Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
File: 7VkCvfvXTDPqdkU9FF529qqFfEE.mft (raw, json)
Hash identifier: TIwCDNmkLWvzZScEMQb7iU0MwDFdJ4fxN/HIHaen2P0=
Subject key identifier: 4E:B6:1D:4F:1F:DF:62:E4:07:25:A0:03:B0:A5:04:7A:85:88:9E:C0
Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Certificate serial: 019872D014BF5546C35B66EE107A260E43BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 02:01:36 +0000
Manifest this update: Mon 04 Aug 2025 02:01:36 +0000
Manifest next update: Tue 05 Aug 2025 02:01:36 +0000
Files and hashes: 1: 7VkCvfvXTDPqdkU9FF529qqFfEE.crl (hash: l7fLv8CJueTRg4R0Mt660mjk2XAaLSepcHXrE+hrW1s=)
2: b9uFZXxchqu_WU8UVL2lcEelg1M.roa (hash: NHGZBJUOGWUhtzmDGEI+zLtl0jv4NmQvyCdklZRG/7E=)
3: mGTK3wTvfhonNVwr6seWi2ASIP8.roa (hash: aYF3ywz/BlGpMX8QkbZOivZvZOPC3l60CNt4ow7w3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:d0:14:bf:55:46:c3:5b:66:ee:10:7a:26:0e:43:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Validity
Not Before: Aug 4 02:01:36 2025 GMT
Not After : Aug 5 02:01:36 2025 GMT
Subject: CN=4eb61d4f1fdf62e40725a003b0a5047a85889ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:5d:bf:b2:a9:95:71:fa:6c:46:5b:06:54:
db:f4:4d:af:18:4d:33:34:79:3d:13:d0:01:98:a3:
4b:41:82:59:70:ba:77:bd:9f:01:56:5c:0f:56:3e:
3a:ff:25:d5:5f:db:41:4a:f8:c8:72:d3:3d:94:76:
44:bc:67:19:89:e0:67:1e:c7:a8:16:21:66:36:8a:
f5:6f:14:e1:8c:a8:28:8c:b8:5f:2d:cd:c7:54:41:
a2:6d:40:73:87:56:33:90:8f:1c:89:99:4a:98:dd:
47:de:e2:a2:33:f6:66:f5:b2:a6:37:7d:a6:fe:51:
54:b2:32:da:ed:ab:01:05:2c:85:be:74:3b:31:86:
bd:03:a0:2e:aa:7d:bf:78:ba:a9:f8:e4:7b:84:e1:
66:2a:2d:b9:49:35:83:fb:8c:98:03:f4:4f:8e:f1:
ed:fb:c8:a3:10:b6:c2:a6:8d:67:a7:52:2e:8b:9f:
1a:a2:2b:6f:22:8a:3d:80:5d:3f:20:e0:86:15:77:
51:9c:3e:3f:86:5d:75:74:e0:90:c1:3f:1f:b9:f6:
66:8f:e8:f4:83:52:a2:fb:ce:08:6d:7d:12:03:2a:
bf:8a:36:83:f3:ab:f8:b8:17:ed:18:16:1f:a0:51:
a7:09:bf:a9:d7:73:40:4f:b2:90:d2:46:89:1d:e0:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B6:1D:4F:1F:DF:62:E4:07:25:A0:03:B0:A5:04:7A:85:88:9E:C0
X509v3 Authority Key Identifier:
keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d2:a9:34:7a:9f:70:60:ea:ee:30:c7:23:4a:8e:11:70:05:
43:e9:85:8e:de:68:44:67:f7:70:a6:40:b3:4b:69:f4:6e:ff:
88:e0:59:81:4a:07:50:3b:74:c2:d8:e7:de:a2:5a:60:5b:51:
7e:3f:e8:10:76:d0:7f:5b:81:d8:e4:3b:9e:37:d5:6a:6c:56:
df:f1:f0:a5:19:ed:29:4a:c9:40:18:0c:23:7d:4f:00:ff:13:
9f:71:90:ec:bc:8e:b3:54:a8:bc:cb:0e:1b:55:b6:dc:fb:e9:
27:6f:bc:dc:db:36:c9:bd:b7:b1:23:b5:dd:ab:8f:33:9b:23:
3d:41:bb:ad:4f:05:6d:23:bf:92:df:18:fb:8c:cc:b8:98:c1:
75:0f:78:e8:23:1c:40:7e:5d:6b:2a:73:0b:09:42:a0:39:0f:
15:5f:61:0f:31:91:d4:d7:c5:e5:bb:e2:d3:8e:fa:51:fa:b3:
92:67:0b:23:05:b8:f3:4b:46:eb:d6:8c:af:39:23:8a:de:40:
b8:11:47:de:e4:c4:ed:2b:84:92:14:d7:32:37:38:0a:09:6f:
6c:c9:47:b3:63:c1:f9:c9:5c:ac:6e:35:b1:56:ef:1c:a3:89:
95:e7:79:35:51:ba:0e:05:03:b2:d6:0a:ba:2e:7a:2c:ec:70:
77:6c:77:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:42 2025 by rpki-client