Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
File: 7HfzJj_jSKssjTaEdda8BHpql2o.mft (raw, json)
Hash identifier: WsIXqmGD4H8iUHsBdzWVhOOJ0DDULXyn1dihjGHtgK4=
Subject key identifier: 0D:65:BD:55:DE:40:87:40:4F:43:EB:5E:CB:06:CD:F2:DF:B7:8D:CA
Authority key identifier: EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
Certificate issuer: /CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Certificate serial: 01987F7843A94EA261A29A1142E898E3C8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
Manifest number: 04B0
Signing time: Wed 06 Aug 2025 13:00:44 +0000
Manifest this update: Wed 06 Aug 2025 13:00:44 +0000
Manifest next update: Thu 07 Aug 2025 13:00:44 +0000
Files and hashes: 1: 7HfzJj_jSKssjTaEdda8BHpql2o.crl (hash: NJPQcTKWT6KkE8KZPtQanhO5IZt12uLpvDo2Mre6cho=)
2: ciVuDSG137gexnzKwYgFKSw1JAo.roa (hash: Lu0ROEw0vfSrXmfo6gMAWwlGmmUA9I7hRO+NmRoxqGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:43:a9:4e:a2:61:a2:9a:11:42:e8:98:e3:c8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec77f3263fe348ab2c8d368475d6bc047a6a976a
Validity
Not Before: Aug 6 13:00:44 2025 GMT
Not After : Aug 7 13:00:44 2025 GMT
Subject: CN=0d65bd55de4087404f43eb5ecb06cdf2dfb78dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:01:fe:54:54:ce:2f:7b:3e:41:e6:14:59:
b1:0b:8b:7f:78:88:52:ed:2a:d3:e8:a2:f6:f9:87:
56:0b:1e:3c:47:2b:14:33:17:3b:2f:5e:d3:a9:3d:
a8:43:2a:6f:1b:8b:0f:ac:ee:f1:fc:02:1a:65:87:
dd:c4:91:88:b5:d5:87:94:77:f6:f7:a3:26:21:dd:
f6:e3:57:4c:12:58:9f:7b:b5:ae:2f:af:77:a4:64:
f4:cd:6d:1a:80:a8:b4:3c:eb:6f:e3:7a:9d:ab:fe:
48:e9:3e:ae:91:60:85:16:62:a5:84:24:e4:b2:02:
12:7a:54:2c:56:cb:09:fd:55:ea:54:3f:83:1b:75:
76:c7:1c:e4:a8:a4:7c:78:5c:ff:5e:db:fe:30:44:
8d:97:63:b4:9d:2a:40:07:ac:8c:23:c4:73:9c:c0:
c3:2a:44:ab:be:cd:42:95:6c:74:28:54:95:7e:0a:
25:be:66:89:75:95:21:ae:93:47:4a:40:cd:4b:55:
da:73:f8:1d:3e:05:0e:7a:88:dd:8a:b5:fc:6f:56:
d8:67:45:81:6f:99:e4:a5:1f:ea:8a:8b:90:6d:1a:
4b:ea:3c:90:6a:a0:f5:49:f0:11:75:47:14:dd:a4:
66:74:d9:ad:ad:88:f0:f3:b7:ad:a6:11:de:43:66:
42:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:65:BD:55:DE:40:87:40:4F:43:EB:5E:CB:06:CD:F2:DF:B7:8D:CA
X509v3 Authority Key Identifier:
keyid:EC:77:F3:26:3F:E3:48:AB:2C:8D:36:84:75:D6:BC:04:7A:6A:97:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HfzJj_jSKssjTaEdda8BHpql2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/994851-7282-41be-91b4-d5172930f8bf/1/7HfzJj_jSKssjTaEdda8BHpql2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:27:9f:c0:f1:c8:e6:43:f6:6a:f6:9d:f9:25:70:d0:62:08:
c3:9c:65:15:04:79:42:a2:76:49:de:42:75:d3:e1:93:95:ac:
ef:4a:84:b2:fd:f0:32:8c:7c:79:76:13:9a:27:2c:c9:e5:78:
46:85:e3:51:6d:f5:c6:3b:a2:87:fa:d2:b0:1b:ad:6e:ac:93:
3c:23:3e:4c:f0:b2:be:7f:23:e5:2a:08:80:6c:8b:2f:25:9a:
97:13:e4:aa:6a:d3:e7:04:0c:de:90:dd:47:39:99:97:ad:2d:
f1:04:7d:48:f6:31:ae:30:a2:9f:81:3c:e6:db:9f:9a:bf:1d:
27:e4:15:ce:7f:c6:76:e8:0c:c6:ad:a7:de:09:f4:fe:51:a7:
cc:ce:0d:78:c4:d4:ab:a5:a2:22:4e:1f:7a:c2:c8:72:00:b2:
fa:5f:b7:1b:af:34:6b:64:83:2d:97:58:39:07:f3:ae:be:f0:
04:7e:ec:cf:2a:c6:b7:76:d3:59:da:a6:04:a0:c3:41:87:9d:
e1:00:5b:3d:3d:3a:6d:3a:83:78:f9:f2:c9:ba:eb:94:d0:db:
59:8a:e6:3e:bf:25:e7:d7:b0:08:cc:ba:ae:07:18:ab:18:c1:
5e:0d:49:58:70:e4:00:bb:34:7f:bd:59:04:e0:ed:1a:35:cb:
22:11:2f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:10:23 2025 by rpki-client