Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
File: 7kDaG04w_7sypOSkt61zHAMeRCk.mft (raw, json)
Hash identifier: CAPo6LWxanJWAYFY0XaKOXcqomcDq80QnD17+X9M6qo=
Subject key identifier: 86:00:5A:16:7E:DE:EF:3D:71:A9:7A:1F:3C:46:D1:0D:BE:45:91:5D
Authority key identifier: EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
Certificate issuer: /CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Certificate serial: 01987562AB4F51C5E9908EEEDD8CF3471A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
Manifest number: 04AB
Signing time: Mon 04 Aug 2025 14:00:56 +0000
Manifest this update: Mon 04 Aug 2025 14:00:56 +0000
Manifest next update: Tue 05 Aug 2025 14:00:56 +0000
Files and hashes: 1: 7kDaG04w_7sypOSkt61zHAMeRCk.crl (hash: clhxJ5C3uJN+yG9XAPXj+z2+/WEfEC4vF81qBbPJfp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:62:ab:4f:51:c5:e9:90:8e:ee:dd:8c:f3:47:1a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee40da1b4e30ffbb32a4e4a4b7ad731c031e4429
Validity
Not Before: Aug 4 14:00:56 2025 GMT
Not After : Aug 5 14:00:56 2025 GMT
Subject: CN=86005a167edeef3d71a97a1f3c46d10dbe45915d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:e3:98:a5:1a:5d:d0:bf:3f:37:82:dc:7b:
71:30:79:e6:13:2e:60:c1:97:00:17:12:5d:75:88:
50:33:c5:f0:30:0f:cb:e5:33:77:fc:ca:3d:b8:89:
0d:c4:71:0b:8e:3e:c3:f9:c9:ac:96:fa:86:f5:3b:
35:b8:73:05:52:c2:78:79:7b:84:9b:82:92:ee:02:
a5:3c:ed:ce:31:d1:65:4f:9f:a4:cf:10:e3:86:0b:
13:0b:4f:f8:e0:d5:0a:f2:bd:8f:2a:ad:1c:34:4f:
63:ee:22:9f:77:6e:9c:4a:d8:2a:f3:3c:6d:8c:21:
28:f4:92:c7:7f:be:c5:2a:11:5f:cd:54:de:65:0c:
71:c3:aa:d3:59:44:d0:28:6f:00:47:55:ff:86:74:
8a:8a:2f:5e:e2:99:eb:5c:91:31:44:8d:6c:59:cc:
49:7a:19:dd:db:46:06:2e:fa:4a:4b:3c:75:eb:8e:
ac:e9:c9:1f:8f:cf:e4:9b:0a:c8:cb:dd:25:e4:2a:
14:17:6e:07:8c:25:83:0c:d3:8a:0d:87:59:64:51:
45:ea:c3:e7:a3:fc:5c:4a:07:fa:05:93:b9:09:65:
07:bf:e4:b6:ac:14:b4:a9:6e:0e:1d:07:68:d8:a5:
60:df:b4:b5:cf:9d:e9:9f:28:53:51:c9:cc:61:25:
68:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:00:5A:16:7E:DE:EF:3D:71:A9:7A:1F:3C:46:D1:0D:BE:45:91:5D
X509v3 Authority Key Identifier:
keyid:EE:40:DA:1B:4E:30:FF:BB:32:A4:E4:A4:B7:AD:73:1C:03:1E:44:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kDaG04w_7sypOSkt61zHAMeRCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/dc6229-5ed5-4f2d-b201-3d6578140fc1/1/7kDaG04w_7sypOSkt61zHAMeRCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6c:b5:d6:d3:76:cb:d5:87:96:34:3a:8c:4b:44:bd:ac:40:
c9:d4:26:15:23:a5:7d:19:20:30:56:ac:ba:2d:e2:5a:1a:e1:
5c:68:8f:1f:ea:d8:37:17:a4:f6:d8:23:47:82:c4:b5:ad:2e:
36:7d:89:37:ef:e8:5c:e4:7a:97:59:fe:8c:c5:ee:a5:50:38:
77:55:1e:9b:16:f8:2f:4e:de:7a:12:21:2f:07:a7:13:26:43:
26:6b:cd:9e:cc:ad:46:05:7f:8a:71:7d:62:95:e9:0c:91:3d:
f9:cc:4a:ce:c1:6b:9b:e4:ae:ba:42:87:dc:bd:d9:d3:67:54:
17:6b:a0:e9:de:65:f7:ba:ca:0c:fb:c4:08:c7:3d:7d:b6:8d:
90:c6:f1:dc:30:da:b3:b8:82:b8:d8:31:17:aa:83:c0:06:4c:
ba:4f:76:73:8e:d1:7d:12:12:a1:ba:68:cb:0c:c3:06:58:fe:
4e:c2:b5:c3:81:49:15:48:1c:97:d6:ef:85:51:d6:a6:5d:2e:
88:fb:f4:01:f0:1c:86:8b:a9:4d:f1:4b:29:17:d2:34:b2:e7:
92:97:dc:68:a3:06:f1:52:f5:7c:fb:4c:99:d7:da:a7:26:e1:
33:2d:50:be:32:88:51:75:7e:f8:be:2a:da:34:b6:23:c2:9f:
7b:08:db:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:28:07 2025 by rpki-client