Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
File: 7PfKn_r-cqMJZvfkPZK1jndM50E.mft (raw, json)
Hash identifier: ULLGZLsqK4iPbhPrLtl6ILN6h4inGrWAgp1K5/dgqZk=
Subject key identifier: 3E:0C:25:07:8C:CD:7B:74:E2:7E:9B:73:54:42:7B:FB:AD:AD:C3:76
Authority key identifier: EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
Certificate issuer: /CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Certificate serial: 01987F797ADA9217ACA328DDC03CAB9679BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
Manifest number: 111A
Signing time: Wed 06 Aug 2025 13:02:04 +0000
Manifest this update: Wed 06 Aug 2025 13:02:04 +0000
Manifest next update: Thu 07 Aug 2025 13:02:04 +0000
Files and hashes: 1: 1-YiE0zD6bdHHxyrrtrH0MPpWMjk.roa (hash: XJcU+t3QaDJvlCxOS1ialUKrIkBR/f23WGzBhACpW8s=)
2: 7PfKn_r-cqMJZvfkPZK1jndM50E.crl (hash: sHCjrZSAe0zgqRYBaO2c449WBfbdtWYiH97g0wES0FM=)
3: 9qJ2qCMH8lpsE2-phq-dIrQ57CY.roa (hash: WdhyGpssttqpcG9ze4xYfPzeHqHFMaF5YOOXaKoHfJ8=)
4: rxB_SKD05flXCVb5a9Y1L-kYSOM.roa (hash: xxBSeAniUfhkRNjna0RuKk7EzeOrdkzGj8pWxibPVsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:7a:da:92:17:ac:a3:28:dd:c0:3c:ab:96:79:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf7ca9ffafe72a30966f7e43d92b58e774ce741
Validity
Not Before: Aug 6 13:02:04 2025 GMT
Not After : Aug 7 13:02:04 2025 GMT
Subject: CN=3e0c25078ccd7b74e27e9b7354427bfbadadc376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:5f:4d:52:d1:bb:ed:2d:9a:41:66:ef:35:
2c:78:d6:26:6a:00:bb:98:36:41:45:c0:2e:1e:b3:
72:76:fc:25:a6:75:52:1f:3d:cb:29:8d:32:6b:d2:
45:f2:7b:9d:16:e4:60:f6:73:e3:83:b8:6d:af:18:
ff:5a:b4:c0:72:a6:5c:f2:5d:47:0a:c1:f4:15:46:
9b:fa:43:49:f8:f2:b9:3e:a8:97:42:ea:74:42:eb:
1a:5d:82:41:28:d4:08:3e:ba:52:8e:06:d1:08:d2:
ff:d1:0d:bf:f6:74:e5:d9:45:83:9c:35:92:76:cd:
c5:4e:f9:4c:24:6c:b2:65:04:3f:e0:f4:98:e2:94:
dc:8e:55:2c:c4:1e:a7:6a:86:ad:c7:7e:29:26:92:
55:73:69:50:0f:33:9d:9a:8f:85:25:62:04:15:72:
5a:c3:d2:cc:d7:17:13:d6:9e:fc:80:57:7d:87:5c:
5e:ea:2c:5c:ba:88:47:a0:7f:d2:d9:b4:30:52:73:
db:89:6d:40:52:fa:11:c5:a9:43:78:e5:ac:d5:07:
8a:c3:fa:aa:ec:4a:0a:d5:dc:36:84:83:e9:1d:40:
d0:6b:59:44:cc:78:c7:92:8c:e9:73:f3:45:85:df:
e1:32:a0:8d:6b:a8:2e:4f:0e:f5:5d:b5:5e:17:44:
59:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0C:25:07:8C:CD:7B:74:E2:7E:9B:73:54:42:7B:FB:AD:AD:C3:76
X509v3 Authority Key Identifier:
keyid:EC:F7:CA:9F:FA:FE:72:A3:09:66:F7:E4:3D:92:B5:8E:77:4C:E7:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PfKn_r-cqMJZvfkPZK1jndM50E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/32779d-3656-44c0-8ab5-981fbb3442dd/1/7PfKn_r-cqMJZvfkPZK1jndM50E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:87:8c:5e:1a:6b:7a:9f:81:bb:da:cf:b3:51:f7:c9:da:d0:
a8:ca:79:6f:36:80:2a:fb:c7:dd:79:c9:a3:59:dd:87:83:59:
81:de:d0:62:a2:75:e6:6a:97:88:7a:90:3b:48:03:19:c7:9c:
e9:5b:62:7b:81:f3:27:d2:f7:a6:ea:d3:c5:56:be:29:4d:a1:
c5:fe:cf:d9:04:6d:f8:31:ae:68:a4:95:18:67:22:4b:5b:96:
79:4d:91:9c:15:9b:58:e5:29:b5:b3:74:94:2d:ec:45:cd:33:
18:ca:ff:12:7f:0c:38:8c:e1:97:c9:27:b0:a2:be:ad:16:57:
25:e3:a3:3f:9f:4b:bb:67:f0:a7:a2:4b:4d:0a:28:f3:15:d8:
86:a1:46:b7:f3:21:37:d1:10:35:b9:d2:7f:27:64:9c:8e:20:
3a:ca:72:25:88:5b:23:05:c7:8c:82:22:c9:0c:73:dd:be:9f:
e1:e2:af:7e:89:27:2d:a0:d6:4c:7a:33:c3:55:f8:67:dc:49:
ef:9f:64:c5:79:7d:a5:a0:69:ba:5a:0b:2f:88:35:d2:88:61:
56:37:9c:46:dd:b7:26:7b:00:4c:bd:98:d3:7c:93:aa:7a:6c:
ad:52:86:43:59:16:8d:e0:57:5a:d0:0f:2d:a2:af:6e:f0:f1:
d8:61:d5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:26:03 2025 by rpki-client