Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
File: 7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json)
Hash identifier: ef3voAJj/X5Q5qrBv2oyFRopZMXllSo1hxx/ixERww0=
Subject key identifier: 80:FB:B2:B0:F4:9C:08:80:EE:36:6C:FA:A1:77:5E:BB:5D:10:55:02
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Certificate issuer: /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial: 0199221EB461936A202FB3DB207969738755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 03:01:01 +0000
Manifest this update: Sun 07 Sep 2025 03:01:01 +0000
Manifest next update: Mon 08 Sep 2025 03:01:01 +0000
Files and hashes: 1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: UgRWYa+aFohUAiKf0QNmOEJf8icRtLxSoDCbE3XBwBU=)
2: ZMaLoOweTuOcv_nvUbVyQTqS1mc.roa (hash: NcJ71xMcWOHUOX+wLT3smK9g9a6MiR/wNPSYjOJtrKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:b4:61:93:6a:20:2f:b3:db:20:79:69:73:87:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Validity
Not Before: Sep 7 03:01:01 2025 GMT
Not After : Sep 8 03:01:01 2025 GMT
Subject: CN=80fbb2b0f49c0880ee366cfaa1775ebb5d105502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:9a:e7:59:71:f1:cb:0e:0f:dd:70:18:49:
8a:00:e4:d1:01:40:9b:3d:b9:42:90:60:ca:b2:fa:
a4:8d:e4:ff:4f:71:13:ad:3a:a2:d1:6e:38:69:c8:
02:b9:63:68:63:ed:a9:42:14:9f:2a:81:48:f5:55:
49:c3:28:c6:cf:7b:58:12:12:1c:b6:3a:2a:9f:9f:
cb:dc:20:9d:aa:12:ee:f1:e8:a2:b9:e4:9f:41:76:
fd:5a:c4:35:4b:6e:c9:27:af:89:2d:e4:5c:4b:6a:
0e:75:16:1f:8d:b9:02:02:62:cd:f0:56:e1:f9:53:
ea:ec:4c:3f:2f:a6:a9:68:77:9e:15:2e:37:d4:dd:
67:ae:64:49:0f:c5:49:c7:9e:89:9a:bb:93:75:5a:
60:57:dc:b4:0c:5f:44:0c:55:83:50:43:45:94:11:
ee:cf:99:76:c2:97:93:bc:bc:63:c1:8d:fb:29:29:
00:8a:6f:e4:cb:25:e3:3c:f5:e5:dd:89:e4:c7:90:
84:07:1c:65:c6:45:db:64:4c:2b:cf:25:1f:fe:d7:
1a:46:54:d3:7a:d7:4e:80:71:a1:43:fc:7c:fb:be:
fc:45:c6:cf:2e:ff:4b:8e:5c:f3:5a:cb:99:68:13:
ca:54:a4:f4:d5:1a:b0:8b:bf:29:3c:73:8c:a9:c4:
22:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FB:B2:B0:F4:9C:08:80:EE:36:6C:FA:A1:77:5E:BB:5D:10:55:02
X509v3 Authority Key Identifier:
keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:44:07:84:89:91:44:57:e2:d8:c7:c9:aa:b0:ca:f3:c0:e0:
d4:ae:58:ac:09:ba:6b:47:85:74:cd:c6:c6:d2:0d:0a:8b:83:
ab:d6:13:fc:9d:c5:0e:95:71:60:2a:a2:1f:ad:41:03:97:53:
33:7c:f8:87:f2:21:df:2c:90:93:1e:c4:d9:13:e7:fe:01:a4:
fc:3c:5a:6f:71:10:98:56:43:74:6a:3a:4b:12:d4:5e:c7:b6:
b7:5c:32:db:e7:f4:bc:9c:95:b5:26:5f:ac:ab:8a:c1:b0:7a:
90:67:db:08:a6:fa:d3:7e:96:da:d6:c9:1f:9e:e2:22:98:96:
6a:d1:a9:0e:61:5f:a5:10:c7:78:46:5a:30:e5:27:20:28:37:
3c:87:cc:ee:ba:e7:a2:43:8d:ff:26:97:16:61:12:b5:5b:56:
49:c3:81:0e:57:bb:cc:af:62:50:f2:c8:8b:0b:59:15:95:fd:
ed:cc:a2:fd:70:e5:b9:ab:9c:18:0e:33:d7:4d:b2:fc:c9:b4:
50:39:60:89:48:61:27:c2:69:b4:fc:9d:94:69:65:da:09:7d:
b3:30:4f:af:43:44:95:87:6a:c6:13:18:53:e0:f8:0d:f9:d9:
84:74:05:a7:43:f8:53:12:24:d9:31:67:2c:bb:8f:20:04:0e:
64:ad:8b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:10 2025 by rpki-client