Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.mft (raw, json)
Hash identifier: BwhIbfYeEGIxCCvm6YOmGyefBuQwN2ImFbo6wov0TH8=
Subject key identifier: B2:D3:DE:E2:04:18:16:C0:8E:5D:20:D2:6B:14:F7:4B:C1:8B:32:60
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 0198D515BC2F15D1E3909826C5560A47817B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
Manifest number: 165D
Signing time: Sat 23 Aug 2025 04:00:28 +0000
Manifest this update: Sat 23 Aug 2025 04:00:28 +0000
Manifest next update: Sun 24 Aug 2025 04:00:28 +0000
Files and hashes: 1: 7kOBzgO6piUBmYDzeP5BuytmIbk.crl (hash: 68S5kkN7z/AsHlyMOOBAkhtVY57XlO6P0LRs/CejotU=)
2: BuLlbSCfr8m5R0bdvUy2auaVYo4.roa (hash: 5vhRJn1bAKiGFLiI67C1axUPj/VuaBvfb8oPGD+JOlw=)
3: MiQ5lO70RTIllrRi3q-oV9hjYQY.roa (hash: bCltxRSzrKGlzGDkjY4BpBmmHNltm/4kHnZFojNlryM=)
4: USr1BZseWrfiddVmQ3oagoYeVS8.roa (hash: fHK4bL/1/KZuBDBsjanJjPnUX5OQraHpiXiVTlsikY0=)
5: YaWraI8rZ3g7qo7uwVIGgMNHmoY.roa (hash: fh8nT5vZdM5ZHaPxQ043knM/D5f5HwhE2yBZCYzTFqQ=)
6: afEdQgqnbCftaot9zEVr5N_KEik.roa (hash: Lhf9vxXJqsESp4nJxNUJAzjKFEVMzT7S69LVaasmd6w=)
7: rELj50bmqX-dlIZz4LmRngTG7Ls.roa (hash: Dvzjy4JJ4c7OB88K3L17CIigy3BXYYRK2W4QmjOw5Z0=)
8: tzvqdjfI-5GkWfLXDw0rhlyGwjE.roa (hash: WRtCEE9bn80NcIoJC83Nzrz1w5Lqw7rz3krWgHW5q2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:bc:2f:15:d1:e3:90:98:26:c5:56:0a:47:81:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Aug 23 04:00:28 2025 GMT
Not After : Aug 24 04:00:28 2025 GMT
Subject: CN=b2d3dee2041816c08e5d20d26b14f74bc18b3260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ac:98:08:25:79:22:01:a0:60:f0:16:d0:fc:
6a:12:3e:ce:08:99:e6:33:a0:5d:88:b1:80:16:67:
71:c6:63:11:cb:8d:81:9d:ff:b8:c8:02:be:6e:dc:
f1:4e:33:44:cc:51:c8:f8:8d:35:94:9e:db:6c:5e:
33:26:ea:37:da:f8:dc:18:19:05:7b:6a:07:a3:92:
c0:35:d1:b7:50:89:29:aa:fb:58:31:60:2e:c7:c7:
aa:62:f2:d6:f4:2f:9b:d1:ea:43:6b:06:34:e5:40:
5c:94:01:be:5b:92:ea:0d:8a:67:6f:bf:ad:cc:3f:
bc:88:48:39:d0:66:38:06:e9:43:a6:95:a0:8d:a3:
2e:01:fc:b2:04:3d:6d:58:e2:ba:b9:9f:f2:ff:74:
86:1e:8f:b8:37:59:0d:47:6f:d0:11:08:48:de:8b:
c0:01:cd:41:02:4b:9a:82:3d:0b:02:c4:b4:b7:11:
24:cc:69:49:53:0d:d2:4f:f1:38:88:d5:ca:44:4f:
24:75:89:c4:48:0c:21:b6:45:ab:1b:2f:d3:98:8e:
57:54:26:2a:62:77:f2:db:74:19:76:92:2f:63:b8:
34:f6:84:fc:7f:15:f4:31:51:7a:e9:74:34:7c:81:
4c:a0:17:72:cc:84:d7:96:51:c3:5c:77:0b:52:50:
cc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D3:DE:E2:04:18:16:C0:8E:5D:20:D2:6B:14:F7:4B:C1:8B:32:60
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:43:c4:d7:d2:de:b9:7b:1b:30:ea:8d:9d:57:45:ee:66:a4:
0b:3f:9a:e2:2c:fb:8a:48:69:90:d1:54:e2:64:31:e1:19:df:
25:38:f6:64:ae:67:a6:ad:6a:52:8f:8d:de:ea:96:ce:fe:19:
9d:ed:1b:c1:c0:4b:51:3d:4b:f3:1a:72:61:fe:9f:d4:a8:16:
e5:69:91:00:a6:84:a0:f7:e2:ac:72:d1:13:7c:e6:dd:80:cb:
f6:52:e2:2c:8b:17:b6:c5:3b:fd:c8:8f:8c:17:5c:b2:db:e3:
3e:e1:75:37:48:e7:27:e7:2a:c4:c6:85:1e:20:52:48:df:2b:
6e:03:de:6a:81:aa:53:2f:4c:6b:73:18:f6:70:7e:14:ad:0e:
12:b1:7e:96:69:93:3b:48:15:64:2a:c5:15:30:95:d0:d9:da:
4e:9c:22:58:14:20:91:f3:cb:78:1a:19:01:34:66:01:83:90:
65:4a:0e:cf:ff:a5:dc:25:b6:c3:98:11:27:8c:b2:67:d1:31:
53:e4:3c:27:ab:89:8c:ac:ad:4e:28:df:33:fd:d5:c3:ab:76:
d3:44:33:82:28:62:e0:5e:4f:fa:58:ae:f9:e6:57:3f:04:a8:
a2:17:cd:57:5a:a6:21:39:8c:e7:79:bd:25:21:8e:d3:00:d9:
3c:95:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:14 2025 by rpki-client