Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
File: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft (raw, json)
Hash identifier: CDz/EaZJBhYte1njQH8yC/YkUnTcXEIS0pidrgjaXQA=
Subject key identifier: 28:92:B8:B7:F8:69:18:71:1F:02:8F:92:AC:11:26:56:8E:90:65:BC
Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
Certificate issuer: /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Certificate serial: 01988B45CA92045C87331206A8A242399415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 20:01:03 +0000
Manifest this update: Fri 08 Aug 2025 20:01:03 +0000
Manifest next update: Sat 09 Aug 2025 20:01:03 +0000
Files and hashes: 1: 7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl (hash: TRBsdGxOS33pmA1Ki1Rxr44jnVo5tlN2P5oCIGScPNU=)
2: EiUuk_NOU4Yk3nk2nn56zZabZvk.roa (hash: 6qv2yhWzsdq9RqBF8lz3ldQ0Ka6+KKmmMeovRbBrbQI=)
3: MBu8VTmpr04x0tshZWj7vlWVLfA.roa (hash: ulHARLad6WzWUuYeIJe/P7G2yuuz8lPKXAfu9iAhsvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:ca:92:04:5c:87:33:12:06:a8:a2:42:39:94:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341
Validity
Not Before: Aug 8 20:01:03 2025 GMT
Not After : Aug 9 20:01:03 2025 GMT
Subject: CN=2892b8b7f86918711f028f92ac1126568e9065bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4e:d0:aa:35:ca:ea:66:92:98:8a:08:07:9b:
c7:4a:1b:8b:72:9f:03:25:9e:44:d7:16:ed:8b:e7:
7b:12:2d:f2:bf:22:17:21:6f:15:5c:7d:a3:25:5a:
a3:1e:43:0d:ee:fc:ae:d2:27:41:d8:e0:52:61:fa:
6b:9e:2c:0f:bb:8a:35:e6:f9:f5:7f:18:0e:f7:b8:
0d:0c:02:3b:3f:25:f8:06:b1:94:df:3b:4d:2b:0f:
9f:aa:67:6a:14:71:6c:e8:ca:eb:05:d2:6f:02:5f:
92:31:6b:b4:57:6c:ee:ea:80:88:da:19:21:4a:fc:
ad:47:c3:2b:f0:97:d2:05:ff:ed:3f:a4:44:08:79:
c7:6a:17:81:6e:53:bf:b7:03:6a:64:cb:f8:d8:2d:
33:05:99:3d:32:75:65:c4:b7:36:b2:b9:30:4e:09:
73:84:9b:23:b0:f3:dd:18:34:4a:30:16:46:d7:a7:
3a:15:05:6c:51:91:63:be:59:5d:5d:3b:59:2b:77:
6d:d5:10:d1:ab:24:69:5f:29:c4:d1:05:48:db:85:
81:64:06:8c:b7:43:dc:8e:e0:0e:cb:b4:52:fd:53:
99:f0:b6:f6:fa:8c:10:46:05:37:45:d9:7b:ac:85:
d6:a9:04:5c:bd:c9:2f:ee:d2:c6:f8:2c:82:d3:45:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:92:B8:B7:F8:69:18:71:1F:02:8F:92:AC:11:26:56:8E:90:65:BC
X509v3 Authority Key Identifier:
keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c4:bc:b1:64:d8:6d:08:78:a5:30:5c:34:a8:11:4e:97:59:
86:4c:01:41:a6:13:38:99:4a:3a:9a:c5:eb:37:fe:94:6d:27:
6b:78:b2:d0:4d:dd:5c:eb:82:54:d6:f7:6c:18:d5:2a:7f:33:
ed:bb:55:fe:d2:19:e5:41:8a:b2:ac:9d:73:3c:b8:fe:a0:ff:
95:c8:7a:d1:98:c1:91:cf:43:2a:f1:93:7d:6c:d3:3c:2f:14:
f5:a1:e9:91:a8:97:21:a7:5b:ee:eb:0b:f5:ea:91:0a:88:f0:
c8:f2:ad:ca:ce:1f:48:5a:ae:4e:1c:e6:ed:92:f3:e0:92:a7:
d7:65:b0:5d:66:2d:85:6d:2f:ad:f8:3a:5d:43:09:bd:2c:d3:
d3:0a:d0:40:ac:72:b1:73:64:ae:06:28:03:cd:cd:bb:aa:3a:
83:26:cc:15:e1:70:39:44:3b:f5:ca:a9:79:9b:10:25:2c:04:
11:63:bb:01:83:9b:94:aa:03:a3:5a:97:b0:06:b9:b2:c8:45:
9b:ff:dd:24:6c:0d:6b:c6:d7:38:51:92:dd:88:e1:d8:ed:c0:
27:ff:e9:5b:95:49:9a:36:19:f3:49:ef:5d:c0:eb:27:c1:68:
b0:62:cf:6c:a4:f9:da:32:75:bd:19:dd:58:f0:b0:04:b1:1c:
09:b9:80:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:39 2025 by rpki-client