Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
File: Sv7PZkKkULU7B21EZILZwaid7XQ.mft (raw, json)
Hash identifier: FMGhsIeNrUlGsGtbuefSFWy9Hw4DsOWtq7oNxLxN070=
Subject key identifier: 7A:E2:EA:5F:45:D3:74:C1:87:8F:D7:E4:CF:3A:10:13:A4:24:7D:63
Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
Certificate issuer: /CN=4afecf6642a450b53b076d446482d9c1a89ded74
Certificate serial: 0198D7A8E107122AC789F70E444171270D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
Manifest number: 15DD
Signing time: Sat 23 Aug 2025 16:00:25 +0000
Manifest this update: Sat 23 Aug 2025 16:00:25 +0000
Manifest next update: Sun 24 Aug 2025 16:00:25 +0000
Files and hashes: 1: Sv7PZkKkULU7B21EZILZwaid7XQ.crl (hash: xj7Mq20RtOysCDNqSHDUwjhkiyHNo+xjDEgdMNZqwis=)
2: p61VML8uLf1Dr4htLC12P2Sv8GU.roa (hash: RPd5GMtMlOZE/03iU2ovXiDZPGo3A/MLaIBoa6BmxD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:e1:07:12:2a:c7:89:f7:0e:44:41:71:27:0d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74
Validity
Not Before: Aug 23 16:00:25 2025 GMT
Not After : Aug 24 16:00:25 2025 GMT
Subject: CN=7ae2ea5f45d374c1878fd7e4cf3a1013a4247d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:33:26:86:0d:30:fa:c0:22:e6:33:19:cb:
65:1d:90:44:43:26:26:23:5b:f9:df:1a:9a:62:ed:
5d:33:d8:04:01:70:e5:2a:13:51:98:1d:53:75:d0:
f2:07:be:3b:93:6c:d2:a4:e7:48:06:30:a3:19:62:
36:db:9c:83:fd:d8:cd:a7:35:6b:8f:ca:9f:38:4e:
ec:b0:4a:11:31:69:fa:bf:d1:88:90:ca:70:13:59:
aa:d0:59:40:ba:3a:c8:47:f6:c9:93:45:80:8f:b2:
05:1e:5e:92:b9:bb:51:5e:0c:c0:80:17:e4:70:8a:
a2:0a:20:52:4a:ac:cb:b3:79:bf:42:35:47:0f:e6:
80:1d:fc:fe:07:43:af:bd:e3:dd:7b:b1:08:cd:44:
07:a3:66:4a:ff:c7:dc:e1:7d:9f:70:18:0c:06:45:
27:2c:c1:86:7c:17:84:89:9c:85:f1:7c:ef:21:0c:
9b:92:44:ae:80:03:01:59:7e:e3:df:c8:19:c1:4b:
f0:f6:85:2d:11:71:e5:01:e5:e3:a4:8f:1a:16:64:
4c:4f:c6:1a:a6:f3:5d:3c:8c:52:72:f3:09:28:b3:
2e:11:a2:4f:64:36:f6:34:f6:e9:e4:43:54:0f:a9:
59:d1:b2:ec:f5:45:81:c3:f4:b5:e1:50:68:42:27:
4a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E2:EA:5F:45:D3:74:C1:87:8F:D7:E4:CF:3A:10:13:A4:24:7D:63
X509v3 Authority Key Identifier:
keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:0c:a2:40:c6:fc:a4:61:6f:f6:9c:28:1f:83:cf:22:e0:64:
37:1f:4c:28:1e:71:5a:ed:43:6a:0b:3c:84:66:a5:aa:ec:01:
f9:27:c1:26:f2:6b:dd:d0:44:99:31:31:0f:e8:07:03:fc:96:
42:4d:0e:9e:bf:f3:41:5b:ce:fa:45:f2:55:f1:9f:18:ec:df:
fa:9b:4f:34:72:e9:36:6a:50:35:4d:21:4f:7a:32:5a:fc:0a:
d2:95:24:fd:71:58:48:d6:aa:f2:6a:16:99:7c:a4:c6:9c:d4:
d2:4a:cc:ae:17:08:a9:4f:61:8d:55:c8:f3:e6:d4:27:2f:12:
ad:8d:4f:05:d4:77:a7:f1:83:b6:e6:bd:4a:50:ed:ea:5d:21:
da:46:4a:b8:72:6b:89:1a:e7:da:4f:d6:fe:12:eb:b0:4d:3c:
cb:67:82:af:1e:b1:88:8e:ef:8d:89:60:9e:eb:a8:10:b8:73:
31:44:8b:17:0c:86:96:ee:f2:38:bc:4c:3a:5f:2f:93:da:e0:
67:88:25:52:e2:3a:3d:0b:c5:9b:c1:c3:f0:88:0e:c6:00:8d:
df:69:6d:f5:2b:a2:2b:af:0e:4e:9c:29:32:a7:9f:f9:42:fe:
9e:a9:5b:de:a7:11:df:e2:24:48:bd:b9:ba:ff:38:34:5e:37:
d9:14:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:27 2025 by rpki-client