Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier: fNVQ/mdqccciXX6/HuzqXb5iZRya6M9t8r4miJ+nBec=
Subject key identifier: 7C:91:C4:5F:C2:D2:78:0E:30:54:5C:8A:AE:3C:00:A9:E3:30:22:0A
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial: 01988F907BEDB399C5387214D847D00A074A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number: 0B80
Signing time: Sat 09 Aug 2025 16:01:07 +0000
Manifest this update: Sat 09 Aug 2025 16:01:07 +0000
Manifest next update: Sun 10 Aug 2025 16:01:07 +0000
Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: J0jiREbIiNClENaqUrzHBM48bJEdiPWIpgnTLxT7/zk=)
2: sQ3JYG1qE-VbpJkkUv7gjERWISw.roa (hash: Eu9amXI9PIYJvHJFlrP4Ds55UyoCv7usyPM4xlXYBx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:7b:ed:b3:99:c5:38:72:14:d8:47:d0:0a:07:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
Validity
Not Before: Aug 9 16:01:07 2025 GMT
Not After : Aug 10 16:01:07 2025 GMT
Subject: CN=7c91c45fc2d2780e30545c8aae3c00a9e330220a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:35:62:55:76:14:0a:c0:8b:0c:39:ae:a8:
c1:9a:4f:70:a1:09:53:86:60:5f:7c:91:3a:e0:18:
1d:8f:a9:a7:82:38:76:9e:57:24:32:13:f6:b1:5c:
7a:dc:0c:e1:d2:50:fc:72:45:ce:42:2e:bf:84:7a:
aa:a2:ea:49:a2:7b:a2:04:ad:88:4f:9d:39:f1:e6:
e6:c2:13:ac:01:25:60:53:ee:56:d8:36:08:33:d7:
7d:8e:e3:d2:9c:de:6c:27:9f:dc:63:e8:27:84:1d:
27:ed:f2:29:be:5d:47:d3:58:17:98:c4:9f:1d:15:
bd:f7:1f:60:c5:40:1b:d1:6f:92:c1:00:35:0a:55:
ce:fc:f6:9f:41:f5:63:21:b1:b6:26:9d:4f:f5:e0:
ec:f2:09:ef:7d:26:33:ff:a1:aa:8a:29:ae:27:c0:
19:eb:3b:3b:4a:aa:c4:1c:55:52:45:f5:72:0e:3a:
cc:0b:64:97:9a:ae:c0:68:cc:56:b3:7d:e0:5d:55:
14:dd:4b:83:a7:6c:7c:8a:7e:e4:80:cd:3f:2f:24:
c0:95:49:0b:49:85:de:e8:f1:a1:d5:1b:50:b9:dd:
df:e4:8b:f2:51:aa:c4:0d:34:f9:2b:ef:5d:cb:93:
1e:ec:f3:93:02:39:0c:b0:f0:3e:13:d8:f6:6b:b7:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:91:C4:5F:C2:D2:78:0E:30:54:5C:8A:AE:3C:00:A9:E3:30:22:0A
X509v3 Authority Key Identifier:
keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:09:8f:2f:e9:d6:dc:92:6a:4e:b7:2f:91:b8:b3:b7:8d:55:
f9:d3:73:01:d9:fc:dc:0d:00:94:fa:d8:0a:ae:a9:f3:55:96:
a0:5c:5f:ef:0e:c3:18:5b:39:04:8b:be:ef:1d:1d:fe:4c:1c:
b4:e9:4a:9d:a4:b1:96:55:0f:e4:ae:88:69:a2:92:0a:e0:ac:
34:47:36:72:93:c2:2c:73:9b:ba:71:6a:08:9a:55:3e:e2:a3:
5c:c4:bc:2b:70:be:50:cf:1e:6e:44:65:46:ab:ad:63:0e:e3:
96:bb:81:3d:4d:9b:a8:7a:69:6c:4a:bf:2c:02:99:7c:5d:ee:
66:8a:26:a3:c0:2c:ee:b5:44:56:3c:c5:53:ce:bc:20:f3:77:
e3:07:87:72:70:02:cf:fa:35:df:dd:0a:49:fd:0a:94:ed:c4:
52:94:3d:2b:79:b8:f6:61:64:89:74:23:44:95:eb:e2:5c:36:
45:12:89:b0:d8:36:e1:ea:75:66:84:e8:76:10:8c:7a:8b:81:
da:5e:96:e9:db:0f:04:5a:28:ca:ef:bd:06:2a:2d:51:72:bf:
74:09:9b:d8:24:9f:fd:bc:15:c3:64:a5:a1:04:bb:10:55:b2:
ac:03:f0:2f:65:f2:31:ca:20:36:8d:28:54:35:56:da:25:33:
84:1c:71:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:44:14 2025 by rpki-client