Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json)
Hash identifier: YBDMq52C2vSfbV2vxQTa6csKuyh4haNsw5kJEhE6s+U=
Subject key identifier: 72:A0:FD:41:47:7C:C9:30:22:76:5D:E3:15:28:46:9E:0F:82:64:96
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 0198D6CDF3355FD9C6B48887D9DAC7359DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
Manifest number: 0D2B
Signing time: Sat 23 Aug 2025 12:01:17 +0000
Manifest this update: Sat 23 Aug 2025 12:01:17 +0000
Manifest next update: Sun 24 Aug 2025 12:01:17 +0000
Files and hashes: 1: NdVYKLIGP2QzOZX__MqzIgHzXXA.roa (hash: JpTAajbqtuyws0Zyn29UdijI9/GnNDr8LpptWtQUD6A=)
2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: KBINJeVoH/Qm5LwVUzQhvIVCTSXEkmBzhleoqLJwdvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:f3:35:5f:d9:c6:b4:88:87:d9:da:c7:35:9d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Aug 23 12:01:17 2025 GMT
Not After : Aug 24 12:01:17 2025 GMT
Subject: CN=72a0fd41477cc93022765de31528469e0f826496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1d:81:f7:9c:80:20:0e:c0:af:08:63:58:32:
70:43:9b:fe:03:08:9d:8f:e4:4b:7d:78:32:0f:e6:
89:7f:48:b4:f3:8a:d9:53:aa:b3:7d:4d:19:5c:6d:
d6:78:e7:16:ad:b8:c8:5f:c0:3c:88:74:41:81:ca:
14:0a:74:c4:df:e5:83:64:81:8f:3e:50:9a:1d:c8:
b5:45:6f:2e:d0:83:39:d5:49:61:a4:94:87:b7:87:
96:06:83:f6:c5:c9:7d:97:84:9d:c9:0a:c9:65:fb:
f7:84:6c:93:18:97:0c:54:ed:1c:53:aa:f1:01:66:
cd:a1:b7:62:bd:1e:dd:6b:70:21:fe:02:60:08:bb:
26:ba:ae:4f:a6:02:4d:51:5f:60:25:d7:ea:b1:ef:
16:e2:de:fd:e6:f2:84:01:5b:3b:a5:d0:bd:84:67:
a1:20:de:ab:35:3c:0c:9b:3f:59:db:cd:1c:cf:26:
8e:8d:bd:ea:e5:68:78:7f:6e:6a:e1:72:62:25:23:
9f:1e:dc:bf:8f:51:55:c2:48:7b:2b:72:ad:2b:60:
bb:83:68:62:dc:a3:56:66:b5:00:eb:5f:31:ed:03:
0a:59:9c:05:b5:2e:ce:18:21:4c:2f:5d:01:bf:39:
b8:0f:10:29:00:8a:39:59:a9:e6:8f:4a:0f:c9:74:
00:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A0:FD:41:47:7C:C9:30:22:76:5D:E3:15:28:46:9E:0F:82:64:96
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0b:61:9d:f2:83:d8:c1:c0:9f:0e:fe:e0:eb:c7:4f:2c:e0:
19:66:3b:e8:85:d2:52:60:0a:ea:dd:08:1e:4b:02:51:8a:9d:
6a:8e:05:77:b0:7e:53:20:51:b7:0a:0d:fa:87:9e:48:86:46:
43:82:1e:a6:b2:45:31:96:3d:13:84:2a:dc:6a:3f:bd:94:fe:
e6:de:9d:b9:c3:b9:3a:e3:00:ce:0b:62:a6:68:28:b8:08:e6:
e8:81:2e:51:90:d3:60:88:9e:23:b1:a1:eb:91:c7:83:9e:f7:
ef:b7:d2:32:e0:d2:bf:37:52:7f:54:54:ae:0e:18:32:af:92:
76:47:29:47:b1:9b:42:c2:3c:8e:fa:72:22:21:ae:ff:90:0f:
a6:b3:5d:15:05:12:ff:59:e1:91:6c:88:1d:01:1a:3d:45:5f:
5f:fe:49:ff:96:95:aa:84:14:39:fa:56:07:31:8e:9b:41:e5:
86:e0:ea:8c:d0:78:62:8e:3c:44:39:e9:4a:a0:b5:6c:56:d8:
d7:35:54:0f:55:34:c4:5b:02:72:51:00:65:86:08:4d:86:e6:
93:5d:f5:ae:c8:f0:54:ab:96:2b:e4:d3:34:0a:a3:26:fc:9e:
22:4a:48:03:35:70:f2:78:90:e5:78:f4:c1:fd:73:42:a1:4e:
4f:c0:03:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:19:29 2025 by rpki-client