Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: byYgLxzf0HasFJU4eeUrl0lCJiaPRatmsjaT+FCT2u8=
Subject key identifier: 4F:82:97:DB:AE:45:FB:4D:BF:1F:7F:4A:9F:08:3A:A8:2F:15:60:46
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 0198D4A80E77C828C21CE621EB00228FB0F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 02:00:40 +0000
Manifest this update: Sat 23 Aug 2025 02:00:40 +0000
Manifest next update: Sun 24 Aug 2025 02:00:40 +0000
Files and hashes: 1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: CY6hOZ+8+becl3mAdOQT5csr6Hb6ulHHqrMtGo+Y/3s=)
2: QmonITNns_8Q9qn9QpgL_m0jbZY.roa (hash: lePHGLh8RQcKhBsHHefYW0245CnYH1iaj+dz5PW9vD0=)
3: d24ICbco0VbAsWx0dcNaky51E1k.roa (hash: d1k6XX+Y5B2DmgHQo92ou+wFZc56ndYpjjXsKkYwekM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:0e:77:c8:28:c2:1c:e6:21:eb:00:22:8f:b0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Aug 23 02:00:40 2025 GMT
Not After : Aug 24 02:00:40 2025 GMT
Subject: CN=4f8297dbae45fb4dbf1f7f4a9f083aa82f156046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c7:5c:4c:c0:69:35:de:1d:ae:65:a9:84:f1:
34:6c:b0:b0:83:a4:3e:6d:8c:2b:9c:e3:02:2a:e6:
ef:69:28:43:b9:e8:c9:5e:c8:ff:dc:74:d4:19:22:
fb:20:84:b2:6b:ab:cc:2e:0b:2e:9f:ba:a5:cf:b9:
36:fa:00:f3:d2:02:c1:33:84:6a:d3:8b:94:b1:bb:
e2:44:23:c0:c4:79:3d:69:e8:75:04:c5:dd:d3:bb:
47:9b:63:02:b7:d9:58:db:b2:f6:d8:3e:b1:8e:80:
ea:72:c6:6a:de:bd:64:0c:5f:e2:e7:c3:62:37:b3:
79:0a:d9:8e:b7:bd:fa:af:10:47:ca:f5:35:3d:3e:
63:89:7d:3a:2a:11:b8:31:5b:91:c1:70:9d:ed:10:
51:e3:35:2c:b2:01:d5:54:b8:ec:41:44:6e:f9:cd:
d7:93:78:09:fd:6e:5f:58:20:5d:cb:67:32:56:60:
93:2a:1a:58:64:c4:90:ad:54:0e:51:85:97:54:d7:
89:96:74:01:9a:66:8e:63:c1:7b:83:fc:d4:a9:03:
7a:aa:e8:b2:44:81:93:ea:35:06:b4:57:86:be:6a:
41:70:49:a9:e1:51:2a:c4:e4:d5:dc:3e:93:96:54:
ff:6e:8e:f2:59:92:bd:7b:d1:df:8e:0f:c7:8b:1d:
6d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:82:97:DB:AE:45:FB:4D:BF:1F:7F:4A:9F:08:3A:A8:2F:15:60:46
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f2:8f:9e:5f:b1:15:2a:83:5b:ea:51:74:7e:73:6c:41:5f:
eb:74:ae:18:cb:71:28:5d:f9:25:29:8d:ee:aa:7f:5e:10:5d:
33:52:22:45:0f:e8:63:39:22:a3:6b:2e:48:bc:0c:b6:17:8a:
5a:bc:f2:05:77:00:66:94:ec:42:b3:b5:c9:8a:6f:0f:28:ac:
01:69:80:fd:39:95:38:44:c4:a4:69:64:1a:c7:a3:ef:c1:0c:
c4:1c:d5:1d:98:8b:94:2e:5b:35:16:38:d7:68:64:d5:27:b5:
f9:6d:d7:66:32:22:10:e5:be:be:a7:9d:40:08:0c:72:e8:11:
fe:f8:80:5e:7c:bd:7e:23:97:e7:03:c1:b6:ad:f2:d8:30:17:
75:02:8d:5d:6b:b7:19:b6:92:00:ca:b8:42:74:a8:08:85:19:
82:1c:06:45:ac:13:d9:98:a2:52:54:1b:50:0d:0a:4b:be:87:
d7:ef:e5:49:f6:04:7e:8e:77:60:56:8d:c1:51:a8:51:d0:02:
63:5e:42:23:f2:fc:54:90:5d:4c:2c:13:2f:96:04:4d:ed:e2:
1d:23:63:f7:13:d4:d5:f6:14:25:cb:75:37:00:13:df:fe:83:
79:3a:7e:28:df:b5:62:85:70:b6:51:c0:f7:e4:ab:47:d5:1e:
cc:74:24:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:42 2025 by rpki-client