Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json)
Hash identifier: xT+doPh1XvYqVW/KOtWCCbZ63wr+6sySGEmoMJw57+4=
Subject key identifier: A8:EC:C1:40:3B:50:C2:8D:7F:3F:EF:D5:05:CF:5F:74:DB:FE:19:71
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 01989525061F91AAF1F016934FD0EA2BBB2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
Manifest number: 0D09
Signing time: Sun 10 Aug 2025 18:01:28 +0000
Manifest this update: Sun 10 Aug 2025 18:01:28 +0000
Manifest next update: Mon 11 Aug 2025 18:01:28 +0000
Files and hashes: 1: NdVYKLIGP2QzOZX__MqzIgHzXXA.roa (hash: JpTAajbqtuyws0Zyn29UdijI9/GnNDr8LpptWtQUD6A=)
2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: nSMgyDuqUNtPk6fI+X/vBNDot5Qo7GB35YwSEl5fG8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:25:06:1f:91:aa:f1:f0:16:93:4f:d0:ea:2b:bb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Aug 10 18:01:28 2025 GMT
Not After : Aug 11 18:01:28 2025 GMT
Subject: CN=a8ecc1403b50c28d7f3fefd505cf5f74dbfe1971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:08:76:b2:79:d5:61:5b:c1:df:e1:95:d5:
d6:28:29:4f:53:57:ae:2a:f9:f7:ff:60:18:8f:71:
45:77:64:74:70:35:ca:46:ce:7a:06:67:a1:26:d8:
93:59:f1:a1:5c:22:09:af:56:47:8e:1a:0b:b9:e3:
5d:a5:3e:e9:18:8f:e7:65:b5:30:9e:24:63:7a:d6:
2c:34:0a:fd:81:ec:86:5c:80:6c:59:7c:cd:06:90:
8d:fe:5b:81:70:40:63:c2:2a:b2:06:f8:7e:6a:9e:
05:6e:2b:89:39:60:1a:b9:30:2b:f1:1c:06:f6:16:
7a:c6:c2:9a:cf:f4:2b:26:15:36:ee:8c:bd:b9:2e:
de:b1:a7:03:21:97:a1:0d:d0:6a:47:a9:df:27:52:
6c:ce:2d:49:a8:11:8f:15:c4:f8:90:9b:c0:3b:f9:
38:86:cf:d5:37:3b:16:10:33:d6:1e:5d:95:e5:a6:
40:72:db:0b:a8:2f:d6:eb:b6:70:1a:95:0f:3e:77:
25:e9:38:5d:6d:d1:11:6f:81:b0:6c:57:b9:9b:fa:
44:ab:4f:8e:81:73:88:0b:9f:5b:35:4b:b2:dc:c3:
ef:c3:8f:ac:1e:bb:a7:7b:8f:4b:04:bb:0d:08:7c:
34:10:62:50:06:16:18:1c:a3:8c:e2:f4:ce:9c:c7:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EC:C1:40:3B:50:C2:8D:7F:3F:EF:D5:05:CF:5F:74:DB:FE:19:71
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:20:07:3e:87:b3:70:41:98:aa:44:f9:17:59:05:e6:46:0a:
c5:d1:dd:d3:f9:b4:90:87:c7:e2:68:30:21:22:d8:fc:26:08:
77:cd:53:9c:c4:61:0e:41:85:a5:3e:7c:12:d0:82:b6:56:74:
36:bc:9b:07:07:af:99:a4:0a:6b:11:c3:a1:16:1b:24:e1:03:
aa:d9:21:6f:d6:c7:75:4b:80:8e:0b:e0:a9:6a:2c:99:1a:ec:
a2:dc:d4:39:57:68:0b:6b:f0:c2:ea:7f:12:d4:d0:97:8e:03:
9b:14:cf:c2:51:20:db:a4:73:00:4c:f2:9e:f9:2b:12:d0:06:
02:90:56:3a:b0:a0:17:9d:d7:4c:8c:df:83:7a:e0:20:d5:b6:
2b:b6:77:5a:9b:62:83:29:c2:e3:dc:48:eb:77:5f:9f:3c:88:
05:c5:07:06:29:fc:3a:cb:a6:f3:d5:37:cc:ea:6d:13:c0:ed:
70:6b:5e:bd:19:89:82:86:16:aa:9f:79:fd:77:8c:97:8e:5a:
7e:98:6e:35:db:36:79:39:b9:0d:39:83:5b:90:11:48:70:c9:
b7:2a:9b:a1:e8:fb:12:51:8d:8f:2e:26:f7:b2:46:f5:67:2d:
8f:b3:7b:94:15:00:1a:6c:6f:3c:f2:14:d1:d6:2c:6a:2d:f7:
b2:c4:7a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:11:09 2025 by rpki-client