Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
File: 7E0DlAhPfkBiYJco9NTVewZFWlY.mft (raw, json)
Hash identifier: toe6D4DZvxCw5f/Kc9Pl2zBofl2kK2KPR/flujPKDJM=
Subject key identifier: 52:CF:D5:84:06:58:5B:1D:50:9D:52:B1:68:21:33:13:FF:AB:3F:A8
Authority key identifier: EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
Certificate issuer: /CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Certificate serial: 019922C37E5AE7A859D505EE5D04110C50F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 06:01:01 +0000
Manifest this update: Sun 07 Sep 2025 06:01:01 +0000
Manifest next update: Mon 08 Sep 2025 06:01:01 +0000
Files and hashes: 1: 7E0DlAhPfkBiYJco9NTVewZFWlY.crl (hash: x9qBigYSeeAy8YGzz2iUdOY6RmND5REjghXrUrXZ2+o=)
2: RaAEl3d_JRDv1Gh70YgnmuhGt2U.roa (hash: YfWCdAfvoB99C3m3pYbHWHqNvMIlHgsog7DBtbldBro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:7e:5a:e7:a8:59:d5:05:ee:5d:04:11:0c:50:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec4d0394084f7e4062609728f4d4d57b06455a56
Validity
Not Before: Sep 7 06:01:01 2025 GMT
Not After : Sep 8 06:01:01 2025 GMT
Subject: CN=52cfd58406585b1d509d52b168213313ffab3fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:37:a2:f7:a7:ac:3d:52:fd:2a:28:e8:52:5f:
ee:10:c9:5b:40:32:f1:41:75:8c:f9:cb:f8:ed:56:
3d:2d:c8:d4:43:a8:08:f1:4e:bf:fd:2a:06:09:80:
c2:39:53:3b:53:83:86:11:be:a9:b8:98:91:ac:de:
73:97:8b:6c:2c:9c:10:44:d2:9c:90:ea:c0:85:3c:
c8:2e:f9:b0:7e:8f:06:aa:0c:52:f1:96:bf:d1:52:
13:81:f8:6f:16:f6:d7:86:0b:dc:a7:22:f2:93:3c:
e8:57:b6:e0:13:7a:1b:d1:ef:4b:eb:97:a5:97:53:
a5:28:92:4a:85:31:11:e0:a6:5c:fe:9b:e4:2b:d0:
e2:74:87:2b:c5:75:6c:2a:e5:bb:c3:b6:3f:07:c1:
f9:95:41:d7:ad:af:23:c3:56:a5:41:65:6d:03:91:
90:4a:37:87:0d:25:74:a2:ec:0b:e8:e2:52:0e:60:
83:15:07:05:8b:bd:79:f1:88:f9:fd:cd:ec:15:86:
08:9c:6f:ed:4b:9d:40:e8:64:3c:18:b6:a7:8b:dc:
8a:10:5e:0f:1b:35:3f:71:2a:21:1e:fb:0a:ed:47:
c8:6a:e3:7e:24:30:f3:5e:3a:36:62:0f:96:67:74:
6c:85:77:3b:02:51:73:da:79:32:6b:f6:82:7d:6d:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CF:D5:84:06:58:5B:1D:50:9D:52:B1:68:21:33:13:FF:AB:3F:A8
X509v3 Authority Key Identifier:
keyid:EC:4D:03:94:08:4F:7E:40:62:60:97:28:F4:D4:D5:7B:06:45:5A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E0DlAhPfkBiYJco9NTVewZFWlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/236610-2448-423b-9bca-268ced8435b5/1/7E0DlAhPfkBiYJco9NTVewZFWlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:3d:24:11:94:be:7b:8c:d6:20:3d:f3:a3:0a:be:ba:60:e2:
20:5b:18:76:bb:1b:5d:09:6c:4e:b1:2f:4b:75:a3:f9:63:e2:
56:19:56:a2:41:23:12:cb:fd:8b:f1:90:88:34:9c:3a:12:b8:
63:7d:fe:c5:06:b5:0b:8a:e0:f7:d7:76:c7:69:a1:0e:62:ba:
38:29:95:5a:2a:9f:84:d8:8d:35:95:76:c4:15:28:dd:08:1d:
4b:ac:7a:6d:7e:5f:8f:04:a3:64:e8:6e:d3:91:c3:36:fd:25:
1d:2d:f2:87:60:ab:35:07:a8:77:61:82:2f:67:00:a5:01:6f:
63:cf:88:4a:7c:1f:51:be:d9:35:a7:6d:48:21:1f:cb:5f:a0:
76:10:d1:55:23:44:a9:42:8f:04:82:18:f3:03:30:0e:12:43:
f2:f8:67:fe:0d:4e:14:51:e2:81:75:15:f4:c2:3c:2a:45:84:
53:07:47:e2:7b:00:38:b9:5d:85:b3:df:a1:74:4a:a1:38:f5:
07:63:36:87:ca:f4:49:a5:41:25:9d:0e:a5:37:d5:b8:06:6b:
da:bc:8f:cb:b3:5a:33:30:c3:6b:c1:82:97:b1:d5:8b:60:e0:
8c:2c:21:a0:3e:92:9e:7b:3a:b0:2c:f3:1e:72:f0:a7:b0:62:
fc:6f:a6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:52:03 2025 by rpki-client