Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
File: 7b5zqycw806U8SDpv8Va9EBTafY.mft (raw, json)
Hash identifier: eQT+0DbsGVM5vbSdtBzZjmxVdEkMBe2XJXV+uLcbiMI=
Subject key identifier: 36:47:D1:D9:95:5D:0C:82:F3:14:65:5D:A5:DD:E8:E4:F7:C3:FA:B4
Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
Certificate issuer: /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Certificate serial: 0198D4746429AEDFC8BDE3E2847DCCA74686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
Manifest number: 03E8
Signing time: Sat 23 Aug 2025 01:04:14 +0000
Manifest this update: Sat 23 Aug 2025 01:04:14 +0000
Manifest next update: Sun 24 Aug 2025 01:04:14 +0000
Files and hashes: 1: 7b5zqycw806U8SDpv8Va9EBTafY.crl (hash: 0z+sug0mNe5SBXi8cmljUlw1hqmWCqeARIclT1IzS+M=)
2: K7v_erre4xqrVjEHRvxy-76X3oY.roa (hash: 73JVJm8ra91Vis54U60FFg9PWumAI6t/5NGHyQV5dMo=)
3: RqDjTULio7HkucdqWVIGBKTqd0Y.roa (hash: PcWewLEjusrfHJnBpktJ+OmKEcChBIByu4RElEeoGKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:64:29:ae:df:c8:bd:e3:e2:84:7d:cc:a7:46:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Validity
Not Before: Aug 23 01:04:14 2025 GMT
Not After : Aug 24 01:04:14 2025 GMT
Subject: CN=3647d1d9955d0c82f314655da5dde8e4f7c3fab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:de:05:b4:e5:e4:ff:31:fd:ed:5b:fe:1f:b9:
d0:c3:73:42:5b:0a:48:01:19:03:9b:28:e3:78:a6:
d6:14:b8:be:5f:b9:d9:c0:29:ae:a8:14:51:df:f9:
5e:4c:c3:d7:0b:a2:a3:f5:b8:7d:5a:72:b1:72:e2:
8b:94:05:d8:1e:7b:5d:f2:a4:5b:7a:98:2e:f0:42:
b9:de:b0:b1:0e:b7:8b:ae:76:2b:b8:d5:08:12:7d:
44:b1:64:da:4a:6c:a5:66:f5:5d:bf:7f:75:46:fc:
59:f2:fb:fa:62:ac:8e:7e:aa:de:e5:9f:28:7d:26:
d8:59:2d:eb:83:97:a4:a9:d3:82:fa:d3:f7:bd:e8:
a8:02:40:5f:c5:87:1e:d5:ef:9d:8a:35:61:91:d1:
fb:73:c4:c5:f5:21:fd:14:3b:37:eb:e2:8a:ef:aa:
1c:d8:e2:fc:30:3b:a5:30:82:ec:3c:4c:61:c2:26:
7c:59:ea:4e:ce:6f:0e:b7:b5:e7:b1:3f:ef:2e:3f:
eb:1d:22:42:7e:b7:0e:75:54:ab:d3:3d:99:75:33:
8f:cb:84:2e:10:4c:27:54:81:11:d1:09:e0:15:42:
5e:95:65:47:21:8a:c9:1e:51:b1:34:31:64:d9:ee:
ca:14:4c:5f:77:99:4a:fb:5a:c7:5b:a5:45:12:e8:
f6:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:47:D1:D9:95:5D:0C:82:F3:14:65:5D:A5:DD:E8:E4:F7:C3:FA:B4
X509v3 Authority Key Identifier:
keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:44:b6:4f:89:32:07:98:73:1e:80:97:ec:3f:eb:f8:67:0d:
1a:aa:0e:0d:9c:17:5c:94:a4:9b:54:81:21:87:b3:78:66:4b:
ab:fb:c1:37:f8:9d:7a:e4:70:cb:7c:60:24:d7:8f:32:f7:59:
09:b5:63:34:ad:9f:b9:0a:57:dc:6a:4c:bf:36:d7:02:0d:ae:
89:52:97:5d:0b:bc:01:f1:1a:c6:92:50:af:fc:48:86:67:ed:
c9:75:f5:e8:a5:6d:d0:1f:34:0d:41:ed:3d:d8:07:4e:5f:ac:
d4:87:5b:f4:d5:e6:0f:7f:a9:10:8c:cf:3a:18:53:9b:1b:c3:
b3:c3:39:27:cc:cf:3e:f6:4d:34:5e:f9:b5:58:90:d0:a6:e1:
dd:06:fc:db:44:35:42:4c:a0:f2:65:50:03:3c:90:8d:14:fa:
aa:c8:10:a4:00:12:7c:2d:a4:3d:47:3c:33:25:34:6d:c0:1c:
64:ea:04:19:e9:5c:c8:96:eb:2e:d7:96:6f:31:73:f0:ec:6c:
df:5f:3c:05:04:33:67:bf:40:d5:4d:16:3f:b1:63:fe:d6:4f:
af:19:64:97:c9:0f:ca:93:41:3e:e7:7c:1b:2e:49:82:85:e8:
5f:f7:88:dd:9e:dd:59:54:ec:2b:8e:f7:21:72:f7:bf:15:54:
1c:ad:ab:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:04 2025 by rpki-client