Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier: uz7pFK8nmlncuIUzT3+RKLxW692D1MKGC8iYspjvp10=
Subject key identifier: A0:C4:43:45:A0:F4:1B:84:2A:21:47:2F:27:B5:F4:4F:E7:5C:2E:38
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 0198D5BBC12B378C6F09EEF40B6D5D1E30AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number: 1654
Signing time: Sat 23 Aug 2025 07:01:48 +0000
Manifest this update: Sat 23 Aug 2025 07:01:48 +0000
Manifest next update: Sun 24 Aug 2025 07:01:48 +0000
Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: +RiD1nnSrkeq7D5j2nM7KX6iFYa+swu4NAyP0xktirg=)
2: JjxG5JBV-4sLSO9ydbLM49BAtzE.roa (hash: cqElNxOa+f907x34fYoberfp0CD4VgTc1FzaMtoENtc=)
3: tkrTEHat3bSdWp0mTcT7h8ohu0E.roa (hash: 9f4QW5MnJXddCGseXoiWv8iW8ue5LxII6QEIhlpZ0fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c1:2b:37:8c:6f:09:ee:f4:0b:6d:5d:1e:30:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Aug 23 07:01:48 2025 GMT
Not After : Aug 24 07:01:48 2025 GMT
Subject: CN=a0c44345a0f41b842a21472f27b5f44fe75c2e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f2:1c:4e:1d:0c:6f:ef:13:6c:b4:0d:ab:df:
b3:ae:7e:5f:8a:3c:0d:a2:25:24:5d:c3:dd:26:80:
bb:da:1e:0c:58:ce:90:5b:7f:93:9e:63:64:db:ff:
3a:ab:fb:81:06:c5:60:18:e7:6b:5a:78:45:29:31:
e7:d3:40:a6:c9:40:af:eb:14:9d:8d:22:2f:82:cf:
20:f5:6c:60:a9:92:b4:77:6b:80:61:6f:01:d8:40:
73:3a:6d:1a:8c:a7:98:6a:a6:77:25:22:12:05:d8:
4d:d1:eb:98:a3:0b:5a:e4:7a:af:fa:dc:df:01:0f:
27:a5:97:56:9f:96:44:51:b1:3b:b4:1a:37:80:68:
b9:44:5d:b9:32:f2:28:e4:2b:7c:2c:e0:be:8f:2c:
be:fc:ef:4c:fa:b3:0d:2c:b9:9f:ac:3b:04:05:06:
a1:bc:0d:ff:af:70:bc:e9:57:d3:e9:53:1e:79:32:
17:7c:ef:3d:b4:e0:e6:e9:a9:52:95:c5:5b:77:2f:
87:5a:77:4a:c3:6b:78:bd:00:27:79:34:ee:80:a8:
6b:04:03:dc:62:f1:81:a4:1c:45:39:79:27:44:d1:
29:67:0c:33:2a:f1:8a:51:da:1f:ba:e4:8e:86:e1:
55:51:ac:52:bf:f6:f6:75:b3:ed:da:53:69:af:a9:
0a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C4:43:45:A0:F4:1B:84:2A:21:47:2F:27:B5:F4:4F:E7:5C:2E:38
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:60:1c:22:fb:b6:49:52:b9:45:23:ac:e6:10:21:b7:fe:c7:
4e:08:d0:fd:a9:36:13:c9:8c:a6:18:50:80:9a:df:cb:86:25:
5d:8e:b9:51:20:e3:58:57:53:1d:31:6b:63:53:63:97:0a:77:
91:de:ec:ef:7f:50:08:50:6f:c9:6e:9c:70:1c:96:06:1f:16:
8d:e6:20:7f:a8:14:67:7d:95:8e:32:df:8e:3c:11:8a:aa:73:
a3:79:d5:ec:ee:bf:df:0a:eb:d2:e3:83:c8:36:3c:e5:58:df:
33:dc:9d:ba:a5:a5:a7:f7:ae:3c:ca:b5:89:f2:1e:33:80:c7:
a5:24:2f:00:4d:33:6a:da:d7:db:4d:5f:bf:e3:7e:f7:fe:d4:
82:54:57:0b:af:55:32:56:3a:e8:00:db:89:94:e8:cd:5f:6e:
05:4e:2d:00:db:f8:dc:c6:98:bd:51:fa:52:9b:71:88:d9:c9:
9b:5d:fe:9b:ba:d9:c2:85:f7:ae:7d:b0:56:d9:34:7f:0b:bb:
40:38:80:07:80:2c:f7:cb:16:96:21:20:62:c9:d3:2b:39:6c:
6b:d8:f9:ae:45:30:f8:a9:86:bc:93:15:78:5e:6e:ec:9a:c3:
d4:27:3f:1d:64:52:63:e2:57:fe:29:b8:db:7c:df:c2:75:62:
21:cd:ab:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:33 2025 by rpki-client