Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
File: 7512O0ngJKe2oZ6vffuYkRqclMg.mft (raw, json)
Hash identifier: YuMwU/lVLZ5/V6Zc4jObimaPnWHf4Zvj+HbhuAwszRU=
Subject key identifier: FD:9E:DE:47:C5:FB:2E:17:4E:F6:56:56:A0:47:44:83:9B:82:E4:43
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial: 019879AEB62F2FE8BBE78B4DE822AF19E8CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
Manifest number: 1624
Signing time: Tue 05 Aug 2025 10:02:29 +0000
Manifest this update: Tue 05 Aug 2025 10:02:29 +0000
Manifest next update: Wed 06 Aug 2025 10:02:29 +0000
Files and hashes: 1: 7512O0ngJKe2oZ6vffuYkRqclMg.crl (hash: 0Uef8uPDFbOY2NX7H6m9e2CA0lm4md4t6pXfD534PH8=)
2: LSx9OlKUNiN9N5Lzmn4mpgYUaYM.roa (hash: SRtMriKTJRyDfQ60LOh5mHm3HAzdoYJatQZ33jFO0KY=)
3: Yzpl7dcbDV1oc45l6H78VWlDWek.roa (hash: rLWJRRPMzAUWRBDLzYpnEF8zI53ESvU9cKsYN1kvko0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ae:b6:2f:2f:e8:bb:e7:8b:4d:e8:22:af:19:e8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Validity
Not Before: Aug 5 10:02:29 2025 GMT
Not After : Aug 6 10:02:29 2025 GMT
Subject: CN=fd9ede47c5fb2e174ef65656a04744839b82e443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:a1:69:c6:63:5a:72:d0:06:2b:34:c6:d8:
73:dc:57:23:23:6b:a5:75:b5:a2:7a:a1:2d:0f:a5:
d3:1f:78:2a:87:75:8b:f2:af:c1:94:60:3d:d4:2e:
b7:ec:01:29:d8:e4:ae:c4:45:9b:b6:34:a0:31:52:
b3:fc:3b:fe:7e:e8:c0:f8:ea:1e:16:58:47:54:a2:
86:8a:e3:26:14:38:d6:ca:ca:ae:84:3d:0b:2c:67:
c1:43:09:cd:9f:79:66:0f:ed:e4:87:7f:f7:d9:45:
b8:b4:ec:13:0c:4d:c5:f6:99:ae:7e:16:60:a6:df:
78:26:4f:e1:e3:69:b2:fa:d7:9f:2a:54:41:ee:e8:
58:95:66:28:d1:80:4a:fd:b1:2f:73:f7:dc:d1:d1:
0e:4f:51:76:a4:ff:9d:9a:9c:f0:6b:8e:ed:54:59:
a7:ab:33:2c:b7:ea:88:b7:a7:3b:52:6b:e0:98:e6:
53:5a:a0:4a:20:94:55:e0:74:fd:3d:93:22:20:50:
8b:6f:0f:8b:68:08:8e:c8:27:c2:b0:5f:59:2f:5f:
1c:89:ea:1c:06:41:8c:44:f2:fb:d3:98:cf:5e:24:
06:74:ad:8a:24:b1:1a:8e:b2:f4:0f:8b:50:7e:7d:
c5:b2:f6:8f:01:e1:4e:31:39:1f:d2:e6:5d:62:ea:
bc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9E:DE:47:C5:FB:2E:17:4E:F6:56:56:A0:47:44:83:9B:82:E4:43
X509v3 Authority Key Identifier:
keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:24:55:d9:27:b3:b2:b8:4d:31:cb:e3:8e:ab:cf:be:98:ae:
ba:00:74:5e:c5:9b:1b:1e:46:b3:cc:25:09:8c:0f:9c:d0:84:
29:f2:4a:5f:48:ca:d0:d1:44:3f:2b:f1:46:67:19:10:96:b5:
e2:ef:6a:1d:d8:8f:30:d8:2f:f2:15:4e:dc:aa:60:1e:40:23:
36:1b:f6:70:1a:a5:f7:a3:65:a0:fb:c5:96:4d:26:26:5c:36:
28:57:d9:c8:46:8d:99:f5:c3:67:3f:48:28:ad:ec:eb:8b:39:
75:a3:e3:25:e0:ca:b6:87:25:d8:1e:f6:b3:fe:e0:86:a7:43:
66:f2:83:be:60:3a:49:9e:fa:46:dd:8b:e5:26:a7:e2:93:7b:
8a:b2:df:e1:a8:ae:36:cf:92:9f:aa:ed:64:d1:32:30:ff:52:
76:21:5e:c7:81:7d:ef:4c:73:fc:a4:e3:47:7b:7e:0d:2f:94:
9c:f1:ae:62:d4:b5:0c:36:d2:dc:f7:63:7a:de:9c:5b:9d:b8:
0e:6b:5b:aa:a8:44:69:23:af:7f:42:c3:ee:61:1c:38:ac:f8:
cb:f0:d5:ec:d8:e9:6e:7b:35:75:ec:84:55:16:84:77:8e:45:
1e:21:a4:0d:dc:ce:ad:a1:58:10:9e:33:7e:6a:a8:28:26:fb:
d2:f5:be:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:22:06 2025 by rpki-client