Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File: 7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier: Z/LZYHdQCkRV4t7Jq4MI9eat8Zy6QIOLQwuxQ39dmEk=
Subject key identifier: 06:11:A1:12:BB:22:2E:E9:FA:1D:69:7E:E5:AF:C2:7A:18:D9:6F:56
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial: 0198D4E02DDC00686C8DC3D44B491EA50992
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 03:01:58 +0000
Manifest this update: Sat 23 Aug 2025 03:01:58 +0000
Manifest next update: Sun 24 Aug 2025 03:01:58 +0000
Files and hashes: 1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: d7IBxviVAC/TJAoYINVo4ZHWPGD/NWdX3ddUM4a82kk=)
2: DJI5pA0yQdHfWf9YZsCq7SLW83k.roa (hash: aYlNDPO2QXpilHLu8WGoR0IYFB4fHF6uZQ2LQMfMdjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2d:dc:00:68:6c:8d:c3:d4:4b:49:1e:a5:09:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Validity
Not Before: Aug 23 03:01:58 2025 GMT
Not After : Aug 24 03:01:58 2025 GMT
Subject: CN=0611a112bb222ee9fa1d697ee5afc27a18d96f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:49:3e:5c:c2:c1:f3:3f:ad:d1:06:cb:d4:
9d:30:9e:1e:a9:6a:db:e0:67:53:b0:38:a6:3d:f0:
6d:33:96:48:e6:dd:43:78:7c:4e:c2:4d:ce:d1:24:
b5:27:f0:e3:18:81:c0:20:08:8b:19:5e:72:60:1a:
13:6b:e7:1d:5c:c5:64:67:8d:92:7d:3b:4b:21:74:
a2:e3:a7:c5:63:bf:36:99:7d:2c:9b:c4:b9:52:02:
eb:59:3f:de:a8:f9:b1:ee:27:47:f9:b7:a8:7e:c1:
b7:27:4e:37:ad:a7:b1:3b:3e:4e:1e:78:b2:7a:63:
5c:0f:f3:f3:df:3e:cf:5d:94:57:94:bd:5b:9b:85:
56:e0:0b:23:d4:be:40:31:f3:cf:c9:f1:0d:7b:5d:
c2:a9:0f:ca:ba:54:10:64:0a:e8:29:22:3e:eb:48:
30:03:19:2c:26:07:60:92:ae:67:38:a5:da:0b:f7:
4c:7a:fe:34:a1:4f:ca:98:d6:bf:64:9d:d6:87:bb:
a5:1b:ac:2b:ac:63:e4:98:7f:a5:7e:e8:22:ba:81:
cf:57:4e:85:b4:60:e8:c7:a5:ea:66:4f:f4:b8:3d:
0b:a8:d8:26:5b:12:6e:16:80:2f:12:ca:0e:8e:13:
73:e4:6b:b9:45:ef:14:df:e5:90:b6:1a:9b:f0:ba:
4f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:11:A1:12:BB:22:2E:E9:FA:1D:69:7E:E5:AF:C2:7A:18:D9:6F:56
X509v3 Authority Key Identifier:
keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ae:b1:0d:cf:5f:58:a6:d2:07:ee:2f:d5:b8:1e:81:8b:6a:
22:d9:a3:2b:31:a6:bb:50:c4:69:96:1b:81:ea:3c:d7:8b:0e:
8c:07:ad:d9:09:db:1d:fb:86:29:48:67:dc:58:8f:29:a4:15:
9f:f2:f5:11:8b:98:1e:90:d5:6d:4d:6a:82:85:54:98:b9:c1:
3d:a8:1e:4b:ff:a3:67:a6:ce:9c:15:90:4a:a4:b5:5c:37:14:
9a:67:19:b6:49:d5:cc:5e:f7:c7:28:b8:b8:ab:4a:d5:58:7c:
ca:55:60:aa:31:6e:35:a6:83:d0:40:4e:70:ec:d0:f3:9b:0c:
c7:8d:c4:4d:54:6a:51:e0:ff:b9:05:3f:ae:0c:07:f6:1e:1c:
d8:bb:f5:8e:27:58:0a:2f:98:68:39:b8:78:07:07:5a:d9:99:
6a:e6:f8:7d:1a:c4:84:dc:e5:3c:d3:c7:1c:77:51:66:b5:aa:
45:52:61:60:2c:75:8d:74:27:7b:15:f2:af:2a:8b:7b:37:56:
7d:4d:24:45:c2:46:38:06:2e:67:b1:8f:67:52:5f:66:c9:41:
e5:ff:d8:ec:93:24:b0:e5:3a:9f:ed:2e:51:d1:e2:ee:eb:16:
6f:8c:2b:42:e4:9b:e6:04:23:b8:42:f6:96:90:d3:0f:fc:54:
e2:18:36:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:46:12 2025 by rpki-client