Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
File: 7b0rKHHAbl4h380BYDB1gWvRRIk.mft (raw, json)
Hash identifier: IHqv9vq6298iPq5RjeJKXf0EfO3YxFVckiFkEEKUIx0=
Subject key identifier: 11:D0:DD:F0:3B:AD:C2:8E:64:7E:70:89:50:36:89:5D:91:84:35:20
Authority key identifier: ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
Certificate issuer: /CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Certificate serial: 0198745081B98B6FF01DDB5610BB426CEE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
Manifest number: 04CD
Signing time: Mon 04 Aug 2025 09:01:29 +0000
Manifest this update: Mon 04 Aug 2025 09:01:29 +0000
Manifest next update: Tue 05 Aug 2025 09:01:29 +0000
Files and hashes: 1: 7b0rKHHAbl4h380BYDB1gWvRRIk.crl (hash: pgBY3+7fessE9cnKPv34+yAdFPPdxnb8Qm2Qn3C3Va8=)
2: TaWWlaQdJDy__bPOa0_wHi28kgw.roa (hash: GmxVMkOCc40Mr9ux5EGho294LI1OMaDC/pTrag518As=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:81:b9:8b:6f:f0:1d:db:56:10:bb:42:6c:ee:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd2b2871c06e5e21dfcd01603075816bd14489
Validity
Not Before: Aug 4 09:01:29 2025 GMT
Not After : Aug 5 09:01:29 2025 GMT
Subject: CN=11d0ddf03badc28e647e70895036895d91843520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:11:d3:26:dd:98:98:6f:82:08:6b:97:14:36:
71:87:10:5f:e5:c1:54:55:e8:82:50:65:da:af:2e:
22:72:fa:b8:ea:ac:74:d9:39:36:9e:58:ce:ae:37:
0e:04:7a:5f:cf:46:5a:11:f3:c5:79:fc:dc:65:c2:
65:2f:3a:a4:08:a6:fc:1f:40:f0:ef:7d:1f:8b:bf:
34:26:70:67:99:34:61:95:12:df:08:3e:a5:52:66:
66:e0:6a:4c:d5:ca:5a:84:8e:5d:b3:5d:07:bc:b7:
cd:61:f0:a6:d6:19:69:45:a5:a3:92:b9:68:2b:7a:
63:ab:dc:bd:84:7d:6f:fd:a3:c8:19:f9:c7:00:a8:
23:f1:b5:7f:28:43:e9:8a:26:e6:13:22:67:08:27:
dc:fa:bc:61:4d:72:b3:52:68:75:48:e9:71:8e:53:
ad:56:b9:41:cb:1d:b4:9b:86:45:a2:52:8a:5c:a5:
89:e7:d1:10:b7:b5:5a:e8:6c:51:2a:eb:15:63:c1:
f3:7f:46:93:df:b3:cc:e6:98:19:db:da:ea:03:b6:
e7:bc:cf:3e:f3:0f:2f:44:a1:41:64:ca:e1:61:e8:
73:c5:b2:95:2d:2d:01:19:78:80:04:53:39:95:df:
66:86:54:bd:14:03:1d:c0:8b:87:37:44:79:53:a5:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D0:DD:F0:3B:AD:C2:8E:64:7E:70:89:50:36:89:5D:91:84:35:20
X509v3 Authority Key Identifier:
keyid:ED:BD:2B:28:71:C0:6E:5E:21:DF:CD:01:60:30:75:81:6B:D1:44:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0rKHHAbl4h380BYDB1gWvRRIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0e4dd3-9de7-436e-aba9-de6a9c017f7b/1/7b0rKHHAbl4h380BYDB1gWvRRIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5e:eb:84:bb:98:4b:df:62:39:6b:80:0e:81:5d:44:6f:cf:
1c:0e:50:fe:73:ab:15:9d:6b:07:2a:1f:a7:f9:dd:11:80:6d:
5b:80:f5:53:5c:47:1a:61:bf:a1:6e:5b:a1:da:c1:7d:7d:0a:
1a:59:75:26:0e:12:e0:64:73:0e:37:64:b2:31:b1:11:fe:46:
53:a2:e5:01:03:ae:24:c0:84:39:25:9f:72:66:4a:76:e7:06:
4c:11:bf:3a:69:15:ca:a2:d7:2e:9f:6c:5d:6b:d0:08:a1:90:
c9:fd:17:c8:f2:be:5b:8f:d1:6e:38:9b:af:5f:ab:64:f6:05:
1c:78:9a:ec:8a:9f:d8:3f:76:52:af:33:b1:fd:fc:7d:78:cc:
89:09:d1:76:fa:8d:85:55:c8:6c:30:45:9b:5e:75:6a:dc:59:
7b:7f:d5:04:d2:5c:e9:59:4a:20:d8:a1:3f:f2:7f:cc:a3:49:
d5:c8:ab:08:ae:b2:51:77:aa:2d:65:93:85:1b:e3:7b:32:9a:
8c:ff:d7:c0:0c:29:e9:ce:4f:ef:2b:2f:5c:a4:99:29:77:41:
38:58:f9:48:0e:72:55:7d:17:fe:29:b2:1c:e4:8d:34:17:89:
3f:74:ab:00:97:0f:f4:27:4f:6a:aa:66:0c:7d:46:c2:5d:91:
cd:16:ad:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:01 2025 by rpki-client