Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
File: M7chLm_l_PDueNzQRA32ngCq1Nw.mft (raw, json)
Hash identifier: jbTiOQCVAOnGPbyAw88+DvvfmPCj8efdq8csUrYcl6U=
Subject key identifier: 7C:6B:9F:8D:AA:EC:8B:48:CC:63:D6:74:A0:1C:9C:43:6D:45:B0:49
Authority key identifier: 33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
Certificate issuer: /CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Certificate serial: 0198729845F084B4C3805031E1ADF28AD531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
Manifest number: 135B
Signing time: Mon 04 Aug 2025 01:00:38 +0000
Manifest this update: Mon 04 Aug 2025 01:00:38 +0000
Manifest next update: Tue 05 Aug 2025 01:00:38 +0000
Files and hashes: 1: M7chLm_l_PDueNzQRA32ngCq1Nw.crl (hash: k4fSMFGB8Sr84BLvFVWS6nB3/DImnRBVngeXAaQTf+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:45:f0:84:b4:c3:80:50:31:e1:ad:f2:8a:d5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Validity
Not Before: Aug 4 01:00:38 2025 GMT
Not After : Aug 5 01:00:38 2025 GMT
Subject: CN=7c6b9f8daaec8b48cc63d674a01c9c436d45b049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7e:78:ff:71:34:dc:a9:8a:95:cc:43:44:e2:
95:05:19:7c:f0:19:3a:45:18:e4:d3:f0:b3:25:9d:
fd:66:41:c1:f6:43:c2:6e:01:3f:d2:ac:df:da:8b:
0c:c5:ad:f7:bd:97:46:97:ac:f4:76:b4:8a:ee:f9:
2c:72:02:d5:0c:8f:e3:ed:a2:c4:c5:29:20:ad:e2:
f2:33:a7:7c:6f:76:72:ac:8d:6d:1a:44:93:2a:22:
6f:93:4c:45:3f:d8:c5:7c:78:c9:20:ba:9f:c0:3a:
39:ec:46:a0:8e:ba:24:f9:52:d8:18:5d:68:fb:27:
e8:2c:04:ad:92:87:fc:06:7f:2c:3f:1f:de:1c:0b:
3f:64:9f:50:ac:27:94:0f:9e:e4:ac:3e:85:6f:47:
15:15:c6:b4:89:e0:e5:5e:e5:13:88:58:a3:2e:b1:
04:81:56:6d:07:fa:c8:20:da:db:37:bf:41:19:b4:
d1:1f:81:52:d6:c5:06:e4:d0:89:3e:fe:ba:4c:bc:
6b:87:cc:3b:a9:5e:19:86:b3:b5:1d:f7:74:cf:6c:
38:67:16:46:a2:5e:c8:ce:b6:76:dd:01:0e:24:31:
e1:dd:0a:61:dd:a1:06:70:43:1b:c1:0f:c9:8e:c7:
d7:62:01:79:9d:52:39:a3:2a:c5:54:65:53:13:38:
f9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6B:9F:8D:AA:EC:8B:48:CC:63:D6:74:A0:1C:9C:43:6D:45:B0:49
X509v3 Authority Key Identifier:
keyid:33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c7:9a:55:2c:17:5c:30:cb:70:62:fc:14:35:bb:f6:56:6b:
68:77:c5:1f:b1:70:fc:ee:ee:90:70:58:77:32:c7:49:5a:eb:
a7:8b:68:b9:5c:07:85:01:0e:03:e8:a9:74:c0:2c:84:4b:d5:
13:ee:26:79:9a:ec:97:bb:7b:69:48:c4:9f:e5:b1:9d:74:c0:
22:0c:03:3d:f1:de:31:3d:4f:7c:b6:76:d6:b4:c2:e9:1f:76:
c1:71:28:86:6d:d5:f2:e1:ea:11:e4:a4:9d:b2:e9:21:9c:37:
b9:03:b4:8e:64:d7:ed:3e:db:95:36:da:df:76:bc:c5:0e:3f:
14:3c:dc:dd:1d:98:f3:29:ed:bc:7c:5e:17:c5:21:e4:f5:8f:
1b:97:7a:4b:f2:b6:e4:19:6a:73:b6:0c:95:c1:95:cc:d9:44:
ed:64:36:ea:51:08:29:9d:b2:1c:52:38:fc:cc:59:b9:7c:b3:
a0:63:c7:25:19:9f:cc:76:a0:29:63:23:3f:3d:52:7a:2d:72:
d3:26:3c:0c:21:66:78:33:f6:25:7b:2a:c3:3d:6f:a9:a6:dd:
f4:46:1b:0e:c4:3e:41:c1:77:99:c8:b3:87:20:92:81:46:4b:
43:d6:f9:e5:e0:77:af:2c:13:36:ec:42:e4:49:85:d1:50:36:
84:12:3c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:54 2025 by rpki-client