Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
File: 7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json)
Hash identifier: Lm9XC7EfLiGnPbvxMMy4L+Jdm3j4nEHrgMkqRts7dHo=
Subject key identifier: A4:FB:11:79:CD:83:F6:29:70:50:3E:CE:CE:A6:62:02:D4:63:19:97
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 0198D65F13C422FF5AE5BDF0291CDE9C6DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:00:11 +0000
Manifest this update: Sat 23 Aug 2025 10:00:11 +0000
Manifest next update: Sun 24 Aug 2025 10:00:11 +0000
Files and hashes: 1: 0LHXRZXlT4Z5tzVCD5n3wMEK_5I.roa (hash: I8mxC60DkZg+/Z8S1/Ta7eOakDYR4IDLK8C2wNx5/L4=)
2: 6fX3AcGq-C5YFIqBi50as54EhPA.roa (hash: 1KbqHGJ44yLkRFe9MKFCx+SDk5i4hgNCAcTBDnuKRDc=)
3: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: DVGENmf1aXGjUjO5gM2nqlyqO4aQa1k1GHIwsVKdvJE=)
4: EGu7n5ptipM5eNOhCckU54k5DkQ.roa (hash: T5q/E4P5U9BLCmb7DxjfaSe8vQrSmm6xkzEcVmgP2NA=)
5: PJ3rrJoRRyeXmoPdL7qN8QsvEpA.roa (hash: GLnfA8SK+T7VmaJvhK7gTu86DZRC9gqxwVMFgNBn2ek=)
6: RxZdH8tJj14wo9lUz6xXNXqBRwA.roa (hash: 5ZzEhibv41QuiqdnfKIE7PgA9XlisOrBTAH+e4R62Ys=)
7: V20vcYbyilDSQD-Jtx8d2qJDtnY.roa (hash: 2USt4pmFmNQvxtA5b7+ZLT1hKFltQnZghx27ehbthpQ=)
8: nHLGbM1FaGgG8wvdxg9Y5XPBlQw.roa (hash: EnIVps1oa/43pm3iNHQ84rjsTR4sIc4UNGGhICjrp8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:13:c4:22:ff:5a:e5:bd:f0:29:1c:de:9c:6d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: Aug 23 10:00:11 2025 GMT
Not After : Aug 24 10:00:11 2025 GMT
Subject: CN=a4fb1179cd83f62970503ececea66202d4631997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4b:91:0c:0d:d5:3c:e7:ef:e7:02:b9:1b:b8:
b3:d7:e5:5b:48:8d:c7:4d:a5:44:46:f8:93:99:23:
07:62:75:b5:f3:67:a0:a8:12:fb:37:aa:09:fa:fe:
4a:0f:51:d6:a1:da:ea:de:d3:a0:32:f2:f7:6d:41:
57:8d:ef:a0:9b:43:07:12:1d:ec:10:e6:30:08:8e:
eb:f5:d0:ca:0d:0a:c5:8c:c9:69:37:8a:8f:3f:bd:
8a:65:b3:08:41:ca:2a:f1:a5:b9:57:49:62:62:65:
06:10:cc:56:d7:0b:00:2e:d7:85:94:5d:75:f2:ca:
43:bb:e2:6f:3a:b2:2d:5b:a2:bc:eb:ae:8f:90:7a:
2a:c8:2f:a0:0f:f0:bd:35:25:59:4d:f1:03:6d:5c:
27:f7:64:b2:6b:e1:48:4c:3a:1f:39:09:3a:96:5a:
8f:b5:f7:be:14:2e:8f:ec:3e:22:20:94:5d:7a:e7:
ae:03:12:21:63:e6:44:10:e8:cf:b7:fe:8b:b9:ca:
81:d5:0d:93:7e:b8:54:ae:70:fc:fe:7f:77:f9:c6:
f6:3a:c4:97:b1:91:21:48:61:91:1d:88:80:d3:95:
60:8c:b1:d0:7a:1d:12:67:fe:fb:9e:70:43:90:86:
a0:16:2c:e7:26:12:16:2d:94:1a:97:57:94:09:74:
bc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FB:11:79:CD:83:F6:29:70:50:3E:CE:CE:A6:62:02:D4:63:19:97
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ba:54:74:af:e7:a7:1e:16:85:66:3e:1b:87:eb:38:09:b8:
99:c1:25:c6:be:8c:38:e4:db:1b:d3:a3:9c:f3:53:ea:47:06:
09:33:93:7d:62:62:e5:2c:79:ad:89:81:7d:67:f6:3d:4e:bd:
ab:84:94:36:1b:02:71:3d:32:a0:34:fd:c6:50:05:54:5f:1b:
d6:db:b3:17:fe:cd:4e:a6:98:e3:10:4e:71:35:de:dc:42:74:
13:b8:15:c5:e8:dd:f9:94:66:cb:f3:89:d4:04:85:fc:18:25:
94:2f:8a:2c:df:b4:e8:b8:02:5b:bd:fb:4f:40:b4:cd:55:db:
7a:d4:6c:b8:ef:c9:93:2d:b2:10:c8:6b:97:f6:53:b3:d4:7d:
3c:a0:b6:4a:a0:9b:ef:a3:0d:ee:9b:22:a4:85:a3:73:c0:3a:
7c:02:30:91:35:2b:f0:a6:1e:bb:ca:4a:7b:f4:6e:90:b0:8f:
c6:16:44:b8:5b:58:0f:e7:29:b0:59:53:f1:c0:87:1a:31:5d:
df:b1:85:bd:db:67:b6:5f:c9:ea:f7:3e:28:8c:c7:69:5a:f3:
6f:de:65:9f:de:38:c4:46:44:f2:3a:ad:e1:8c:ba:5d:e1:18:
30:d7:7b:69:03:24:9d:f5:39:d6:b3:ef:8a:96:45:e6:f7:e9:
22:7b:5f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:58 2025 by rpki-client