Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft (raw, json)
Hash identifier: k9xg9cZ8ghHtlYTN7Zwb3mHZtT2DHx/GWVLplMQyK08=
Subject key identifier: E8:F3:1E:F5:4C:59:50:CB:E5:91:DE:6B:8F:03:F8:00:D9:4D:22:BC
Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Certificate serial: 01988B0EC3D647C94674F99934BC612B128A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
Manifest number: 14D9
Signing time: Fri 08 Aug 2025 19:00:57 +0000
Manifest this update: Fri 08 Aug 2025 19:00:57 +0000
Manifest next update: Sat 09 Aug 2025 19:00:57 +0000
Files and hashes: 1: 0gLTYHFKjg375hsnlvJFz59V6iA.roa (hash: llgY0FMidtstSH+ZglQ3pmXrL20fdwyExaunpMoHzJU=)
2: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl (hash: TzeBH7Nj/c/hIfvxDTzrlnsDQ5R0whPxsjhlg8PjkEo=)
3: hzOaBQqeJ1MZ-KZ4P7SZyCz4SP8.roa (hash: DRgkBXK2IQa5GIAmZXZtCYy6nVN5G7CPCGzy+FvJU0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:c3:d6:47:c9:46:74:f9:99:34:bc:61:2b:12:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Validity
Not Before: Aug 8 19:00:57 2025 GMT
Not After : Aug 9 19:00:57 2025 GMT
Subject: CN=e8f31ef54c5950cbe591de6b8f03f800d94d22bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ee:39:fd:be:64:77:10:89:a9:e6:4d:71:c5:
2e:45:ea:48:84:66:46:ca:b1:5d:70:24:b0:a9:5d:
da:37:26:ad:eb:61:01:59:c5:39:93:bb:f9:a0:32:
3b:d6:6a:64:09:d0:6f:c9:8b:d5:bb:dd:a5:e5:36:
c8:65:32:0d:bc:8c:1a:27:a5:45:79:ff:60:3d:22:
61:88:ef:90:ab:2b:c2:dc:6b:a8:a2:fb:ba:b9:1a:
ed:cc:0e:9f:b0:bc:ee:e6:3a:6e:33:10:b3:fd:4f:
70:30:35:d5:5f:a9:0f:5d:9d:cd:dd:d0:81:0b:79:
bb:27:5d:24:0f:4f:19:ae:35:60:3c:e0:5b:cd:d4:
9d:34:7c:93:6b:56:8b:59:cc:a3:c7:f6:31:cc:81:
0b:08:e1:8d:b2:e3:56:c4:3a:81:10:65:39:00:0d:
cb:43:1e:97:3b:ad:86:76:2f:9d:69:f3:42:b0:0b:
e4:75:fe:c4:ae:63:a8:7a:29:93:29:e6:55:a7:b2:
8c:c4:97:17:b8:ce:d8:98:7f:29:a1:28:a0:93:56:
9d:8b:f2:de:50:62:fd:72:23:b1:6b:a8:51:64:58:
23:d7:f1:4f:3a:02:c8:16:37:bc:bd:1c:9e:94:de:
d5:70:bf:78:a7:84:a6:77:94:0c:62:22:b9:02:9a:
1c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F3:1E:F5:4C:59:50:CB:E5:91:DE:6B:8F:03:F8:00:D9:4D:22:BC
X509v3 Authority Key Identifier:
keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:0d:d3:e0:0a:59:66:73:15:ec:7a:52:1b:04:55:a5:21:40:
aa:cb:3e:e5:2f:d2:f5:b8:4d:c7:4a:fe:38:d4:f4:3d:64:dd:
dc:db:5e:5d:14:65:99:fd:99:79:7e:2b:ab:de:b6:30:8a:d6:
a3:61:13:31:60:3a:d3:31:ce:6f:ae:fe:19:a5:c5:0a:31:14:
2d:ed:a0:f2:1c:b5:b8:ec:b4:ad:b6:a2:2c:51:e8:90:1d:60:
e1:61:85:c7:0a:51:46:2f:a1:84:4b:a6:12:6a:2f:2e:3a:fb:
c9:9d:63:5d:26:68:45:25:1b:f5:49:e4:af:34:a3:93:a3:fe:
ed:fe:21:4a:5d:80:f4:47:43:cc:2f:05:e2:ef:31:84:e7:2c:
06:35:27:99:b1:2d:a9:4a:e2:1a:53:86:3e:a6:1e:3f:49:38:
b3:f0:27:45:cc:68:57:af:54:cd:b3:14:32:3b:b4:b5:7b:ec:
26:25:c3:74:bd:39:4b:28:18:e2:8e:18:dd:4a:ad:88:03:2f:
0e:0e:1c:1b:34:e9:a0:bf:70:7f:7b:08:9c:12:49:dc:62:44:
27:15:85:35:bf:d0:c0:a7:50:d9:3f:88:cd:7c:e9:8a:d7:07:
9a:82:70:2e:f0:a1:ce:95:c9:36:42:0c:13:bd:c4:d8:b8:20:
cf:3e:10:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:14:11 2025 by rpki-client