7:b3:a0:c7:3f:d4:
ac:27:92:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:46 2025 by rpki-client