Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
File: 7q2qYzkQO9tVZtgycdPEfABcJQ0.mft (raw, json)
Hash identifier: 8IiNJSiAg4ffjnI65MI6cfq/EUzyRNXtwrFBuqeyrMU=
Subject key identifier: 58:95:3C:5B:68:FD:66:53:5C:C2:AF:DC:7F:35:0C:CC:1D:0E:66:89
Authority key identifier: EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
Certificate issuer: /CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Certificate serial: 0198D54DC800B6829020FD5BDC3C83A5EBFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
Manifest number: 0AAF
Signing time: Sat 23 Aug 2025 05:01:41 +0000
Manifest this update: Sat 23 Aug 2025 05:01:41 +0000
Manifest next update: Sun 24 Aug 2025 05:01:41 +0000
Files and hashes: 1: 7q2qYzkQO9tVZtgycdPEfABcJQ0.crl (hash: 3JLzCFLRA/9diMxD2tyFLcsV26p9FQYZ4heLrbvZivI=)
2: mx5KYeLzr9lyOwTUvCRgpGpeZ4E.roa (hash: lpv0D5SfwmuFWskD1jXdGqPckfHmRNfDU4m+hRisO84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c8:00:b6:82:90:20:fd:5b:dc:3c:83:a5:eb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeadaa6339103bdb5566d83271d3c47c005c250d
Validity
Not Before: Aug 23 05:01:41 2025 GMT
Not After : Aug 24 05:01:41 2025 GMT
Subject: CN=58953c5b68fd66535cc2afdc7f350ccc1d0e6689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1b:7a:d3:36:31:97:15:b6:4c:de:00:2f:e0:
f5:f9:5d:e5:04:75:eb:d1:ed:df:5c:a1:88:e5:8e:
24:cc:79:0b:1d:60:23:8c:23:ed:5b:9d:bd:8c:aa:
a5:04:b3:99:e8:e2:74:e9:6e:96:a6:7b:2f:81:87:
1a:96:b0:cd:08:c0:96:ee:a6:0e:9b:f5:72:fe:c0:
43:33:2f:ec:d0:2c:2f:14:95:e9:75:39:a0:04:ed:
a6:69:a3:80:8a:fb:74:df:46:df:1b:76:a1:cd:23:
75:6a:6d:eb:a5:87:40:63:15:29:9e:6d:81:6a:f7:
4b:d9:ca:b3:1b:88:4b:19:73:f6:47:16:f3:d0:d7:
d1:c7:4b:9f:02:04:6d:15:38:af:8a:a8:a2:8e:e3:
0a:5e:db:78:eb:94:24:36:22:aa:1a:34:df:4d:14:
68:74:ef:e3:42:fa:eb:98:2b:41:f0:11:8f:b9:e2:
55:cb:33:1d:61:cd:a2:98:29:68:86:2e:51:8e:05:
9e:29:b5:9d:7c:aa:68:d1:1c:b2:5b:25:74:01:69:
fc:58:5c:f1:a9:05:17:96:37:33:bc:ae:75:0a:21:
06:86:da:07:11:2e:70:9d:ac:ba:f9:66:a5:de:9c:
2c:f1:37:1d:a2:9a:b0:af:66:ab:bd:c3:46:c4:28:
91:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:95:3C:5B:68:FD:66:53:5C:C2:AF:DC:7F:35:0C:CC:1D:0E:66:89
X509v3 Authority Key Identifier:
keyid:EE:AD:AA:63:39:10:3B:DB:55:66:D8:32:71:D3:C4:7C:00:5C:25:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q2qYzkQO9tVZtgycdPEfABcJQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f500e1-2412-42e5-a8a3-2142c0c4385f/1/7q2qYzkQO9tVZtgycdPEfABcJQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7f:6e:be:4e:55:b0:e6:4f:72:f7:5a:95:46:bb:bf:69:ae:
d3:93:7a:a5:ca:15:ac:34:fb:6c:ff:3b:a3:1e:a8:8b:80:64:
86:bb:37:a0:de:89:35:9b:6f:fc:86:4e:17:79:d4:40:b3:21:
eb:9c:ea:4f:c9:65:cb:1f:9f:3c:b6:66:df:fd:e7:ce:af:26:
b6:cf:8d:a8:b8:56:13:21:b0:fa:92:23:ba:76:5c:0e:6a:f8:
4e:84:1c:55:22:a6:b3:a9:cf:b1:97:b8:de:29:ac:cb:fd:fc:
bd:65:73:0f:ae:82:10:e9:fa:70:bd:c9:30:41:3b:35:40:d1:
81:28:39:fc:69:59:2e:12:d4:ba:a5:86:c6:a3:c2:ec:6e:ba:
49:d0:92:90:4d:32:fc:54:d1:13:9f:08:9a:f6:87:56:b0:3c:
43:43:09:8c:26:4a:3f:bf:0a:48:70:c3:e9:11:e0:f4:5f:1b:
1a:02:b8:a0:41:e1:57:73:bc:b3:31:28:fa:a2:78:85:4c:1d:
94:e1:3d:8d:50:69:a3:18:63:af:c2:05:ef:9f:9b:ef:7a:e1:
f0:b8:46:e5:b9:f0:a4:8c:5c:4a:fe:49:bf:65:56:2a:4e:be:
61:f6:0c:ac:d2:04:22:70:c4:9b:73:28:fe:72:0b:e2:ff:23:
24:eb:80:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:28 2025 by rpki-client