Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
File: 7sMTGXauon0XHGwmepjT84KmGio.mft (raw, json)
Hash identifier: yILu+DFxoYCzQePJXRCesL62Th/nWCyd9d4Ai+2eiFk=
Subject key identifier: 74:FC:31:9B:4D:67:54:34:B1:90:DB:C5:E5:6D:10:F1:77:73:79:CA
Authority key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
Certificate issuer: /CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Certificate serial: 0199338036155F0AE787AFFA2C09E9D6B46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
Manifest number: 1071
Signing time: Wed 10 Sep 2025 12:01:04 +0000
Manifest this update: Wed 10 Sep 2025 12:01:04 +0000
Manifest next update: Thu 11 Sep 2025 12:01:04 +0000
Files and hashes: 1: 7sMTGXauon0XHGwmepjT84KmGio.crl (hash: UGdhSz+iBru/SwNsYis0l64UcH/y8IUAHPwVsq73FIc=)
2: qvDSjgW1rEvWcrU4jpSi6rsDCpM.roa (hash: T8Hf/3k6CSkU6S1AK65rkEFSmvPdWLsEssJ2od+QI9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:36:15:5f:0a:e7:87:af:fa:2c:09:e9:d6:b4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Validity
Not Before: Sep 10 12:01:04 2025 GMT
Not After : Sep 11 12:01:04 2025 GMT
Subject: CN=74fc319b4d675434b190dbc5e56d10f1777379ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4c:9e:4b:59:3d:4a:dd:ca:9d:70:54:ab:19:
fc:97:2c:97:cb:94:d8:c9:47:6b:93:e6:37:69:0a:
d2:91:79:de:e6:bf:cb:9c:5c:cf:ec:95:38:df:06:
f3:0e:91:90:0a:1e:35:54:ef:6b:67:22:10:d0:e5:
d2:11:34:21:c7:5c:3e:60:a2:a3:da:dc:28:2c:13:
5e:60:9c:1f:ad:f9:76:27:70:8d:a7:42:20:7f:40:
d6:a0:94:2f:8a:f8:5e:97:4b:fa:ff:ba:f8:3b:a8:
14:dd:38:9f:18:e6:db:92:47:fa:88:2e:2b:9c:e7:
eb:45:26:de:5c:82:9f:bd:b8:86:84:d2:09:f3:f6:
4b:90:34:66:24:0e:0a:7b:17:0d:1c:69:58:6c:89:
02:e8:7c:a1:a4:d9:03:b0:48:94:82:a5:43:15:ba:
36:ef:e1:c8:6d:cc:63:4c:a3:ae:bf:7f:5c:a2:5c:
dd:a3:1e:4c:c0:42:c0:99:19:ba:cf:1d:b4:fd:0f:
4b:dd:18:4c:34:b9:bd:d4:6e:34:49:c8:17:5d:26:
89:99:f0:7e:75:0f:a9:96:c0:cf:3b:0c:21:3b:31:
7f:1f:af:93:55:7f:7b:da:42:fd:69:31:88:4b:d1:
62:ff:ab:83:78:de:74:df:67:7e:7b:15:c5:0a:8b:
a4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FC:31:9B:4D:67:54:34:B1:90:DB:C5:E5:6D:10:F1:77:73:79:CA
X509v3 Authority Key Identifier:
keyid:EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:38:dd:6f:98:3a:df:fe:6c:46:5b:9d:22:d4:2c:11:f2:30:
4f:dc:34:f0:72:e4:8b:d1:97:1b:b6:d9:19:dc:52:38:a3:d2:
e3:68:fd:93:6b:3e:98:3d:1d:7a:b1:84:34:2b:b5:5d:b7:b6:
74:0e:50:e6:af:42:d6:36:71:bf:98:1e:f6:71:b3:a1:f5:cb:
99:56:ec:67:1a:f9:9d:a2:15:08:4e:98:3b:f2:40:01:bb:c9:
1e:7d:3c:d5:04:2f:9b:16:ee:33:28:55:c1:bc:31:aa:d9:26:
d7:16:ed:ea:25:df:50:5b:e4:c2:73:17:70:e6:d4:77:46:57:
9b:a1:91:c0:5d:80:dc:5c:a2:ff:cd:71:b5:36:fb:99:a5:53:
ad:5e:41:56:a9:36:2c:df:4f:fd:d4:11:2b:cc:e6:aa:10:8f:
f2:88:6a:d3:cf:ee:b6:79:d3:40:41:c6:fd:98:e8:40:c7:48:
df:09:b9:fc:a8:c5:db:8d:36:73:49:60:ef:1a:0c:cc:3b:42:
b4:be:bf:06:7d:62:32:d3:fd:cd:5d:05:98:be:05:36:13:8a:
29:f4:1e:e4:99:4b:54:ed:ac:cb:63:e0:a5:ae:33:b5:2e:eb:
cf:cd:58:17:4e:5d:62:1e:59:a2:d4:d5:18:71:e0:31:6c:6b:
2f:80:52:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:55:40 2025 by rpki-client