Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
File: 7onRezmnaEppVLl7iw-6x9SJVMo.mft (raw, json)
Hash identifier: DEOgn2m/d29t/4O/brwwYyuugRjGNtjrrTY4QGHkhHs=
Subject key identifier: 49:B4:04:B9:78:C3:04:D7:8D:F4:D9:C8:70:BC:EA:17:B9:D4:A6:29
Authority key identifier: EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
Certificate issuer: /CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Certificate serial: 0198D65FACA32ABDDA8CB53CEDE551F9BB2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:50 +0000
Manifest this update: Sat 23 Aug 2025 10:00:50 +0000
Manifest next update: Sun 24 Aug 2025 10:00:50 +0000
Files and hashes: 1: 7onRezmnaEppVLl7iw-6x9SJVMo.crl (hash: CmkQx5p7mLXoDF8TtfO+Jnw89cwSZUlY/hShgIDbrx0=)
2: SWG7ULWsbdkT7YnAYLal6aiUNPU.roa (hash: 4R5oEsAspImowOjIwYW5eNE8lcSJazbh0RoaPrdVo18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ac:a3:2a:bd:da:8c:b5:3c:ed:e5:51:f9:bb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee89d17b39a7684a6954b97b8b0fbac7d48954ca
Validity
Not Before: Aug 23 10:00:50 2025 GMT
Not After : Aug 24 10:00:50 2025 GMT
Subject: CN=49b404b978c304d78df4d9c870bcea17b9d4a629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:80:03:c0:e4:fd:44:f4:50:26:f5:d1:28:
a4:97:1d:9b:a6:20:69:08:da:b2:ac:59:20:f1:7f:
d0:3e:95:4c:05:da:44:e8:ee:7b:87:5b:03:ed:db:
d3:4d:81:02:1e:1d:9b:d9:78:50:65:01:fe:5f:32:
83:43:fd:0a:3d:50:19:13:ce:8b:a4:a9:c7:d9:2d:
9e:d9:69:30:c0:79:f4:02:9a:8a:aa:8a:0d:38:ef:
47:12:fa:e2:01:4b:88:5c:b5:f8:40:2d:8e:0a:45:
f7:01:4e:35:d2:52:ed:3c:af:c1:4c:c0:75:83:5c:
9d:91:b0:fe:1e:0a:c4:ca:5b:e9:98:25:15:d3:d5:
21:28:8c:48:ff:bc:f4:4c:1e:39:08:a3:de:4b:9e:
23:b7:93:04:f3:e1:03:fe:f7:45:d1:01:5a:10:e6:
61:96:cb:5f:86:43:10:b8:11:37:24:9c:02:8c:9e:
e3:ab:d2:42:4f:e0:86:d0:4b:00:a2:ff:9d:cb:16:
84:95:56:68:b9:f5:03:8b:58:a9:40:56:09:e1:93:
28:84:e4:06:e7:55:e1:48:fe:de:e0:12:e5:5f:e1:
0f:e1:5f:7a:d8:71:9c:d4:80:ee:03:f5:6b:00:58:
b1:3a:35:8e:b9:29:d1:1a:86:29:cc:87:b5:25:18:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B4:04:B9:78:C3:04:D7:8D:F4:D9:C8:70:BC:EA:17:B9:D4:A6:29
X509v3 Authority Key Identifier:
keyid:EE:89:D1:7B:39:A7:68:4A:69:54:B9:7B:8B:0F:BA:C7:D4:89:54:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7onRezmnaEppVLl7iw-6x9SJVMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/e11b53-1cd6-4747-9232-f19b4e7b27cb/1/7onRezmnaEppVLl7iw-6x9SJVMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8a:08:72:5e:51:3f:63:b5:56:e2:75:92:83:9a:60:dd:ea:
28:03:e1:68:7a:bf:24:cd:b6:2a:ba:98:ed:2f:63:5b:97:b8:
29:af:0b:47:af:e4:a1:1d:52:2d:89:bd:6c:3c:1d:48:8a:72:
cc:42:0e:aa:a1:62:45:ab:10:1a:73:b3:a2:dd:9d:63:26:7a:
2e:5a:08:42:33:d1:a3:62:fd:6f:cb:2c:e2:1c:ed:be:43:ac:
d9:ad:43:37:7c:a0:55:43:27:77:fc:4f:a9:45:f7:cf:f6:7b:
6a:99:c5:dd:c5:e9:f4:7d:be:44:4f:66:5b:fa:44:e9:a1:0a:
d4:d1:41:c3:63:89:bc:00:77:59:b4:6a:b9:98:5c:7d:b0:f9:
b9:14:7b:1a:d2:ec:b7:01:1a:03:0d:36:5e:ab:8a:65:84:53:
27:d6:e3:89:17:cc:41:2b:28:c7:ac:7b:ce:0f:0a:ab:d1:23:
25:d7:4e:b6:86:a1:3e:e2:08:82:c0:a4:db:1d:51:20:22:ab:
db:c5:a8:00:71:0b:7f:d9:28:ed:04:59:d3:e7:f7:8a:90:7a:
f7:a2:16:e5:34:17:d8:7e:12:8e:5c:53:6b:55:8b:b6:9c:b8:
4a:eb:45:de:d8:34:99:08:a4:5b:76:1f:9f:99:f2:09:46:7f:
96:72:08:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:06:55 2025 by rpki-client