Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
File: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft (raw, json)
Hash identifier: iD0lNop8stYGg7cLd8//pEn9QOpvrAKy0vNq0J82bOo=
Subject key identifier: CA:66:22:0F:B7:99:17:24:CA:5D:C7:FE:CF:5F:34:F0:50:02:97:3F
Authority key identifier: EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
Certificate issuer: /CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Certificate serial: 0198D6297D64E466F21F3D2AB0D2550D7EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
Manifest number: 07B5
Signing time: Sat 23 Aug 2025 09:01:39 +0000
Manifest this update: Sat 23 Aug 2025 09:01:39 +0000
Manifest next update: Sun 24 Aug 2025 09:01:39 +0000
Files and hashes: 1: 7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl (hash: bzGmxoVkeFcC4HqDSPK1bux6HpV82n1iJwYySaFxcLs=)
2: APIgDsnaEPtRZmojgJDBrwJxNxg.roa (hash: kuf57je/MXSnFoUck2JQ4XhadEJjZ+cKgly33aku8dk=)
3: xAkaLP7SkRQoBd-TYEf0fakBydQ.roa (hash: lfN1/uTbDMdDmb+tGMgvNHV7ezOmGfmodPA/bpTlm38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:7d:64:e4:66:f2:1f:3d:2a:b0:d2:55:0d:7e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3ee31d2f0ef103296ddec3c66b07a3f442ac98
Validity
Not Before: Aug 23 09:01:39 2025 GMT
Not After : Aug 24 09:01:39 2025 GMT
Subject: CN=ca66220fb7991724ca5dc7fecf5f34f05002973f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:7f:3c:23:5d:da:4e:2f:a7:3d:1a:09:fc:
5d:a9:9e:29:83:67:c3:04:93:72:a7:42:8c:28:86:
bc:91:29:ad:6b:d6:1d:d7:40:33:f6:3d:1c:b7:05:
7e:0d:34:fe:dc:73:de:73:aa:c4:19:bc:89:b2:1d:
6c:a5:85:8d:53:1b:b4:32:85:23:d3:bc:51:06:56:
20:b6:1c:a1:df:ff:aa:d2:e8:51:a8:eb:0e:b0:0c:
ca:8e:b8:64:51:ea:fc:92:79:85:ae:e0:07:a7:70:
8a:11:3c:a2:95:ea:f8:eb:2d:72:0b:58:19:b8:e4:
f7:53:b9:86:49:b7:fd:cf:8e:33:04:40:0d:7d:05:
ec:b5:50:8a:dd:bd:76:7a:b9:c7:d2:66:5f:fc:5e:
37:cf:97:27:17:d4:1a:8a:96:87:f6:43:0b:23:e6:
80:c9:59:9a:2e:cd:1d:1e:71:df:cf:87:68:5b:74:
85:ff:59:b1:ae:f8:95:42:48:93:a1:27:7e:5d:91:
e7:12:e8:79:6f:79:f7:82:d2:11:b8:90:4a:4a:33:
bf:31:36:f1:65:c0:32:69:43:95:0d:48:54:98:fb:
0f:01:d4:8b:5f:11:7a:04:af:23:10:30:6b:bb:14:
54:54:68:e2:aa:3e:c3:77:20:06:4f:c5:05:25:1d:
0a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:66:22:0F:B7:99:17:24:CA:5D:C7:FE:CF:5F:34:F0:50:02:97:3F
X509v3 Authority Key Identifier:
keyid:EF:3E:E3:1D:2F:0E:F1:03:29:6D:DE:C3:C6:6B:07:A3:F4:42:AC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z7jHS8O8QMpbd7DxmsHo_RCrJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/990ca9-6d4c-4946-b7f3-748d6173b6a1/1/7z7jHS8O8QMpbd7DxmsHo_RCrJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ab:2a:99:b6:6d:f7:fa:4c:ae:8f:6a:da:cf:6b:79:b0:04:
5a:61:7b:c1:e3:09:c6:23:0e:0d:94:73:ae:ab:cc:fa:e8:e6:
4d:f7:13:fc:fa:f9:a0:1b:55:61:cb:9b:22:39:7d:80:a2:3a:
d3:2d:f6:3e:ce:b4:76:25:66:55:13:db:87:0b:d2:a0:b0:05:
7f:22:7f:dc:92:82:c0:32:10:75:0c:89:08:ea:c6:d2:94:d7:
a2:2b:8c:b9:8e:95:08:d7:5b:93:2a:d0:6c:0f:cb:2e:ea:d6:
37:7d:f3:30:c0:b2:8f:78:aa:fc:8a:05:94:5f:7d:f8:df:04:
24:b6:29:e7:86:6d:a1:11:ea:0e:b7:79:fc:e0:12:74:fa:51:
0a:9b:dd:0c:b2:40:be:38:a9:69:50:df:57:cf:de:6e:8f:5b:
1f:54:11:7b:04:bc:6a:ee:60:58:d7:3c:eb:17:0e:ad:c6:1b:
c5:b1:50:e2:8b:0e:74:38:ec:82:ab:09:18:0c:cb:83:34:63:
66:95:21:54:7b:41:ca:f2:59:a7:7a:ed:76:74:de:b8:a0:2d:
7f:79:ef:96:24:1f:9d:65:26:9e:1c:7f:bf:07:87:5d:af:8c:
ce:33:30:89:07:94:fe:52:67:c9:0f:ea:38:a2:f4:55:9d:ad:
de:05:d2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:36:33 2025 by rpki-client