Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
File: 7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json)
Hash identifier: FNBjTdzLHYFf3JCV/nSoKVHzq8ismYd6aNDFdyZJoMk=
Subject key identifier: 9D:68:76:4A:F6:BC:4B:22:2D:94:5F:00:18:A7:57:0C:00:34:22:BB
Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
Certificate issuer: /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Certificate serial: 019921B206A5E61F7CA73307F256C0E833C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 01:02:19 +0000
Manifest this update: Sun 07 Sep 2025 01:02:19 +0000
Manifest next update: Mon 08 Sep 2025 01:02:19 +0000
Files and hashes: 1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: uoIYnIJlrxkU/i/ayuFyJkLh9P41IR8sE04rQesWHCM=)
2: xE_JDYJwb1MCr7C57Rm2iLhdKIw.roa (hash: sRhgH4Cj24QxldRTdKVZiNUSEzN+8JXEsh8ETe2KACg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:06:a5:e6:1f:7c:a7:33:07:f2:56:c0:e8:33:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Validity
Not Before: Sep 7 01:02:19 2025 GMT
Not After : Sep 8 01:02:19 2025 GMT
Subject: CN=9d68764af6bc4b222d945f0018a7570c003422bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:66:99:bc:f7:aa:07:19:78:be:f6:c7:62:
8f:9c:f5:34:2c:85:7e:d3:f9:a6:fc:48:01:4a:7a:
66:9c:9a:15:c2:5b:08:9f:14:a2:d0:d9:d0:8d:ab:
78:82:ac:69:08:81:0b:61:f1:71:b6:b1:75:64:43:
e3:8b:c8:33:5a:c8:d0:6a:4f:e2:33:50:21:67:ad:
7b:77:95:29:df:f1:4a:06:37:97:05:56:85:6d:15:
16:71:1c:9a:78:29:9e:9b:22:0d:c8:ab:38:7e:5e:
75:51:10:2f:df:87:d7:7a:05:44:ff:11:59:dc:82:
a2:88:cd:1b:b6:c1:06:b4:00:82:c6:f3:b3:b9:8a:
39:0c:a5:7b:d2:4b:84:04:1e:74:25:07:be:86:e4:
f9:06:62:fe:d6:41:0a:28:e7:d3:bc:c3:55:c2:ef:
3e:f7:28:0a:4f:9c:6d:4d:51:9e:b9:f8:c5:10:bb:
9c:a1:0f:52:3d:38:82:0d:fc:98:35:db:98:41:e4:
f8:31:77:16:80:91:e1:39:36:01:05:b3:11:f9:dd:
26:35:de:cf:9f:90:9d:9f:29:06:e9:b1:e2:00:c0:
ce:4e:80:5e:ee:af:f4:61:c6:b1:6a:84:03:c7:0f:
41:88:c1:c0:c3:e9:97:f3:40:91:98:dc:f7:33:98:
84:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:68:76:4A:F6:BC:4B:22:2D:94:5F:00:18:A7:57:0C:00:34:22:BB
X509v3 Authority Key Identifier:
keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e8:bd:8f:0a:17:c4:ca:95:a6:bf:20:ba:2a:83:3e:03:e6:
4d:d9:af:41:8e:76:89:0b:57:fb:df:c3:16:76:d2:c5:7e:76:
09:7d:e1:e4:8d:b6:60:fe:87:70:63:14:33:b5:2b:5b:e8:72:
5f:da:9b:70:9e:a8:97:b8:54:0c:64:ff:ca:66:65:a9:b1:af:
a4:1d:38:1e:31:27:79:e3:e7:d2:94:ab:c9:92:52:67:e5:e1:
1f:4d:3e:97:f2:f3:b9:a6:58:e6:3f:14:4e:41:72:a9:a9:9d:
3a:13:23:2a:80:15:0d:df:88:97:b5:3a:16:e3:14:33:a4:17:
02:19:05:f6:0e:6e:97:4b:c7:5e:91:75:6d:d9:fc:4e:64:3e:
11:99:bd:d6:35:cd:31:35:06:5f:53:82:81:0c:e0:4f:87:72:
49:b7:14:f2:1c:de:e2:92:d6:46:59:67:63:77:a0:16:b5:3f:
da:ac:bd:b5:23:f0:88:f4:92:93:ff:3f:48:eb:74:a2:a4:ad:
78:dc:0c:20:73:97:66:89:fe:4a:55:2e:10:63:e1:d4:87:5a:
b5:92:37:50:cf:5d:e4:85:d9:a5:2f:21:8b:e3:c3:76:31:53:
55:9c:06:d5:c6:b2:6f:96:20:9b:af:ab:f1:d7:dd:0d:a4:63:
55:8f:ff:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:47 2025 by rpki-client