
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
File: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft (raw, json)
Hash identifier: kY9KtE7ZmW+xMJdL/mJdEgOLAb/QRAfFv0a3Ju30GiE=
Subject key identifier: 09:CC:05:35:A0:58:5F:59:29:B4:01:0E:EB:00:FC:A6:69:94:FF:9A
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 0198D4A7B1320A99274B3BED90D05CC0403F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
Manifest number: 059A
Signing time: Sat 23 Aug 2025 02:00:16 +0000
Manifest this update: Sat 23 Aug 2025 02:00:16 +0000
Manifest next update: Sun 24 Aug 2025 02:00:16 +0000
Files and hashes: 1: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl (hash: TxCe5NH33T0L85lEyQ/eL4Im+O+uSxd5vDIooDBD6Rw=)
2: V8rwHt-KBtkyfMDcY6GbBS5O3lg.roa (hash: VKRjbMp2cA/7F+gIKAoYPT0t4kmN1vcNg+P5YqdMBPI=)
3: vLkg6vsM00eiYmKWC5SDs25Gs0o.roa (hash: laQ0wIfMQs3t8Q/rYbMaQJvlRI3pM205xGMs2yoH4OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b1:32:0a:99:27:4b:3b:ed:90:d0:5c:c0:40:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Aug 23 02:00:16 2025 GMT
Not After : Aug 24 02:00:16 2025 GMT
Subject: CN=09cc0535a0585f5929b4010eeb00fca66994ff9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:46:81:6e:93:2b:dd:0e:af:c2:2e:29:50:
d4:c4:38:6c:b1:df:6b:06:c3:fd:a8:96:a7:e2:d1:
37:e3:2b:39:c0:cf:e3:60:15:d1:1b:67:a5:d1:c7:
0b:7d:a7:12:29:b5:a4:84:b2:42:61:6b:62:8c:c2:
d1:01:35:51:71:2d:2f:5f:73:68:0f:02:6b:38:d9:
61:53:95:d7:27:f3:c4:f4:4a:70:56:2b:c1:47:8f:
c3:1d:74:22:19:2d:ae:ed:29:49:2b:3a:9f:e1:d0:
64:64:9c:94:7e:e2:42:d3:63:a1:c9:bf:8f:88:b8:
24:41:31:11:57:64:bb:bf:03:df:e5:3b:a0:6d:ef:
f0:d1:cb:06:91:5d:a0:57:1b:4a:74:12:f4:c2:97:
a2:6d:80:b4:b9:9a:ea:81:ee:a9:3b:45:06:d2:dc:
75:c4:8f:33:9e:dc:d8:31:3c:92:1a:dd:d1:b3:99:
e3:76:f1:73:7e:28:96:4a:43:f0:dc:7d:34:2f:8b:
5c:ff:db:17:8d:75:f8:47:44:9c:46:59:d9:21:56:
bd:11:90:20:0f:4b:41:af:7e:58:7b:82:e2:01:a3:
3d:53:fd:bc:fc:4d:8f:c4:7c:67:91:c2:08:85:b1:
5d:f4:d1:29:5b:e6:2e:24:b0:76:20:58:64:ef:0d:
cc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CC:05:35:A0:58:5F:59:29:B4:01:0E:EB:00:FC:A6:69:94:FF:9A
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:de:7c:dd:97:97:d5:8a:28:21:c9:8a:9a:4a:13:2c:92:e1:
74:fc:c5:46:96:1d:01:48:cc:1c:e3:d5:df:cd:58:90:f6:a6:
46:bc:3c:7d:ab:b2:f8:ed:62:e3:d1:34:c6:a1:95:43:b0:59:
66:53:89:03:84:20:af:81:ec:ce:d0:28:7e:37:e3:68:4d:8c:
0b:07:a2:97:72:a1:4f:d8:af:dc:4b:8d:75:c5:08:d8:e7:31:
c7:a5:82:3b:22:03:82:fe:97:b3:df:92:9f:6d:72:45:4b:1f:
8f:3e:5d:c7:ce:cc:64:d2:52:87:78:26:46:f9:22:98:16:33:
91:18:e5:c9:64:45:95:65:66:3a:34:27:a8:2b:83:43:98:04:
bd:3f:c3:5f:99:ff:34:43:d5:bd:1b:64:ea:bb:e6:c0:78:ed:
76:84:93:72:2b:ec:5b:ec:80:49:98:42:10:2d:c8:7e:22:d3:
68:35:59:19:fe:27:40:c2:64:6e:85:73:90:0e:62:ec:86:9c:
27:e7:97:0e:93:53:01:32:53:0a:9b:0a:01:9a:2e:b7:ef:c2:
ef:69:45:39:98:a8:eb:06:04:67:1d:68:81:f6:90:d1:b0:a8:
6e:3b:56:63:7b:66:47:40:1d:99:16:81:0c:4b:15:4b:54:19:
1f:6d:e3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:10 2025 by rpki-client