Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
File: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft (raw, json)
Hash identifier: lczzRnnVnMqOpUWj1t/if9xTXk79XFdn2nadDn8sCSI=
Subject key identifier: 06:4F:C0:18:48:A3:C0:48:42:E2:87:20:90:DC:65:57:C7:4F:F0:9C
Authority key identifier: ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
Certificate issuer: /CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Certificate serial: 01989448E877D0915145D0DAE28340177879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
Manifest number: 162A
Signing time: Sun 10 Aug 2025 14:01:02 +0000
Manifest this update: Sun 10 Aug 2025 14:01:02 +0000
Manifest next update: Mon 11 Aug 2025 14:01:02 +0000
Files and hashes: 1: 7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl (hash: aDqxqiyVGkACn/hHXQ/Vy9NxXC2vRoHQzyIIChXKoWE=)
2: NtOWsHokBD2D-h9w2vIY6AqcxW0.roa (hash: NgvfZzRezTm/iHnWAmu436qovNykwseNE0VLXLqNwzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:48:e8:77:d0:91:51:45:d0:da:e2:83:40:17:78:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edd13d3741e4b3f3a3a3e34721f1246e4b27c7a6
Validity
Not Before: Aug 10 14:01:02 2025 GMT
Not After : Aug 11 14:01:02 2025 GMT
Subject: CN=064fc01848a3c04842e2872090dc6557c74ff09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:5c:1d:b2:fb:a4:49:ff:48:22:cd:95:96:
f5:32:5b:ce:3a:a6:64:8d:60:0c:c4:88:aa:fd:3d:
54:77:58:d2:f7:d0:95:46:50:03:06:85:cc:50:36:
79:b3:44:e6:be:cb:df:cd:2e:48:f6:6b:fd:3a:b9:
e4:2b:d0:1d:67:f3:82:92:93:8b:75:1f:d1:9d:c0:
5d:3a:30:48:c5:35:95:73:bc:e0:6d:35:97:22:6a:
70:92:de:bf:44:cc:a3:95:e0:35:98:df:4b:2f:f3:
a1:da:91:03:b1:56:c4:3e:93:fb:d5:0c:fb:06:1a:
60:85:44:e0:d0:40:06:ed:e6:84:91:ab:50:8b:82:
0d:28:05:ed:32:35:3c:4f:52:7c:fb:86:b8:36:00:
7e:74:bc:19:74:e1:2d:ca:a6:a1:ec:42:07:dd:40:
9b:c2:dd:a4:f4:61:85:99:87:5a:36:c4:52:a2:93:
96:0b:bf:2a:13:2b:6f:9e:f4:4a:9d:b5:4e:5c:77:
d9:00:38:2c:d5:4a:ef:c4:e6:60:c8:e9:7b:6e:1d:
38:6c:4e:38:94:a6:ad:15:21:a6:16:d5:2e:5a:44:
01:c4:d0:df:34:ae:75:b9:2a:7c:aa:d4:ee:d7:dd:
0e:73:77:80:72:d8:1e:dc:c4:66:fe:fb:56:3f:9c:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4F:C0:18:48:A3:C0:48:42:E2:87:20:90:DC:65:57:C7:4F:F0:9C
X509v3 Authority Key Identifier:
keyid:ED:D1:3D:37:41:E4:B3:F3:A3:A3:E3:47:21:F1:24:6E:4B:27:C7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8808bc-976d-4212-ad2f-1a8f23e2cebb/1/7dE9N0Hks_Ojo-NHIfEkbksnx6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:67:6c:73:b7:82:b8:0b:38:b3:dc:a9:10:d4:36:9e:3d:ae:
8b:a2:c8:2c:a8:00:6e:e3:e9:19:26:71:11:f6:4b:81:f2:83:
44:b1:73:7d:97:f7:00:dc:c5:33:8d:ff:15:53:ab:ed:8f:7d:
5d:60:f6:73:0d:0d:30:6f:2f:5b:27:51:37:32:22:c1:59:98:
09:35:cb:cb:50:af:02:3a:97:2f:58:ab:8f:01:3e:52:ae:57:
ff:6b:1e:62:c0:96:22:89:ee:a1:e8:44:51:70:25:4d:8f:4f:
83:0f:36:78:a1:64:4e:ea:ba:de:29:d5:af:fc:9f:d9:e9:ad:
d0:59:dc:17:c7:47:79:d1:6e:cf:c1:d0:9c:87:96:04:dd:ca:
fb:42:aa:a2:12:60:8f:20:eb:e5:ef:da:87:90:80:9f:d6:83:
b2:00:79:eb:16:cd:80:2d:9f:c2:a0:48:ba:b1:13:b0:85:1d:
f2:7b:51:7d:4a:93:3c:0d:b5:fe:32:6b:14:e9:45:53:ed:31:
1e:8a:46:b0:b4:53:8c:23:22:25:07:66:6e:27:cb:5f:95:63:
6c:d0:69:ae:1e:bc:03:12:f0:3f:29:22:e7:48:d9:37:34:d3:
2a:ae:52:3e:5b:bc:a4:32:8f:94:4a:1d:25:43:bc:3c:6f:18:
7b:14:1c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:15 2025 by rpki-client