Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
File: i7CxfdibOGQklyi5_C7q5RD95Ps.mft (raw, json)
Hash identifier: aWbRkeEdn3xNB7Mn3erIn2vDfIdr7D5ASdbe89ElFLA=
Subject key identifier: 06:35:36:87:A2:F2:FC:94:33:22:BA:E8:72:D2:FD:38:34:F7:42:15
Authority key identifier: 8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
Certificate issuer: /CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Certificate serial: 0199239F259565A623C677A0B63C3F8DE137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
Manifest number: 0897
Signing time: Sun 07 Sep 2025 10:00:56 +0000
Manifest this update: Sun 07 Sep 2025 10:00:56 +0000
Manifest next update: Mon 08 Sep 2025 10:00:56 +0000
Files and hashes: 1: i7CxfdibOGQklyi5_C7q5RD95Ps.crl (hash: B62yxeKxw/s1eA8F26bS8HLQsVke8U/f6rbnxuA8yds=)
2: kpL1mBA7PiBUtfdmw6AVzfdGe84.roa (hash: X1ZTIcXTz0jbHRbURZ6ZK36qgjM4K05EqBeOsJvnW6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:25:95:65:a6:23:c6:77:a0:b6:3c:3f:8d:e1:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb0b17dd89b3864249728b9fc2eeae510fde4fb
Validity
Not Before: Sep 7 10:00:56 2025 GMT
Not After : Sep 8 10:00:56 2025 GMT
Subject: CN=06353687a2f2fc943322bae872d2fd3834f74215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6e:4f:52:af:9b:cd:88:19:d6:0d:3c:63:5b:
a7:18:fe:bf:3d:4e:41:2e:11:0a:c2:7e:1d:ef:0b:
94:5c:b3:b2:7f:5f:47:b9:49:89:3f:94:87:56:bb:
43:dd:ec:aa:58:23:d7:63:17:80:65:fb:56:7a:16:
68:91:a2:79:47:0a:28:d7:4a:6e:df:49:f5:40:74:
4a:fd:e4:c4:3b:ae:d0:64:7b:d4:9e:5b:4b:05:15:
6a:7d:cf:3a:72:a6:a8:86:55:43:03:29:27:48:7b:
9c:e4:93:3a:1c:28:70:be:3f:81:44:54:5f:75:9b:
e9:c3:9a:43:64:94:fe:a7:47:2a:18:c8:60:16:c3:
98:67:f6:aa:82:82:e4:bf:54:67:74:b1:2b:2a:2d:
fe:1f:66:fc:2b:74:5a:c2:b3:fa:68:a5:4b:3f:03:
a2:d2:f4:b8:3f:f3:2f:13:d5:a6:16:ca:f2:95:fb:
4f:6a:b9:e2:49:c5:2a:67:ae:3c:cf:11:85:e0:ff:
c6:9a:59:75:e2:40:fe:8a:24:80:ef:d3:45:78:34:
af:3c:d9:99:1d:08:2c:a5:a1:8f:32:e0:0a:07:ec:
12:28:ce:cc:79:14:6e:fa:11:be:00:23:8e:27:72:
68:be:ce:0b:24:f6:57:cf:19:98:27:bd:05:16:07:
b7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:35:36:87:A2:F2:FC:94:33:22:BA:E8:72:D2:FD:38:34:F7:42:15
X509v3 Authority Key Identifier:
keyid:8B:B0:B1:7D:D8:9B:38:64:24:97:28:B9:FC:2E:EA:E5:10:FD:E4:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7CxfdibOGQklyi5_C7q5RD95Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ba95fe-4599-4d83-b6bd-e01919fcfedf/1/i7CxfdibOGQklyi5_C7q5RD95Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:00:f7:c7:26:f9:a6:06:71:5f:6a:38:9c:59:2e:1d:1f:02:
05:6b:90:ef:77:69:95:47:d4:8b:3c:cc:9c:9b:a4:8d:e9:41:
21:2b:31:79:41:1e:7c:c3:49:a0:57:20:b9:c4:6c:7b:3f:c2:
12:b3:a7:eb:b8:48:64:1c:e7:7f:a5:1c:76:67:bb:b2:00:75:
7c:42:a4:58:a0:1c:7d:5e:3c:98:64:76:78:2a:3d:44:d4:0f:
6a:36:fe:23:8f:44:50:38:0b:32:50:0b:ad:0a:28:07:f9:4e:
15:1e:18:1a:d4:2f:1c:36:91:68:4c:4e:44:b2:66:14:48:7f:
cd:f0:5d:92:74:98:7d:c5:03:5c:7a:1c:08:8b:de:c0:f6:6c:
1e:53:c4:70:76:7f:23:8e:7c:5a:90:54:51:3c:52:38:6e:46:
9c:d5:67:6f:84:25:20:6d:d0:e1:63:ef:b6:75:40:81:f0:53:
84:2f:df:af:77:99:0c:d4:6e:8b:f5:51:ab:b4:eb:5f:e8:c9:
9c:f7:1c:2c:1c:75:68:25:d6:48:d3:d6:7e:3f:e5:91:ac:a8:
dc:02:27:42:c0:5f:b7:a0:b7:15:c4:ec:c8:0c:1f:1b:b2:1b:
20:57:77:63:ff:cc:6c:08:94:04:1e:74:5a:24:aa:3f:63:21:
27:cc:3c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:37 2025 by rpki-client