Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File: 7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier: sukvNPmnIHJne71C/3D+sPVwOWO9fcuxFcrb1ikvQsQ=
Subject key identifier: 48:59:B0:89:FA:DB:FA:D8:3E:B8:1B:42:C8:1A:57:61:14:1F:9C:8E
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer: /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial: 01988AA1172BF1F28621386E2A12787DCE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 17:01:09 +0000
Manifest this update: Fri 08 Aug 2025 17:01:09 +0000
Manifest next update: Sat 09 Aug 2025 17:01:09 +0000
Files and hashes: 1: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: m7itppKxHxHoZVzX1wIyk9er0DYzx24x7omt5A1Jig0=)
2: jJfOPh4XYz0bStaxv-izcSg_mmc.roa (hash: I9zOxo3FRJE3Zqu7rer6Rr4TRL9Sp9aojJllGRgbeX0=)
3: pp9HRbSEXg1Djpwq9U2x1ut0P3A.roa (hash: eLTqAfDKOrIieHKE4CKftQ8WCB5K7yV6FjmVMCdNg0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:a1:17:2b:f1:f2:86:21:38:6e:2a:12:78:7d:ce:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Validity
Not Before: Aug 8 17:01:09 2025 GMT
Not After : Aug 9 17:01:09 2025 GMT
Subject: CN=4859b089fadbfad83eb81b42c81a5761141f9c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6e:14:35:6b:99:15:cc:2d:2d:0e:e8:18:84:
c4:36:d4:fb:c6:d0:b7:6d:2a:43:fc:ef:a1:51:8a:
7e:b8:b1:61:1d:da:7d:57:7d:6a:e5:63:a8:92:aa:
75:16:b0:9e:f7:97:bb:d2:53:f2:c1:80:9a:b0:19:
37:be:25:a2:ce:da:9d:46:f7:f6:ac:9c:d2:3f:d0:
db:17:a8:90:32:fc:18:5c:42:80:90:54:75:a9:5a:
0e:da:64:20:2b:65:a0:3a:a3:c9:2d:f3:1d:2b:68:
1e:ad:ee:8d:e5:53:79:88:94:cf:c8:97:d8:08:32:
7f:a1:02:a5:17:7f:6d:a0:ac:a5:c3:21:fc:8b:1b:
cc:1f:60:21:40:5c:f7:e6:dd:db:83:e7:a5:62:c3:
7e:10:8e:5a:81:fb:04:63:d7:81:38:fe:6d:14:b6:
45:de:62:0a:95:1a:27:90:2a:95:14:1d:f3:c9:25:
6e:b3:d9:41:91:f3:d4:6a:7b:c0:97:6f:dd:ff:65:
b2:f2:03:cb:12:17:42:d6:c6:39:e8:93:da:7b:4a:
85:92:73:f5:3c:29:79:e2:89:e3:78:fc:77:c2:79:
5b:46:ff:46:cc:b0:8c:16:8e:96:45:52:6a:c8:b1:
f4:53:ed:a3:db:46:3b:92:52:12:38:7a:e2:ee:88:
4b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:59:B0:89:FA:DB:FA:D8:3E:B8:1B:42:C8:1A:57:61:14:1F:9C:8E
X509v3 Authority Key Identifier:
keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7d:9e:b0:aa:78:d5:59:84:f6:47:ad:b9:97:be:53:06:ee:
8c:db:93:96:27:e7:c5:d9:46:6b:b4:23:b2:51:c4:e8:76:91:
e0:bf:ce:36:ce:09:73:f1:1d:67:60:0e:6f:50:6f:2e:9b:5d:
68:73:4d:41:b8:6d:dd:8c:57:85:59:1d:bd:b9:ac:93:8c:46:
47:1f:02:d4:2b:4a:d9:69:33:b5:13:74:f9:01:38:89:ee:1d:
5e:3c:0f:5c:a5:36:58:65:92:67:49:6a:68:4b:95:8d:24:0b:
16:92:4e:05:30:82:30:9f:fa:e0:20:80:2b:71:91:38:f1:f9:
ab:c5:b6:01:4a:26:83:b9:7f:fe:1e:b6:68:9c:4a:4b:d7:b9:
87:d1:8f:af:b9:3e:5d:f2:d4:18:04:38:bb:fe:db:a5:5d:78:
9d:b0:30:9a:69:b4:27:dc:28:08:85:0d:66:7b:d5:df:26:a7:
9e:89:de:36:9f:66:f8:e0:49:b5:41:bd:93:29:0b:e8:42:4a:
66:86:43:7c:f8:2f:e6:55:dd:f5:9c:44:e1:4f:fc:85:13:6a:
10:a9:e1:ed:73:32:bb:00:8c:34:3a:6f:18:fc:f1:a7:30:8c:
d9:bc:c2:f1:32:19:1d:3f:fd:88:c8:a8:2e:f5:6a:61:3c:1d:
b6:7c:c7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:03:57 2025 by rpki-client