Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier: Jl3TxIDv8IujHPSfd/gFa7Dcr6+z6br+Jg7n2zqzDjA=
Subject key identifier: 44:D5:72:E6:AB:24:81:81:93:9A:B1:02:93:F1:4B:2F:28:AC:14:DA
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial: 0198D5155F56D0CF0AAD6388F35374D74853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number: 02DC
Signing time: Sat 23 Aug 2025 04:00:04 +0000
Manifest this update: Sat 23 Aug 2025 04:00:04 +0000
Manifest next update: Sun 24 Aug 2025 04:00:04 +0000
Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: GJqn2z3ltBXq/ZXJUQ/0V8KoqtEqCQjPpdB6Qcc4uok=)
2: gylVxgv2wVCzGr0PfDa1DOljS0w.roa (hash: LJzn39XG+RijMzRlRM7pRtoqSA79D4mMA2x3jy4QHzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:5f:56:d0:cf:0a:ad:63:88:f3:53:74:d7:48:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Validity
Not Before: Aug 23 04:00:04 2025 GMT
Not After : Aug 24 04:00:04 2025 GMT
Subject: CN=44d572e6ab248181939ab10293f14b2f28ac14da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e1:84:7e:70:68:ca:ff:40:1d:36:82:a3:31:
a4:31:a1:4a:fb:3b:33:5e:e0:dd:47:a5:a9:f1:86:
75:e0:b1:60:96:63:fa:cc:1a:d7:05:85:e3:0e:ab:
fa:13:08:7e:bb:38:0f:aa:5b:f3:38:cb:9e:f2:21:
6d:e2:43:20:53:ec:ca:34:76:7d:96:e1:78:06:b2:
8e:79:08:08:f7:7a:6c:59:99:2a:27:43:fe:d6:72:
82:c4:7c:34:81:41:48:f7:b4:e7:47:c8:a6:09:3d:
6d:36:7d:f4:7a:87:ad:b1:90:56:ce:cc:00:f1:de:
87:24:0b:2f:98:be:42:07:78:b1:c2:88:ff:c2:5e:
4d:67:d7:99:d2:6c:ca:92:2c:18:20:cc:e8:4e:f6:
de:39:9b:34:b9:df:0d:fe:85:34:fa:08:59:5f:c3:
3a:56:33:e1:22:40:67:60:81:6b:d1:d7:3a:51:7f:
99:dd:e5:ce:e8:53:90:ff:96:5d:7e:8b:12:28:36:
a5:c9:52:48:ab:65:6d:2a:73:08:16:cc:80:00:70:
a0:03:b5:bf:01:9e:45:b4:ec:98:bc:7d:9e:b9:6f:
1b:32:5c:4f:7e:a9:93:36:ba:8d:d1:47:a2:cb:82:
e4:dc:a2:28:a1:88:81:94:0f:3b:74:d9:5e:c6:78:
e9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D5:72:E6:AB:24:81:81:93:9A:B1:02:93:F1:4B:2F:28:AC:14:DA
X509v3 Authority Key Identifier:
keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:68:66:6d:89:d9:f8:7f:92:8b:a0:db:2e:8e:98:dd:82:d9:
73:4b:3d:fd:82:cd:fb:9d:04:c2:19:26:a0:b4:bc:28:d2:2d:
8f:d8:16:e3:80:49:52:7d:f6:61:d1:90:05:6b:b9:2c:e8:be:
48:a7:31:c8:ee:33:b1:fd:3e:2c:7b:55:91:de:b5:fb:b3:ed:
d6:5d:66:63:7f:61:f9:ff:a1:64:6e:2b:ca:f3:4c:b0:11:29:
9d:7a:74:f8:fd:1e:e7:b2:b9:d0:80:aa:fb:ee:a0:9a:da:55:
4e:7e:67:59:2b:52:aa:a8:ff:7f:2c:d9:a5:d7:25:45:ed:15:
2b:52:68:13:2a:93:05:53:c2:d6:63:43:ff:e3:e5:6f:2d:e1:
d2:68:ae:be:72:18:88:2a:ea:7e:dd:c9:ab:65:d5:15:2f:d1:
6f:5f:a1:09:3b:e4:64:93:ed:a3:51:01:05:43:1a:c8:5a:18:
c6:a7:65:3c:ab:a3:ce:c0:62:35:bb:e0:67:ef:98:cb:7c:6f:
ef:b4:f2:5a:4f:b4:57:18:42:a0:e6:c7:3b:c1:34:50:fb:bc:
fa:62:3e:c4:10:c5:e9:3c:7e:6e:41:de:bc:08:85:d8:0a:e9:
82:65:cc:e3:de:40:b8:5c:3d:44:51:5a:26:f7:b9:3d:73:b1:
b1:46:90:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:37 2025 by rpki-client