Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier: 3ps+1F9Ri0tQCjZQhAsh92+xJAARpnWo4DivgAwGRUg=
Subject key identifier: 03:A3:DD:97:38:24:53:27:9A:9E:49:C1:4D:35:EC:11:B9:E0:82:0B
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial: 0198D54E2C4E6F0484D3028C79CB57DCB533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:02:06 +0000
Manifest this update: Sat 23 Aug 2025 05:02:06 +0000
Manifest next update: Sun 24 Aug 2025 05:02:06 +0000
Files and hashes: 1: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: nDPlI1oAgI8p4G6hG7K+jFGDmeMCJW9gln8UaS9AaTQ=)
2: Uol637i_aGyEjqsV-G-zBBGF_fM.roa (hash: GHwCfKteNhzkVgd1pFW2ZoKvEFt5K3t+m0uHz8s/0GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:2c:4e:6f:04:84:d3:02:8c:79:cb:57:dc:b5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Validity
Not Before: Aug 23 05:02:06 2025 GMT
Not After : Aug 24 05:02:06 2025 GMT
Subject: CN=03a3dd97382453279a9e49c14d35ec11b9e0820b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:75:5f:09:2a:23:46:76:e2:4d:22:79:5e:5e:
e3:74:0b:24:53:38:f8:c8:fb:30:bd:13:ac:0b:f9:
87:99:f7:d5:f5:e0:a4:0a:a5:e0:46:42:46:e2:14:
cb:3c:d6:08:be:b3:e2:5d:ef:7e:40:5d:67:b2:b1:
5b:ae:7b:b4:00:ed:b3:22:10:ea:4a:17:ec:0e:c6:
52:4f:5a:f7:4c:fc:12:85:d7:0c:a9:fc:70:b4:40:
23:4e:12:31:85:d8:e5:91:ab:b7:77:bb:54:e3:5b:
25:c3:e5:b2:28:a5:a2:1a:2b:fd:db:bc:26:0d:f1:
50:6b:93:53:d4:cc:62:57:8a:03:37:13:3d:f2:60:
43:92:61:45:49:fb:a7:44:eb:44:73:c4:c3:5c:a0:
1c:e0:ee:26:ee:20:5a:e4:6a:e8:85:53:b9:fd:45:
10:19:d0:e7:96:dd:ce:a4:56:f2:1d:42:70:36:7a:
7a:65:b9:e2:60:a8:48:18:ca:9c:35:08:72:b5:22:
a0:d7:0e:f1:34:da:39:f0:dd:33:61:b0:c8:be:30:
3e:5d:0b:aa:dc:21:c7:e1:e1:f8:21:ac:13:55:b2:
5e:e4:9a:f3:ea:1f:50:6e:3f:45:45:bd:34:2c:a7:
81:72:e1:04:d0:94:a7:25:15:bb:a8:e2:71:7f:60:
6e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A3:DD:97:38:24:53:27:9A:9E:49:C1:4D:35:EC:11:B9:E0:82:0B
X509v3 Authority Key Identifier:
keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:eb:cb:b2:0f:4a:04:54:d0:9e:e0:07:dc:4c:75:30:68:d7:
fe:9e:53:9d:f6:83:84:82:41:cc:59:00:21:04:21:b3:63:bd:
5b:22:47:2e:bd:d0:4c:e2:f0:e3:24:8a:8c:ae:b0:52:e9:b9:
43:35:d3:1d:cc:85:c3:ef:4a:76:11:57:d1:58:5c:3e:19:e5:
ae:c5:95:82:81:bf:16:09:65:01:f8:a5:8c:81:79:54:86:a1:
a0:0e:9c:8a:91:c4:1c:0d:d5:d1:fe:9a:fb:01:41:93:ab:f6:
62:99:d1:16:a8:78:3a:44:00:3c:7c:df:75:35:11:2c:65:23:
cb:e9:25:8a:74:2f:7d:95:d2:70:1e:5b:0f:7b:a7:4f:a5:ad:
fe:20:f2:4e:a0:df:53:58:e2:33:b0:0f:c8:c7:be:9a:c5:47:
9d:ae:fc:d0:cb:8d:4e:3e:9a:e1:80:ca:ba:d2:f3:15:8f:b3:
38:e1:e1:92:57:95:64:d4:3a:03:bd:8f:fd:3c:35:52:c7:03:
77:f4:29:29:7c:7a:60:2d:36:a9:99:ac:0c:4b:86:55:4b:13:
63:47:41:53:ac:32:73:8c:02:3f:91:f8:ab:d9:55:c1:f6:e0:
ef:05:37:a7:a6:fc:6d:87:50:6c:3c:d8:60:16:9f:1a:50:a0:
67:e2:dd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:54 2025 by rpki-client