Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: XYqnplUCp3lmomXDSupvLgOmoBCw9ZJV0cM8PspIIqk=
Subject key identifier: E0:5A:AD:88:AF:17:37:61:A8:0B:8D:76:AA:89:71:06:12:88:3B:37
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 01989749CE1858676E32A98F80071E867D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 04:00:53 +0000
Manifest this update: Mon 11 Aug 2025 04:00:53 +0000
Manifest next update: Tue 12 Aug 2025 04:00:53 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: yYyGFtPrcmRdK2bCvU8d/xqxp9r9W7yZfPmgGt8AgJg=)
2: EGlVEH0t1gc2k3CbZYwnROsYmlo.roa (hash: QuNd2zucwGufr5KDRuyXtcoNqdw2w2ni9eYQfrLXoy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:49:ce:18:58:67:6e:32:a9:8f:80:07:1e:86:7d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Aug 11 04:00:53 2025 GMT
Not After : Aug 12 04:00:53 2025 GMT
Subject: CN=e05aad88af173761a80b8d76aa89710612883b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e5:29:d9:02:b1:22:ba:9b:b8:64:ed:60:16:
43:b7:38:5d:7f:b2:b6:f3:57:2d:23:ca:b3:aa:b2:
ec:75:75:25:6c:cf:45:9d:ba:32:5c:11:80:26:5f:
10:94:b2:3a:29:3d:39:b1:78:e8:f9:2c:b0:39:49:
27:11:08:6d:a0:f6:6c:3e:53:88:d7:0e:c7:0d:d5:
50:9e:dc:ab:a9:25:7e:b8:76:86:d8:44:56:d7:79:
83:ed:8d:66:38:78:25:8d:1f:b7:61:7d:67:cb:f6:
f1:c6:a3:ea:40:06:a9:d6:d5:75:b4:d4:a5:1a:f2:
cb:3f:35:9e:fd:c1:67:5b:51:e6:58:fd:18:2f:03:
b3:71:d1:46:ae:f4:e2:3a:0d:af:2e:6a:89:e3:97:
f7:12:12:d9:f2:4c:e7:c6:59:88:4a:51:6d:ea:db:
00:8f:0f:81:b3:b4:f0:52:9c:bc:01:19:a3:96:2c:
99:ff:80:2b:60:84:f7:20:60:6a:fb:c7:37:fe:1d:
fa:67:e2:4a:c7:6b:48:e3:6a:de:aa:6f:c1:f7:45:
b2:cf:87:c5:1a:8c:59:6c:5e:6b:8f:c1:64:2c:b7:
5b:b0:9b:53:5c:56:9e:a2:9e:34:09:4c:c0:34:e6:
9e:b6:6c:af:1d:38:95:eb:c1:c6:39:85:c8:13:28:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5A:AD:88:AF:17:37:61:A8:0B:8D:76:AA:89:71:06:12:88:3B:37
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:15:67:02:26:08:e1:9b:77:b2:b4:a0:8c:01:1d:c9:05:f7:
29:e8:e0:fb:cd:d5:dd:e8:f7:30:36:73:0e:07:af:cc:4c:1d:
54:e1:99:db:d9:8d:20:c5:33:6f:b1:3f:51:19:f8:7c:fe:63:
ee:b8:40:e3:0e:08:53:27:06:be:2b:78:9f:da:19:12:46:0a:
79:16:10:f4:97:a1:34:46:4a:b5:50:e5:1c:1d:93:e6:04:23:
e5:c0:d1:1a:34:9e:fc:19:d4:f8:8c:68:00:b9:33:5d:06:4c:
ee:0b:56:7e:cf:0d:fc:19:31:c6:6c:bd:87:2c:92:44:f9:65:
27:76:33:af:24:8e:0c:d1:de:e9:63:b4:8e:50:37:ee:4e:b3:
93:e8:09:04:9f:c7:53:37:d0:48:36:c9:ee:62:d0:77:9e:2b:
e1:58:ba:63:a2:f8:2d:64:13:78:63:65:77:a6:9d:10:8f:14:
ed:48:a3:94:72:e0:44:e7:8e:00:8b:cc:8f:59:b6:ff:1c:99:
e1:40:a1:a8:30:b4:16:e0:a0:46:9b:9d:6e:e3:8b:2f:e4:92:
36:33:39:22:07:a6:8f:de:cc:ac:cc:1a:32:90:d4:a4:92:76:
78:4f:07:d6:9a:73:d3:d0:a8:44:69:c7:c0:43:d1:bf:9d:39:
0f:1e:5d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:44 2025 by rpki-client