Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
File: 7sMTGXauon0XHGwmepjT84KmGio.mft (raw, json)
Hash identifier: ZjIBQev8re89avBwDhsRZNnb2nJsOdxa6QeNzBrflCM=
Subject key identifier: F4:07:5D:1D:67:26:5B:EA:AD:D6:06:3B:17:F4:D7:DB:23:67:D0:64
Authority key identifier: EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
Certificate issuer: /CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Certificate serial: 0198952544EA676B9852B38BD0614296DC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
Manifest number: 101F
Signing time: Sun 10 Aug 2025 18:01:44 +0000
Manifest this update: Sun 10 Aug 2025 18:01:44 +0000
Manifest next update: Mon 11 Aug 2025 18:01:44 +0000
Files and hashes: 1: 7sMTGXauon0XHGwmepjT84KmGio.crl (hash: tiupeALvc99y+TNOrOp6BsoqKxkiYMQc8NOSbmuYS0c=)
2: qvDSjgW1rEvWcrU4jpSi6rsDCpM.roa (hash: T8Hf/3k6CSkU6S1AK65rkEFSmvPdWLsEssJ2od+QI9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:25:44:ea:67:6b:98:52:b3:8b:d0:61:42:96:dc:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eec3131976aea27d171c6c267a98d3f382a61a2a
Validity
Not Before: Aug 10 18:01:44 2025 GMT
Not After : Aug 11 18:01:44 2025 GMT
Subject: CN=f4075d1d67265beaadd6063b17f4d7db2367d064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d0:38:38:56:f4:dd:da:39:da:ca:08:8d:98:
e0:88:67:9a:57:4e:75:b3:79:ff:6b:87:3c:af:84:
19:42:9b:b4:9f:3b:80:d2:43:29:f9:64:b9:5d:d0:
cc:a0:4b:5d:5d:46:3a:da:71:90:e6:e2:d4:5e:4c:
65:09:83:95:eb:1d:9e:65:f3:ab:4d:74:c2:e6:49:
33:3a:6a:97:2a:fa:78:33:88:67:41:6b:a5:9f:ca:
ef:56:02:4f:05:a0:48:0e:e5:51:cd:d8:35:da:0c:
ff:f5:51:dc:11:a0:11:07:d0:2c:87:91:24:6d:f4:
5c:46:95:fb:76:71:a2:c6:f0:37:9f:b1:46:e8:f7:
91:18:0d:94:21:e1:e4:b2:ee:91:4e:6f:50:15:5f:
9a:11:7c:f2:92:e4:ff:5e:52:eb:83:5b:76:3a:2a:
e4:fd:51:8a:be:38:33:ba:10:ca:16:67:74:df:6f:
09:5b:f5:9d:d6:6f:52:4f:15:ff:a3:6d:48:46:65:
c3:0a:8e:43:89:bb:d5:69:83:7b:6c:f8:32:3e:09:
d1:4d:ac:4c:58:a9:be:bc:de:f3:a7:36:2e:49:70:
a2:f2:64:09:c1:67:3c:0c:1b:ab:d0:db:52:51:e3:
49:1c:e7:f6:9f:b3:db:a6:d1:cf:3a:68:9c:99:05:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:07:5D:1D:67:26:5B:EA:AD:D6:06:3B:17:F4:D7:DB:23:67:D0:64
X509v3 Authority Key Identifier:
keyid:EE:C3:13:19:76:AE:A2:7D:17:1C:6C:26:7A:98:D3:F3:82:A6:1A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sMTGXauon0XHGwmepjT84KmGio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e0efd-e5de-4df5-a551-4cd3e73216f1/1/7sMTGXauon0XHGwmepjT84KmGio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:01:72:3a:82:4e:4f:ac:e9:19:d6:4c:b8:69:c8:66:d8:60:
1c:8d:c0:03:b6:5c:93:7e:b7:f6:62:74:35:e0:f9:a6:5f:aa:
2e:cd:48:ed:b2:23:d9:13:b6:b9:8d:36:52:50:c1:39:5c:f5:
86:f0:0c:9e:fc:ce:bd:da:9b:61:75:3f:6d:26:0e:fc:b0:ae:
bd:94:c0:17:23:00:23:fe:9b:db:ce:cb:67:2b:32:3a:b3:09:
5e:a9:63:a9:49:e5:9a:8d:26:01:7d:d0:8a:bd:9d:be:7f:01:
03:50:29:25:fb:78:90:c2:09:18:97:e8:43:7e:bc:cb:e8:df:
08:8d:34:d8:ef:c0:df:72:7a:70:99:d8:d2:78:73:9c:ff:3f:
ef:be:7e:f2:7f:fa:08:df:bf:88:f3:8b:9b:9f:9d:88:b8:7d:
f7:84:4d:20:ac:9f:40:6b:46:a8:82:95:36:0d:62:07:57:1c:
59:71:e8:4a:51:89:d7:7f:18:d7:a3:15:d7:7b:d4:2b:a2:bf:
66:84:c8:bd:90:60:0b:f3:a1:63:ac:ca:32:22:48:4d:17:bf:
4d:51:6a:65:95:31:6e:25:c1:6d:c1:f7:a4:96:12:f5:cc:d0:
fd:a5:f6:71:fb:01:43:fd:8f:06:94:52:58:d4:03:44:b8:85:
87:f6:a2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:59:59 2025 by rpki-client