Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
File: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft (raw, json)
Hash identifier: F10vGTXkO0Pd4otK0aCFsUGgnHQzSYa+tRwTCjWPW5o=
Subject key identifier: A3:4C:F9:69:A0:89:60:47:C8:AB:11:D0:87:73:39:69:5A:23:F9:1C
Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
Certificate issuer: /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Certificate serial: 0198D473A0C10FA40F3D6FA1D999D0266AC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:24 +0000
Manifest this update: Sat 23 Aug 2025 01:03:24 +0000
Manifest next update: Sun 24 Aug 2025 01:03:24 +0000
Files and hashes: 1: 7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl (hash: /8KhARIHT4VMGAssoSrHpZe1cGNS4LlYqtzYGJM9OSU=)
2: lsLcveQpDK6_M97PC59O9jY_Mn0.roa (hash: ymXevK/nbRh5h28kJcEd3t9OjF1YdLZjWlDyNpO0ilU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:a0:c1:0f:a4:0f:3d:6f:a1:d9:99:d0:26:6a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Validity
Not Before: Aug 23 01:03:24 2025 GMT
Not After : Aug 24 01:03:24 2025 GMT
Subject: CN=a34cf969a0896047c8ab11d0877339695a23f91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:ee:91:fe:ff:c5:43:e1:76:0a:ee:35:e6:
af:e3:e8:53:06:52:b8:51:65:f9:76:8e:3a:42:3f:
dd:94:a5:4f:30:62:a4:cd:04:7b:d8:c2:15:51:a9:
24:e6:f6:53:5a:ab:06:99:92:35:d0:d3:39:90:a2:
b1:c4:3d:e5:e5:66:7d:d5:31:bc:71:0f:14:74:e7:
6b:09:27:6c:b8:85:d0:a1:57:86:3f:5e:7c:84:95:
30:b6:b1:db:20:09:f1:d7:ef:d9:19:86:86:fd:12:
d6:02:ca:cb:78:80:de:61:71:8f:25:e4:e1:5d:34:
c3:e4:a6:2c:b2:86:66:24:f6:7e:7b:a1:ae:eb:4b:
df:3c:2b:d8:eb:64:e2:9e:9f:38:11:89:cf:bc:9f:
f7:f0:f1:a5:d4:11:99:db:d4:57:e9:35:c5:fc:7f:
6d:c6:3a:67:9c:7f:38:d4:29:1e:48:90:61:8a:3b:
6e:78:8d:77:31:38:0b:57:7d:35:4c:9c:83:db:08:
04:0c:67:16:83:c5:17:8c:c5:04:4d:fe:34:50:bc:
1c:ee:bc:9f:c5:da:f1:56:e6:16:1b:d4:6a:d4:a1:
3c:f1:e8:75:a6:36:f8:da:35:e9:97:f9:b5:55:d7:
17:d6:26:8e:98:3a:08:81:82:d5:52:ac:76:25:fb:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4C:F9:69:A0:89:60:47:C8:AB:11:D0:87:73:39:69:5A:23:F9:1C
X509v3 Authority Key Identifier:
keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8f:ac:d8:15:08:20:9b:4c:16:e7:b2:23:3a:87:32:bf:82:
d1:ba:ab:82:e7:95:15:0e:d7:55:dc:64:b9:26:08:4f:1c:31:
02:fc:39:4e:d8:f8:53:05:d3:ca:ff:08:51:24:a5:3b:fd:28:
da:2a:27:ec:45:08:44:80:bf:cc:20:1b:94:0e:69:f6:75:93:
61:f1:96:8a:c7:87:d7:3a:20:22:30:96:ae:5e:6a:1c:3b:51:
11:8c:10:c9:dd:81:3a:de:2b:0c:0c:53:02:ad:79:bc:64:1d:
8d:3f:b9:1f:a7:41:8e:a0:60:d3:d7:8f:77:9b:fc:58:dd:a0:
97:17:25:a0:9c:3a:88:5b:12:1a:41:d3:d6:6f:ef:9e:0a:61:
c2:95:95:2a:d9:3d:08:0a:1d:48:73:fd:09:42:bd:5d:1f:0a:
ad:64:76:3b:a6:73:97:f2:18:80:e0:8b:0d:de:c2:2d:7c:41:
5d:b9:a5:6f:c5:20:d7:c0:5b:e9:0d:28:2a:47:11:c4:6d:cd:
ce:87:ef:09:f1:03:e3:36:20:20:38:07:1b:f9:c5:06:7a:f8:
32:69:a3:0f:58:44:71:50:cc:94:14:5a:88:e1:08:64:24:08:
4d:15:ac:19:f2:66:65:79:8c:64:bc:15:16:4b:0f:a3:87:45:
39:4e:b2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:09 2025 by rpki-client