Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
File: 7cPfBG4eHVvwUiu5E_KVcoekm0s.mft (raw, json)
Hash identifier: C7VsrkMq9oK8Es6TZ41x2kMrsJ6G4gEKRRf3EmDIow8=
Subject key identifier: F5:C8:5C:36:BF:B7:35:C4:60:28:72:4A:31:93:00:F3:A4:56:83:BA
Authority key identifier: ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
Certificate issuer: /CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Certificate serial: 0198733D37D04EDBB5AA00CA3E546CB5C1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
Manifest number: 0D86
Signing time: Mon 04 Aug 2025 04:00:48 +0000
Manifest this update: Mon 04 Aug 2025 04:00:48 +0000
Manifest next update: Tue 05 Aug 2025 04:00:48 +0000
Files and hashes: 1: 7cPfBG4eHVvwUiu5E_KVcoekm0s.crl (hash: v8nLRW47k+JehAHvPr5Yl2PvjkVfaJqjbxjFOaRM/U4=)
2: _JGWiygFUesXv5bnUwI668QYMo0.roa (hash: tSMCpwe6YrahqMRkzD/bacyXkbLZAIyumbRrGFQA0qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:3d:37:d0:4e:db:b5:aa:00:ca:3e:54:6c:b5:c1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3df046e1e1d5bf0522bb913f2957287a49b4b
Validity
Not Before: Aug 4 04:00:48 2025 GMT
Not After : Aug 5 04:00:48 2025 GMT
Subject: CN=f5c85c36bfb735c46028724a319300f3a45683ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:cd:0f:fb:bc:19:28:ce:70:5d:7a:fe:63:
09:20:4c:79:a2:2c:56:b4:90:52:c6:e2:6f:38:d7:
69:d0:8b:04:be:09:24:75:45:46:b8:02:f9:45:4f:
49:8c:2d:86:9e:0c:66:12:fa:fb:d8:34:e7:70:e1:
ea:4f:a6:c5:81:55:33:c2:30:24:43:9a:b2:9e:1f:
a1:6d:58:36:ab:42:ba:45:db:b4:e2:10:ef:a9:98:
74:43:6b:6e:b6:05:0f:1c:08:69:92:a7:9e:27:8b:
6f:3f:ea:0d:0a:43:14:81:7e:a3:8a:21:f3:92:22:
68:67:05:ae:3d:f4:20:ff:1c:bc:4c:60:df:b8:0b:
6c:35:e1:e3:c3:ed:6e:71:f3:57:82:0b:4f:8f:0a:
00:f6:d4:bc:b7:12:0a:a0:12:c0:d7:65:4a:e1:2f:
3f:4a:3b:62:c2:94:4e:fe:6b:06:ef:1a:2c:ae:4f:
61:e0:be:d1:e6:bd:10:8d:24:bc:5f:aa:0a:be:a9:
fc:0c:ec:35:82:84:67:06:1d:cd:79:58:8d:f4:60:
11:a0:e1:ac:23:67:65:6d:ca:63:a8:f5:e6:37:38:
ef:44:33:04:8c:01:91:63:6b:1e:90:eb:b2:f3:d0:
a8:9c:74:6c:9f:4b:71:bf:cd:2c:dd:7d:f3:c2:9f:
b6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C8:5C:36:BF:B7:35:C4:60:28:72:4A:31:93:00:F3:A4:56:83:BA
X509v3 Authority Key Identifier:
keyid:ED:C3:DF:04:6E:1E:1D:5B:F0:52:2B:B9:13:F2:95:72:87:A4:9B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cPfBG4eHVvwUiu5E_KVcoekm0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/afd611-9ac0-414e-be44-523e445f90dc/1/7cPfBG4eHVvwUiu5E_KVcoekm0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:84:fb:61:59:4d:7e:16:9c:2d:98:12:41:fc:a2:f1:19:86:
92:3b:00:47:cb:39:3d:52:5a:21:6e:98:c2:96:9d:b9:43:c2:
92:02:65:59:a6:d9:53:1b:6a:79:87:39:59:da:cf:b4:82:bd:
69:4a:fb:3e:91:1a:4c:de:96:89:90:09:e0:6a:db:6e:a0:6a:
d3:1c:1c:1c:70:f9:5e:92:dd:ff:c2:d4:a7:c9:9b:68:d2:9f:
37:a1:09:89:e9:a0:48:1e:2e:a1:80:a1:3b:0d:2d:3e:93:de:
8a:42:80:5d:48:49:a0:73:62:0a:4c:5a:c5:0f:6d:25:9b:a0:
d6:a0:8a:d2:e7:b6:26:85:41:88:32:13:8b:de:84:6a:ba:8f:
2d:d0:e7:a9:ae:19:4c:cf:35:4d:af:ee:3c:c8:de:34:c1:51:
64:1b:0a:95:5f:a8:38:0a:83:63:86:30:18:0f:9e:9f:14:8d:
d2:54:76:5b:8f:ef:81:4f:3f:27:1f:6f:2e:96:25:b7:06:64:
ce:4a:dd:24:41:58:ac:02:ae:02:fd:33:d0:e1:3e:83:b3:a4:
69:00:71:b2:c6:12:1e:9f:be:93:0f:b0:fe:9c:99:9a:f1:ee:
69:89:fc:74:8b:97:3b:5f:d3:16:33:da:2b:fc:55:36:87:67:
c0:4e:e9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:54 2025 by rpki-client