Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
File: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft (raw, json)
Hash identifier: OCzdiiVZ/jEbNEL9hQJwXK9ToyUZRsX1HAn5IhqB/bg=
Subject key identifier: 03:43:B0:23:9E:6A:EE:D3:9F:A0:56:9F:2A:A9:00:42:8E:B1:1B:34
Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
Certificate issuer: /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Certificate serial: 019895929E154CC92A8C8463AF9CC304E474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
Manifest number: 0585
Signing time: Sun 10 Aug 2025 20:01:10 +0000
Manifest this update: Sun 10 Aug 2025 20:01:10 +0000
Manifest next update: Mon 11 Aug 2025 20:01:10 +0000
Files and hashes: 1: 7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl (hash: 6am7o4Qxm5gvbAkMZGaYy55QJ3CL7BJ3KMi5oTOaKmo=)
2: eVimXbeUG-mEaqJ8wWvzirp1aiE.roa (hash: O9VHdGh9iSLdn0Tv56KJfU/KKXIBvl+hkZsad3bOt5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:9e:15:4c:c9:2a:8c:84:63:af:9c:c3:04:e4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Validity
Not Before: Aug 10 20:01:10 2025 GMT
Not After : Aug 11 20:01:10 2025 GMT
Subject: CN=0343b0239e6aeed39fa0569f2aa900428eb11b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:e2:81:f7:ec:0c:a5:a9:16:f6:2f:bd:1c:
67:39:e0:05:5b:e4:d5:f9:50:68:94:77:79:65:42:
38:bc:b7:08:c8:81:c6:ac:75:6f:f5:d7:80:9e:a3:
03:de:48:5f:c1:55:33:09:6b:cf:e1:99:b2:5a:30:
7c:88:f2:62:ad:d2:0b:bd:26:37:00:d5:91:7d:cf:
b8:dd:96:cb:5e:53:f0:4a:1a:35:1d:92:81:14:24:
3d:d7:4d:78:04:05:39:a9:55:76:ba:d1:5a:69:41:
05:ba:e5:ab:b2:e0:e1:e5:05:b6:ac:b5:cd:29:60:
92:f4:d3:4f:9c:79:6d:30:5f:d8:a4:d1:72:3f:ba:
90:1a:c9:5d:62:06:97:8c:cb:b1:20:af:5a:00:a7:
cd:f3:1e:1f:db:eb:d7:df:68:7f:65:07:fa:52:89:
35:09:e5:48:94:df:12:30:26:56:63:0c:65:a3:4d:
75:d1:d9:f0:68:21:2a:0a:b2:bd:78:25:31:eb:1a:
84:42:82:90:00:e8:03:cc:32:48:0d:20:8b:ee:0c:
a1:25:ae:50:7a:60:15:45:e9:aa:eb:db:87:9a:cf:
94:06:e3:08:8b:8e:00:e3:82:84:26:61:e5:1b:f9:
35:6b:00:ec:2c:60:78:93:93:1f:52:9a:42:e2:77:
a4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:43:B0:23:9E:6A:EE:D3:9F:A0:56:9F:2A:A9:00:42:8E:B1:1B:34
X509v3 Authority Key Identifier:
keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:45:b7:be:c9:5a:db:25:21:f0:e7:64:22:9c:88:1b:75:57:
e9:32:c8:32:0f:53:cd:54:b8:8a:62:68:26:34:93:32:08:93:
60:b9:32:e2:6f:ff:fd:e8:cc:53:08:3c:b2:8d:20:75:08:d4:
f6:23:70:66:7f:29:61:4e:c8:c1:81:20:82:b0:07:b5:25:c6:
d2:53:e7:1a:d9:03:dd:c5:12:13:bb:5d:6a:0f:c1:87:9d:01:
a0:a8:6c:57:1f:90:eb:ed:af:fa:8b:2c:71:2c:d0:94:02:00:
2d:3b:eb:aa:eb:4e:60:c4:ce:a5:6d:01:37:2f:8c:bf:a5:33:
46:9a:ed:44:54:56:fe:49:7d:d1:fc:ae:0d:4f:16:04:3a:c7:
dd:64:46:45:e9:17:ef:0f:cc:9d:65:1c:3b:a2:85:f3:e2:a2:
82:1d:d6:70:af:bc:ad:59:52:48:b3:04:dd:f4:19:b1:52:86:
86:46:c7:6b:12:91:d9:cb:3c:3f:5e:17:8f:ee:a8:3b:9b:d7:
02:c6:08:67:ed:b4:3a:43:0d:00:b4:8c:7b:67:82:85:9b:93:
42:4d:18:8e:f7:0b:d8:9c:ae:ee:5d:e5:d5:5e:1a:5a:1e:76:
99:97:bb:f4:11:7c:32:c9:46:37:a9:85:37:2a:74:d3:ac:70:
7f:47:87:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:13:21 2025 by rpki-client