Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File: 7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier: 22EqBTnADZN8PZRac4TkW/iqKWuuu0ITxFg1dSfPBhU=
Subject key identifier: D1:23:85:EE:C0:AC:D2:88:D6:6F:A2:23:E3:78:67:D3:95:77:EF:65
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer: /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial: 0198801D48C1E65EBE85513BA1BDD6586FEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number: 13E7
Signing time: Wed 06 Aug 2025 16:00:59 +0000
Manifest this update: Wed 06 Aug 2025 16:00:59 +0000
Manifest next update: Thu 07 Aug 2025 16:00:59 +0000
Files and hashes: 1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: VzowF9X6J6i7s32P2IYXsL872jKx1Wbr/SG2MsdOKkA=)
2: Fy9dAaWIGt3DDwam3RK8I1POnD0.roa (hash: mN5AYrqpl0VfVq4+AtyPnI39fV2fuW1S27zeiDc2nYY=)
3: iXO3PWE_FsU0xKYk8Y2XbQDtbQM.roa (hash: iCHtjZhnNNI84krnhRcpRLsDA1PIVF/eAzRpZb4b+rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:1d:48:c1:e6:5e:be:85:51:3b:a1:bd:d6:58:6f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Validity
Not Before: Aug 6 16:00:59 2025 GMT
Not After : Aug 7 16:00:59 2025 GMT
Subject: CN=d12385eec0acd288d66fa223e37867d39577ef65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:a7:f2:7d:e1:65:9f:13:8c:3c:78:1f:6e:
f3:9b:3a:93:57:4b:3c:5a:36:a1:bd:51:1f:9d:af:
b7:bb:1f:1e:d9:e0:2b:a9:62:a4:a6:d4:3e:ae:11:
08:df:07:b0:b6:a0:74:4f:a2:98:3c:ad:67:38:07:
44:64:6b:05:a9:ad:8a:73:68:55:1d:71:12:13:12:
29:42:95:17:d9:70:ab:5e:28:60:2a:28:48:1a:7c:
e2:23:5e:72:ee:5a:a4:f1:ee:af:ef:26:eb:0a:7b:
b0:f5:40:77:8d:d0:2e:ce:f4:56:ff:53:4b:71:54:
1a:75:03:cc:75:f6:db:dc:f1:f2:0e:ea:32:f1:0f:
7e:74:28:8c:5c:ec:f9:f4:ab:55:2d:28:02:38:03:
71:78:f6:6b:3d:1b:bf:f4:dd:7f:89:ae:87:dc:cc:
b3:c2:99:03:b7:c0:63:29:de:be:4f:78:90:cb:18:
1d:75:f7:85:7b:8a:07:31:18:3c:e9:e4:07:99:0a:
82:7a:37:4c:f2:32:0b:32:1e:8c:40:34:81:24:69:
2d:01:f0:a4:e7:be:09:67:03:6c:88:52:73:be:2e:
12:cd:90:b8:fd:c7:4b:d0:67:6d:41:17:e0:bd:af:
10:d8:70:41:1d:98:ab:1d:12:65:70:fa:08:94:55:
e7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:23:85:EE:C0:AC:D2:88:D6:6F:A2:23:E3:78:67:D3:95:77:EF:65
X509v3 Authority Key Identifier:
keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c8:2a:6c:57:de:bf:d5:11:5e:a0:e1:8b:8d:20:63:b1:07:
a1:88:c5:9c:7b:b5:b5:d2:b1:2e:a6:6e:29:c2:62:b3:85:c1:
72:aa:8c:45:78:cb:47:cf:ed:a2:a2:a6:67:a7:ec:8e:b7:7f:
c6:db:77:0a:a4:f7:72:6a:00:9d:ee:71:22:f4:a0:eb:8e:4a:
6a:91:ea:40:d7:c5:69:19:fa:27:b1:f5:4f:9b:28:56:38:05:
14:f1:5f:e8:cd:14:63:52:48:05:07:28:d6:4b:50:5d:cc:0a:
7e:e7:29:8b:ea:d0:8a:26:ec:16:d5:3c:97:de:18:cf:27:ed:
0c:31:1b:16:d1:91:d2:24:4b:a6:3c:42:91:6f:bc:07:a3:ee:
30:bd:19:69:7f:14:b7:2c:f6:be:a0:b2:fb:ed:26:e6:c1:0f:
51:73:31:7d:01:4b:d6:d2:32:be:c0:2e:53:95:a1:11:27:cb:
74:a7:86:9a:ad:9f:ac:3a:0b:22:e9:80:0f:0c:22:82:2f:8c:
7e:31:16:6e:4a:fe:b0:e9:9d:0a:66:2d:a6:80:61:5b:f4:4d:
96:50:37:42:a6:ca:4f:5b:ed:4a:87:e0:f9:bb:fb:0b:97:80:
b9:58:3a:14:41:a2:28:ed:8f:16:c9:47:d5:27:f4:dd:54:23:
2b:c9:84:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:04:21 2025 by rpki-client