Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
File: 7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft (raw, json)
Hash identifier: juYDjYiIVzqtFVzwsNoXcZZ8vbQ8zjD4n7T9dpsakLE=
Subject key identifier: 0A:A2:0C:11:8F:F1:F0:67:BB:28:06:E7:F4:70:DA:E3:4E:E7:21:CF
Authority key identifier: EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4
Certificate issuer: /CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
Certificate serial: 019896DC73B670C029C4063FF3C3002CEC15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
Manifest number: 11AA
Signing time: Mon 11 Aug 2025 02:01:26 +0000
Manifest this update: Mon 11 Aug 2025 02:01:26 +0000
Manifest next update: Tue 12 Aug 2025 02:01:26 +0000
Files and hashes: 1: 7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl (hash: 0MurRc3pcS0knJ06/qYqAllhRx90ddMX8rYROtYAkg8=)
2: Kg5-kVb-CT-Szk4qOylrOgMLHdQ.roa (hash: 7y1Phnt9QqKkLbO9DEolnM5Y/dYlEmphmiuZ26bJCXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:73:b6:70:c0:29:c4:06:3f:f3:c3:00:2c:ec:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef37c4806363eaa6d343af22e038bead2e18b4f4
Validity
Not Before: Aug 11 02:01:26 2025 GMT
Not After : Aug 12 02:01:26 2025 GMT
Subject: CN=0aa20c118ff1f067bb2806e7f470dae34ee721cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:74:c8:e3:84:e2:69:cd:3d:2e:ce:2c:10:83:
d9:47:25:33:6d:e3:b7:c8:66:dd:9e:09:ae:2d:a7:
8c:ba:04:92:a4:74:00:3f:f5:b5:6b:43:f5:60:d5:
40:20:bb:b0:93:56:a5:7f:c9:af:b8:61:32:b6:ae:
6e:d7:a0:2e:27:95:4f:b0:fc:0f:3a:ae:76:ac:21:
60:14:fa:d0:fa:06:07:58:b5:f5:c0:eb:18:3f:7f:
c9:c5:a7:8e:26:11:74:2e:d1:f9:a5:49:d4:9c:84:
af:1e:86:da:d3:70:85:dd:e5:a4:96:6a:37:cb:98:
74:ce:a4:e7:48:8f:00:ef:6a:34:07:d1:1a:e5:2b:
63:ff:34:2b:b5:46:be:e8:95:f8:09:4c:ff:0d:ab:
0c:4b:02:80:b9:92:56:d1:8d:a5:05:f3:60:69:a0:
ca:bd:70:cc:31:dd:38:1e:45:cb:e8:ca:be:d8:af:
df:fe:c0:81:a7:04:7b:1e:e8:37:7b:52:e4:6c:70:
b7:78:7c:1a:53:f1:62:e4:79:79:cc:41:11:e0:79:
4d:5d:68:17:31:5c:41:25:1e:07:eb:47:a2:2a:84:
e7:27:20:3f:1c:74:9a:13:c8:df:28:72:cb:9a:2d:
47:24:05:a9:61:2d:fa:e6:22:5b:ec:74:5a:de:01:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A2:0C:11:8F:F1:F0:67:BB:28:06:E7:F4:70:DA:E3:4E:E7:21:CF
X509v3 Authority Key Identifier:
keyid:EF:37:C4:80:63:63:EA:A6:D3:43:AF:22:E0:38:BE:AD:2E:18:B4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c60a92-8c0b-407a-b203-acbcc6cfd7e3/1/7zfEgGNj6qbTQ68i4Di-rS4YtPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f4:6b:64:fe:bc:36:ba:fb:65:20:5d:e7:c2:3e:af:69:9e:
7c:1d:97:1a:2f:a5:22:d8:20:fb:f6:4c:06:51:92:87:75:f8:
76:ef:40:45:9a:71:8b:80:f5:77:22:11:89:93:7c:58:86:a5:
6a:d5:71:b0:3a:d2:7c:82:b0:c7:28:e8:da:dc:61:ae:fb:97:
75:21:bb:0f:2b:9a:8e:8a:bc:77:d2:b0:c1:7b:bc:cf:bc:00:
d2:76:d7:03:45:48:1d:6d:c7:46:3e:e2:1e:74:f6:9d:b9:2f:
3e:be:5b:90:7e:20:49:9b:83:79:55:4e:d8:55:fc:05:4f:24:
52:e4:3c:97:ce:df:5a:16:5d:13:35:d9:d2:e9:3f:07:58:44:
54:10:a2:4d:59:49:7e:c9:14:94:0a:13:ca:01:3a:13:42:11:
da:98:5f:5f:eb:b2:06:fb:d4:7f:75:2d:a9:38:47:d9:e2:8b:
4f:6f:e8:b6:ad:e2:4a:c6:a0:40:8a:fe:94:ea:b3:70:af:cd:
bc:30:9e:d1:f2:ff:d5:d3:9b:4c:8b:4c:0f:1d:18:86:18:5a:
02:a7:93:70:09:e3:fc:f4:a1:b2:79:f8:d7:02:69:9b:fc:ba:
70:87:10:d5:54:c5:fd:e9:48:e3:45:30:a8:86:38:41:b4:fc:
f4:2f:83:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:47:06 2025 by rpki-client