Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
File: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft (raw, json)
Hash identifier: Y+x5IfXETLeRSveQAD8k6luUkTCnDXHR3o/s3J1raKE=
Subject key identifier: 8E:9D:3E:A8:DE:19:B4:34:4C:24:95:9D:7F:CF:CD:CB:F8:C9:AB:28
Authority key identifier: EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
Certificate issuer: /CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Certificate serial: 0198D5BBD4DDCC5B9540E73C1785430EDC26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
Manifest number: 0D31
Signing time: Sat 23 Aug 2025 07:01:53 +0000
Manifest this update: Sat 23 Aug 2025 07:01:53 +0000
Manifest next update: Sun 24 Aug 2025 07:01:53 +0000
Files and hashes: 1: 7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl (hash: +OfZNH00x7Fi1jlpTllaFX+VeJwBK0L4hOjAtajovHE=)
2: pHwUDvw0Qa6FCMDxKYzOWGmXJqA.roa (hash: t43FxbHkEwauKOd1tgnKpZSOOT0Im/fP5LgjaAezi/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:d4:dd:cc:5b:95:40:e7:3c:17:85:43:0e:dc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebf5b51999637c80bf93c8a903d16c3aec25341
Validity
Not Before: Aug 23 07:01:53 2025 GMT
Not After : Aug 24 07:01:53 2025 GMT
Subject: CN=8e9d3ea8de19b4344c24959d7fcfcdcbf8c9ab28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:19:23:b5:bd:43:59:d9:09:9f:fd:7a:7b:0d:
d8:02:33:e0:76:23:82:2a:6e:40:b9:c8:d9:10:fc:
1f:fd:0d:2b:ce:c2:b7:28:51:7c:d2:5d:d3:c7:b2:
7d:df:a1:7f:cd:4b:2f:1a:2f:9d:bb:1d:d7:31:7a:
f2:85:bf:80:1c:db:a4:01:70:43:92:12:cb:b8:64:
26:6f:f2:b0:a4:9a:2f:d1:23:b1:88:e5:df:f4:24:
12:49:b7:58:36:94:b8:a8:bd:89:90:17:68:1d:8a:
45:6d:04:4b:f4:4a:5b:c5:84:68:af:8d:8d:22:f1:
28:77:17:40:d0:8b:84:3f:ff:0f:3b:ae:3d:bf:ef:
5e:57:d4:8a:c8:b4:ce:93:4d:3d:bf:fd:7e:b0:69:
8c:ae:7e:1e:8b:1e:ab:d0:f3:bf:53:a6:29:72:09:
be:60:27:68:99:d4:43:a0:d6:61:15:db:3f:3d:1a:
d9:5a:29:74:6c:31:c5:74:a7:94:d2:09:1f:66:79:
20:55:71:10:15:8b:70:04:92:89:41:31:ac:0b:71:
fb:24:36:b3:47:bd:69:d6:24:9c:4e:4f:e4:68:ff:
e1:c6:b4:1e:92:50:d4:f0:ec:13:00:dc:ff:29:f2:
79:68:3a:53:ef:4a:0a:cb:fa:2f:99:88:b4:36:bc:
4e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:9D:3E:A8:DE:19:B4:34:4C:24:95:9D:7F:CF:CD:CB:F8:C9:AB:28
X509v3 Authority Key Identifier:
keyid:EE:BF:5B:51:99:96:37:C8:0B:F9:3C:8A:90:3D:16:C3:AE:C2:53:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r9bUZmWN8gL-TyKkD0Ww67CU0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7577fd-3b45-404a-bfe0-5424dc63e2ac/1/7r9bUZmWN8gL-TyKkD0Ww67CU0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:68:1a:60:32:c9:14:fa:ec:7d:63:e0:37:4b:cb:c6:8a:00:
11:5b:80:db:91:04:96:ec:72:c9:4c:54:e8:5f:2f:12:cc:02:
b6:c1:4a:1c:e9:6f:ba:5a:7b:74:19:47:14:95:c7:fa:d6:5a:
79:42:e1:36:37:ee:a6:f6:71:75:31:84:e5:e5:70:fb:30:e3:
b1:c7:2e:41:63:ee:11:12:14:cc:ba:92:6f:42:c5:0f:08:b7:
bd:95:ee:cd:f5:d7:15:9e:be:dc:05:83:68:ee:06:22:bd:89:
91:69:e3:e8:74:b5:cb:c3:96:48:29:32:96:6c:fc:21:6a:98:
e6:02:e1:4a:88:d7:f2:35:e5:6a:56:69:47:c0:f7:0e:28:8f:
02:e5:18:71:e8:22:f4:d0:6c:ed:d5:a7:a0:6c:c0:4c:e6:9f:
a0:8c:2f:b0:e6:99:60:78:ba:20:c5:25:10:1b:79:a0:40:95:
4a:57:19:e0:bd:70:7f:02:de:a7:bc:80:3a:a2:ae:0e:b6:23:
15:45:fc:4a:a7:32:6c:f7:8e:fd:dc:c5:0a:32:a2:3f:ba:c6:
ef:3b:50:12:1a:f6:b9:a9:a7:7e:30:82:36:07:bf:d3:ee:a5:
d7:c5:38:7b:1b:55:0a:00:01:0a:d4:47:64:73:4c:2b:3c:9f:
8d:5a:10:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:21:38 2025 by rpki-client