Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
File: 7nwowZyp0nBozrxpyBVBZ13BLN8.mft (raw, json)
Hash identifier: OH1r9LYUNj1D+2wdTiZt/WKYeN5iTWYJHl66CMUHyBI=
Subject key identifier: D1:77:2A:64:A2:2A:18:59:4A:98:FB:94:1E:A5:86:0B:57:8C:94:AD
Authority key identifier: EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF
Certificate issuer: /CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
Certificate serial: 0198D6615B6A06831820F6303FB8FF19F093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:02:41 +0000
Manifest this update: Sat 23 Aug 2025 10:02:41 +0000
Manifest next update: Sun 24 Aug 2025 10:02:41 +0000
Files and hashes: 1: 7nwowZyp0nBozrxpyBVBZ13BLN8.crl (hash: fr35kSDWrp5rnXW8m20JH7HUjr64xAOkO9WUT7t3seo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:5b:6a:06:83:18:20:f6:30:3f:b8:ff:19:f0:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7c28c19ca9d27068cebc69c81541675dc12cdf
Validity
Not Before: Aug 23 10:02:41 2025 GMT
Not After : Aug 24 10:02:41 2025 GMT
Subject: CN=d1772a64a22a18594a98fb941ea5860b578c94ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:3a:5e:0c:61:f1:6d:aa:f8:31:f4:c9:d0:
e2:3e:4d:0c:9c:a9:0b:4d:46:40:55:e1:bc:42:80:
26:8e:e8:18:f5:5c:88:6c:2b:da:f4:8a:82:2f:c1:
6a:f0:f9:39:b5:69:4c:ba:54:5c:e5:f9:5f:45:d0:
ca:72:17:8b:ab:48:6b:36:63:3c:8d:d3:f8:24:04:
7b:d5:9b:be:39:82:9e:ba:22:e8:cc:7d:10:20:4c:
f7:32:3c:a8:05:1c:2a:35:e1:c5:e5:ad:6f:3d:91:
19:2c:27:dd:5a:a6:17:61:3f:27:e8:8e:92:8d:36:
21:ce:0d:1f:47:7a:88:b0:29:28:0d:aa:4b:b3:5f:
d8:38:75:9d:53:51:fc:a1:cd:18:aa:f5:e0:52:fb:
b2:d5:64:24:be:6b:dd:eb:13:9f:f6:a8:c9:45:7d:
92:a1:87:70:61:be:3d:ee:f9:ae:bd:90:91:eb:42:
25:c5:c6:01:76:fe:17:14:ec:05:b5:ad:a6:55:37:
39:65:3b:ae:4d:1f:1e:8c:16:44:68:22:e6:03:c1:
7d:ef:66:cd:ff:11:59:f9:01:2e:4c:1c:46:54:ed:
ee:c0:b2:f8:09:4c:ad:5d:7c:ee:b0:02:ac:e0:74:
70:1e:5d:5a:6b:f6:c0:fd:79:a8:aa:cf:81:ca:d1:
f6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:77:2A:64:A2:2A:18:59:4A:98:FB:94:1E:A5:86:0B:57:8C:94:AD
X509v3 Authority Key Identifier:
keyid:EE:7C:28:C1:9C:A9:D2:70:68:CE:BC:69:C8:15:41:67:5D:C1:2C:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nwowZyp0nBozrxpyBVBZ13BLN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e24ec2-d956-4575-9287-157e3ed52f11/1/7nwowZyp0nBozrxpyBVBZ13BLN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f5:9d:02:66:c6:43:d4:4f:77:be:ed:85:b0:1e:67:e8:4e:
57:b2:93:45:a2:97:f1:76:96:8b:e0:7b:b7:ce:ea:9e:24:01:
23:56:8d:35:2c:bd:de:89:83:36:5d:a2:18:37:89:a9:67:a7:
de:73:61:f4:87:aa:9f:3a:73:73:57:14:d7:82:02:96:25:c4:
d8:48:3a:52:c3:63:01:b1:3b:30:6a:2b:38:8c:73:28:3b:88:
31:2b:6c:fd:78:e4:04:1c:c3:dc:db:87:d0:cd:1a:12:6e:67:
11:d7:29:75:fa:b5:3c:a0:1d:2f:28:1c:91:2d:3d:36:4a:c8:
44:52:83:37:7c:20:4d:be:ac:23:ae:fb:f4:12:59:f2:b2:68:
ca:a8:4f:df:25:5d:35:01:d8:17:1e:72:08:c8:1a:a1:96:57:
3e:9b:e0:0b:cf:8f:b5:51:c3:71:76:d0:f7:b4:ce:e0:3d:dd:
d7:3b:e7:b2:21:d3:31:71:be:c8:6f:ca:f9:66:e8:ff:20:31:
9b:1f:8f:c3:23:fc:59:0e:d9:02:ca:25:5c:98:4e:cb:2b:60:
36:e9:ff:3a:b2:b7:1b:f0:3d:0d:8d:bf:89:bc:bb:5a:bc:8d:
a2:c4:bc:5d:0f:aa:b2:38:df:5f:18:76:44:34:9c:8d:6f:20:
db:74:a2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:20 2025 by rpki-client