Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
File: 7vvoNpp7vAOob75jm376oCtxcoc.mft (raw, json)
Hash identifier: kbTu9a+pLmY+AvjLn+ti8c7AXi/hTEMTSlZPAJFxyn4=
Subject key identifier: 1F:56:13:4C:D6:AE:23:99:71:27:0A:BF:7C:F3:A5:DB:B6:59:C3:57
Authority key identifier: EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
Certificate issuer: /CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Certificate serial: 019896DC92176769AAA79FD07DB804A7AFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
Manifest number: 0D11
Signing time: Mon 11 Aug 2025 02:01:34 +0000
Manifest this update: Mon 11 Aug 2025 02:01:34 +0000
Manifest next update: Tue 12 Aug 2025 02:01:34 +0000
Files and hashes: 1: 7vvoNpp7vAOob75jm376oCtxcoc.crl (hash: mU5FKoK3nqWw2coA1RaFjcM3NT2XnbtGm3cEMd6Mwxo=)
2: Lob4QDIP2dfLNefIfHCH-elGr6w.roa (hash: gcr1vfLV1uOvIBLUDtdkrAdiHkI7eAoGXpU8ShFCIEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:92:17:67:69:aa:a7:9f:d0:7d:b8:04:a7:af:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eefbe8369a7bbc03a86fbe639b7efaa02b717287
Validity
Not Before: Aug 11 02:01:34 2025 GMT
Not After : Aug 12 02:01:34 2025 GMT
Subject: CN=1f56134cd6ae239971270abf7cf3a5dbb659c357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:87:12:9a:c6:53:c8:8e:b1:6d:d8:9b:ac:
61:a8:ac:6c:ce:0d:d6:3b:36:a4:9c:09:03:2e:13:
7f:30:52:b9:1f:66:a8:69:bb:4f:4a:7a:1f:f2:03:
cf:1b:b7:ac:b4:c0:e5:b1:1d:a9:59:51:02:42:2f:
2e:fd:12:dd:83:b6:62:3b:90:c6:6b:9f:7c:d8:a2:
5d:dd:e1:34:bf:49:38:54:16:d1:72:6c:72:36:5d:
da:f0:7e:af:99:72:75:19:fa:cd:96:97:71:62:e3:
b5:5b:99:4e:08:02:b3:8e:35:46:68:09:6f:7a:ed:
6c:6d:e9:24:87:41:a3:bd:ee:31:dd:b5:ac:5e:ac:
fb:c7:60:cd:ba:c3:30:7c:cd:3e:50:5b:47:5e:68:
70:dc:0a:ce:58:72:ac:eb:2b:3c:2d:d6:a3:14:1b:
6f:ac:ef:34:32:33:11:30:b9:71:41:e3:a5:fc:4a:
da:6b:05:f3:55:81:b8:8d:93:33:37:f9:9a:c9:4f:
2c:7c:64:34:b9:85:12:03:65:be:75:99:0d:67:04:
a2:cc:88:8d:61:c8:0c:dd:5e:3a:1d:bf:ba:0f:1b:
c3:9c:89:df:2e:5d:ec:4a:e9:be:20:0d:4d:4e:3e:
9e:95:43:54:84:cb:30:1f:57:e5:dc:fa:8c:c4:b7:
13:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:56:13:4C:D6:AE:23:99:71:27:0A:BF:7C:F3:A5:DB:B6:59:C3:57
X509v3 Authority Key Identifier:
keyid:EE:FB:E8:36:9A:7B:BC:03:A8:6F:BE:63:9B:7E:FA:A0:2B:71:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vvoNpp7vAOob75jm376oCtxcoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1be999-5a59-4c10-92ff-da1b58618841/1/7vvoNpp7vAOob75jm376oCtxcoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f0:65:46:1b:fc:b9:f8:ea:9a:21:86:a1:99:d2:f6:75:d5:
cd:db:c4:0a:2a:ac:94:fd:b4:89:27:9c:b8:92:7d:79:25:8c:
dd:70:eb:ee:9c:d1:92:85:b0:32:fc:b7:3a:eb:eb:e4:6a:54:
fc:bf:19:9a:67:2a:2b:7e:62:a3:55:63:93:41:16:6f:b8:47:
72:b4:14:0a:ca:9d:4c:7d:65:df:4b:a2:e1:25:85:0c:4e:fc:
e3:f2:46:86:ae:1b:1b:19:81:3e:23:3d:75:1d:e8:e2:59:a5:
e8:03:ca:31:f2:46:7a:ea:5f:61:83:dc:3a:10:d6:38:a1:fd:
14:74:1a:1b:0b:82:07:ca:bf:e6:f4:d2:ee:7c:6d:b5:b0:55:
ca:40:cf:6c:67:3c:67:de:19:a6:bb:c9:66:f8:a4:dc:b1:4d:
35:91:e4:cf:22:77:89:bf:ce:ef:82:09:33:c9:ea:60:ec:b8:
20:34:ac:54:34:2d:9e:7d:aa:11:0c:ed:34:40:f6:55:17:0d:
79:1f:20:0d:14:57:1d:f9:b7:19:d8:a2:3e:f8:d7:13:3b:13:
d1:d2:10:7b:b0:31:e1:1a:33:67:0f:40:5f:f2:bc:5b:19:b5:
c9:7b:79:f3:15:2a:c3:07:fe:0a:63:13:cc:d4:6f:40:6c:f2:
1b:3e:c9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:19:35 2025 by rpki-client