Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
File: 7b0PKQXgq8BkIDFlajpWnvc3tNA.mft (raw, json)
Hash identifier: aMEPIylVSAmH053ndWDY01SoZdaqKFDcZTPVVZOWI8A=
Subject key identifier: DE:5A:68:B7:A6:AD:B1:F0:2D:F6:F7:68:EE:F9:8C:F1:D7:E3:03:83
Authority key identifier: ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
Certificate issuer: /CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Certificate serial: 0198A12932A812A8572A69EA50E3514EFA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
Manifest number: 10BA
Signing time: Wed 13 Aug 2025 02:01:28 +0000
Manifest this update: Wed 13 Aug 2025 02:01:28 +0000
Manifest next update: Thu 14 Aug 2025 02:01:28 +0000
Files and hashes: 1: 7b0PKQXgq8BkIDFlajpWnvc3tNA.crl (hash: 8da3A2yW69TeIXqcv2Aaf+5SGamk0BHWbfcZdUeUdgc=)
2: 8IeUbOwS853SmApxlhlEYT9gqJU.roa (hash: rGq2PKCmYf+7DCOarfnzmeAZXnBOsSkimboD75gDmOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:29:32:a8:12:a8:57:2a:69:ea:50:e3:51:4e:fa:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbd0f2905e0abc0642031656a3a569ef737b4d0
Validity
Not Before: Aug 13 02:01:28 2025 GMT
Not After : Aug 14 02:01:28 2025 GMT
Subject: CN=de5a68b7a6adb1f02df6f768eef98cf1d7e30383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:8a:f1:14:fb:ec:8a:a1:60:62:23:79:fa:
63:80:b1:37:83:ef:4d:47:ed:a2:89:6a:99:25:e0:
90:c4:d7:e9:75:24:7b:64:b0:39:b1:a9:54:d1:b4:
20:fe:15:5c:26:a7:46:7c:fc:dc:b5:37:40:19:29:
22:22:7d:54:b6:91:6f:6e:94:d2:3b:16:b4:e5:21:
91:04:f6:0b:30:fe:c1:b2:49:d2:03:6d:b1:fb:7c:
64:f2:d4:ce:01:a8:7f:17:d9:28:f4:25:b1:7a:95:
3b:72:fc:b1:af:36:b9:5a:fb:eb:9d:36:3a:a3:91:
04:3f:44:c5:ad:5a:12:c3:ab:b9:13:2e:04:b8:53:
68:71:a6:67:79:b8:bb:db:90:4d:c6:ca:af:ec:b6:
19:88:55:ce:a8:69:c2:0f:47:c9:44:be:06:cf:cd:
5a:3c:63:86:ae:9b:38:a4:c0:f2:b5:a1:05:42:a7:
91:f2:eb:c0:c0:0a:6f:78:21:6a:8f:04:5f:6f:c4:
a6:6a:fc:33:24:07:82:7e:4e:7e:dc:6d:d8:44:6f:
43:2e:ef:6a:81:5e:4b:18:81:4e:30:be:04:7c:b9:
33:b2:f1:35:d4:a5:a6:40:0c:0e:38:09:48:9e:d9:
16:e0:62:51:bd:9d:0f:b8:d8:32:44:c3:7a:d9:12:
fa:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5A:68:B7:A6:AD:B1:F0:2D:F6:F7:68:EE:F9:8C:F1:D7:E3:03:83
X509v3 Authority Key Identifier:
keyid:ED:BD:0F:29:05:E0:AB:C0:64:20:31:65:6A:3A:56:9E:F7:37:B4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b0PKQXgq8BkIDFlajpWnvc3tNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6448d2-fe07-4fc4-9624-028fe5255bbe/1/7b0PKQXgq8BkIDFlajpWnvc3tNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:60:a8:34:1b:8f:17:90:0e:8d:65:32:0c:11:43:22:b0:d7:
80:ff:e6:c0:ed:0e:77:82:8c:13:ec:b3:dd:32:6b:ab:2b:29:
b4:a8:dc:f0:30:73:92:68:23:29:d4:c6:1e:22:ef:3e:a8:ff:
31:a2:57:2d:7d:43:59:17:e4:d7:33:10:d0:c8:39:37:e2:20:
4a:e8:89:82:e7:c9:23:06:25:49:6a:18:51:6c:b3:d6:ce:38:
57:6d:cf:dc:d7:9c:4b:96:45:4b:16:99:f8:a4:f0:99:c4:93:
74:e8:02:95:6b:18:11:90:65:2b:a9:9e:df:88:c2:ac:74:3f:
bd:19:09:3b:5b:92:10:65:eb:3e:21:16:f7:20:7d:93:93:13:
df:f7:51:d0:f3:ca:e0:dd:22:b3:af:09:0a:24:52:00:7b:92:
19:6d:ed:e4:9d:41:be:02:dc:62:b4:53:03:8e:57:5c:6a:06:
ac:ea:54:e7:5d:a5:41:41:3c:89:7a:4a:e4:53:f4:8e:45:b5:
e3:14:35:c9:fe:c5:6b:bb:54:fc:d4:4e:c6:ff:3b:fb:0f:55:
fa:02:03:40:5a:4f:29:58:ed:10:e8:f2:7f:18:ea:91:d0:7c:
0a:5c:e5:c4:74:f0:76:be:2c:93:66:2d:6f:e6:d0:a6:3a:a9:
10:46:f0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:30 2025 by rpki-client