Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json)
Hash identifier: Q4bdGomd7YJLkYCiPks2I74SwrJaw6kvIg2gnJ7f/uM=
Subject key identifier: 21:3A:B7:57:7C:53:87:1D:FA:63:09:7A:69:64:AF:42:E2:09:D9:EC
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 0198D5F13C7EFE6E27EBAEE0B68AA30A6E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
Manifest number: 0A42
Signing time: Sat 23 Aug 2025 08:00:13 +0000
Manifest this update: Sat 23 Aug 2025 08:00:13 +0000
Manifest next update: Sun 24 Aug 2025 08:00:13 +0000
Files and hashes: 1: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: jVE+2svlv5x6x52iITPjnp6dc4gG9tHLUdvvgO8ALxk=)
2: BDuB9Tdy1bkdHiiKbCLGOLXhLgM.roa (hash: /BEhxsli53ZdIFQcNasA4TXy3qdR7JtPphvJxMDLbVM=)
3: o9u62C62uEKyliiaqilmlCLeC54.roa (hash: IbrVnLHNGZTQPhCJ7F+rZGHYI9Autu0dmXqnxbbk8VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:3c:7e:fe:6e:27:eb:ae:e0:b6:8a:a3:0a:6e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: Aug 23 08:00:13 2025 GMT
Not After : Aug 24 08:00:13 2025 GMT
Subject: CN=213ab7577c53871dfa63097a6964af42e209d9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:36:77:44:a0:91:70:d2:75:a7:38:be:41:1d:
d2:98:68:75:2f:39:7d:82:59:98:df:d6:4e:e1:8d:
db:ae:ee:bf:4d:7a:db:78:24:53:38:62:b9:b6:db:
33:89:be:5e:3e:84:75:7d:b1:72:b3:93:3e:19:ec:
a6:ed:c3:85:50:56:ad:cb:d4:bd:89:f6:d1:9b:ed:
66:1a:42:96:22:49:5b:5c:5e:29:00:61:f6:bd:0f:
0f:79:e0:62:7b:46:48:8f:ee:b6:50:6d:4f:b3:23:
2d:68:d2:62:c5:cc:2f:54:d8:fb:52:c8:84:a1:cb:
c5:04:3e:be:c9:21:3f:98:05:b7:ca:a2:89:7d:c5:
9d:cf:63:77:9e:e7:06:98:24:74:37:73:ad:89:6c:
0a:73:54:ca:bd:09:fd:5a:c0:04:f4:f3:51:a0:2d:
f0:13:b6:b1:a7:34:cf:e6:27:0b:8e:99:8c:93:9e:
5b:64:17:e8:24:12:1d:a0:24:3a:19:7c:35:9a:cc:
bd:20:69:49:8a:83:4c:81:8a:1a:30:9a:56:98:9c:
c9:fb:63:9e:a5:af:87:5e:47:0c:59:cd:b7:91:44:
70:5f:fe:10:1a:1c:03:8d:36:52:1e:d1:94:58:af:
bf:20:b5:0d:ad:30:37:78:88:4a:25:c9:de:ad:c3:
37:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3A:B7:57:7C:53:87:1D:FA:63:09:7A:69:64:AF:42:E2:09:D9:EC
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c0:d2:3e:71:74:4d:2b:b3:6d:35:a5:3e:49:38:52:bf:33:
3a:26:54:e4:ea:ce:b7:05:c0:11:07:fe:eb:cb:e7:d7:48:5c:
22:37:3b:68:f6:72:61:8d:84:7a:b4:d1:c4:c7:b5:ff:f9:e3:
3d:8b:a2:42:08:5a:20:40:aa:37:0e:0d:18:01:32:f5:e3:9b:
0a:85:6a:13:8e:4f:f0:11:c4:d3:02:41:13:26:f3:71:65:e3:
28:29:03:52:34:b6:8a:99:b1:b6:35:a0:76:89:e4:cc:70:7d:
20:bf:ff:1c:29:ec:3b:d1:ff:5a:a9:e1:2b:08:62:ef:9c:6f:
8c:99:ec:b7:0c:b6:3a:9f:55:e2:3b:3d:fb:11:8e:16:68:e4:
b5:b2:8a:bc:1e:32:2c:a5:c3:3d:09:3c:50:7e:88:e2:1f:71:
4f:bb:e3:27:90:d1:4d:c9:ae:6e:ff:27:5c:ec:f7:6e:4f:11:
37:86:ec:f6:9f:26:47:cf:a4:34:41:56:c4:21:c2:61:ac:2c:
c4:e4:84:24:7a:57:43:48:8f:58:24:b7:97:ef:ec:84:de:28:
1b:dc:fb:df:7d:13:41:f0:ed:20:0e:fa:7a:39:60:38:d8:e2:
d1:ce:d9:72:b8:17:fd:a9:05:9d:25:aa:8d:05:0a:fe:27:1b:
f7:3a:5c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:43 2025 by rpki-client