Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
File: 7VkCvfvXTDPqdkU9FF529qqFfEE.mft (raw, json)
Hash identifier: yLmZVxUe9G3mRzXflp0Q5BVJA3oy1w0tluNkVe3+7xg=
Subject key identifier: 52:93:D2:DD:86:7A:2D:81:15:FA:58:38:A0:3F:5A:30:86:72:24:49
Authority key identifier: ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
Certificate issuer: /CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Certificate serial: 0198D54E0D585C3720D5D5C0EEE13FF97BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:01:58 +0000
Manifest this update: Sat 23 Aug 2025 05:01:58 +0000
Manifest next update: Sun 24 Aug 2025 05:01:58 +0000
Files and hashes: 1: 7VkCvfvXTDPqdkU9FF529qqFfEE.crl (hash: Im8gQG4QGHlYDNJK718mIzT1nrI/ikLFnldY32yepQY=)
2: b9uFZXxchqu_WU8UVL2lcEelg1M.roa (hash: NHGZBJUOGWUhtzmDGEI+zLtl0jv4NmQvyCdklZRG/7E=)
3: mGTK3wTvfhonNVwr6seWi2ASIP8.roa (hash: aYF3ywz/BlGpMX8QkbZOivZvZOPC3l60CNt4ow7w3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:0d:58:5c:37:20:d5:d5:c0:ee:e1:3f:f9:7b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5902bdfbd74c33ea76453d145e76f6aa857c41
Validity
Not Before: Aug 23 05:01:58 2025 GMT
Not After : Aug 24 05:01:58 2025 GMT
Subject: CN=5293d2dd867a2d8115fa5838a03f5a3086722449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:85:fd:c8:38:26:f7:7d:89:0e:17:c9:b8:a4:
d4:3e:65:cf:90:49:b4:e2:9e:4c:9b:42:28:6b:21:
58:4e:94:89:d8:b0:71:85:ec:47:3a:f1:0a:0f:22:
1a:f6:19:d7:6a:a8:55:f3:12:7f:fb:03:f7:a1:a3:
77:84:a6:f1:31:8d:52:60:de:05:1e:8f:80:80:0d:
89:5a:fd:7f:39:8d:e9:b4:7e:62:aa:3e:f7:fc:da:
8c:85:df:b6:bf:78:d0:23:68:45:79:a9:a6:66:ef:
fd:f5:f5:9d:33:6b:c1:12:76:68:18:e9:66:51:65:
e9:b3:64:cb:69:7d:9c:dc:5c:4e:99:62:e6:54:ad:
93:68:77:57:3d:d2:41:49:33:c4:ad:4c:c6:b1:57:
80:8d:45:23:0a:e6:99:07:62:62:91:07:41:c5:0e:
01:45:60:84:07:d7:30:d1:6b:c1:04:47:6b:a6:c9:
e9:d9:a1:cc:b3:d1:ff:ef:1d:84:15:9c:43:c7:99:
da:f0:1c:25:f6:2c:02:c2:5d:e9:3e:b5:7b:92:62:
3c:4f:14:79:07:17:07:b9:79:ae:cf:02:bb:42:15:
ff:e2:5e:36:81:3c:01:5a:ee:03:6b:f4:ab:26:e8:
41:92:e0:b8:61:76:56:0e:8e:60:ac:03:60:cc:41:
65:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:93:D2:DD:86:7A:2D:81:15:FA:58:38:A0:3F:5A:30:86:72:24:49
X509v3 Authority Key Identifier:
keyid:ED:59:02:BD:FB:D7:4C:33:EA:76:45:3D:14:5E:76:F6:AA:85:7C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VkCvfvXTDPqdkU9FF529qqFfEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4301c9-c0ee-4040-a742-50336f5d340e/1/7VkCvfvXTDPqdkU9FF529qqFfEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:59:89:53:fb:ad:ae:d6:9d:53:cf:99:f5:d5:07:dc:7e:55:
bb:96:49:8e:8b:b0:8e:09:e3:53:46:31:6b:06:06:10:a3:d8:
5a:63:3b:4f:50:f0:0a:81:94:14:f5:07:67:bb:b7:50:a2:be:
51:06:38:93:ee:62:4e:62:92:aa:1e:24:cc:7b:ab:67:0a:b3:
b4:94:31:e1:f8:bd:d9:48:16:2c:31:31:7b:a5:72:27:99:24:
ee:e0:80:43:99:58:17:f8:b1:67:de:9a:62:de:76:87:51:51:
51:5d:77:3f:0b:e8:7e:1b:c4:52:98:7e:be:67:7d:15:bf:1c:
ec:16:2e:24:da:e5:da:c8:ac:18:a7:85:f0:35:7f:08:a0:82:
9a:9e:0b:aa:dc:1e:91:6d:a4:32:f2:55:49:6b:9f:dd:b6:7a:
39:7c:ec:35:43:04:8f:0b:0b:fd:ef:2c:fa:20:fe:61:2b:8a:
0e:a3:9a:60:13:74:9e:d1:50:b2:0c:1a:50:49:43:0a:e5:37:
5a:2b:0f:33:dd:db:16:a4:0f:64:42:d4:7a:76:d5:85:8a:80:
aa:13:23:8a:bb:21:76:2c:d5:2b:f2:86:b5:3b:71:5e:5d:fc:
e4:7e:12:e2:7e:64:fd:27:1f:b3:4e:42:21:80:73:24:e3:dc:
68:08:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:21 2025 by rpki-client