Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
File: 7cOYioT5-7QYXqSsW3IYRcooA34.mft (raw, json)
Hash identifier: GzRUcRFEcHNtFlJ9CCcjrCs1XqTroimsJE1jrOfs2QY=
Subject key identifier: 9D:D9:F4:17:DB:66:98:1D:AA:FE:E2:9E:3B:C2:EE:17:8B:50:BB:45
Authority key identifier: ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
Certificate issuer: /CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Certificate serial: 01989DF08C8F6129AC6D7427851D87BA82C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
Manifest number: 162D
Signing time: Tue 12 Aug 2025 11:00:44 +0000
Manifest this update: Tue 12 Aug 2025 11:00:44 +0000
Manifest next update: Wed 13 Aug 2025 11:00:44 +0000
Files and hashes: 1: 7cOYioT5-7QYXqSsW3IYRcooA34.crl (hash: i7VsGvnu1tjF/6h5D1o08ecchat+zyoTH+8KxQlfRmQ=)
2: 8rOJtiLxYHoU0BtAFzn-91ivD_s.roa (hash: Ru+2TW06RDS2clsfzv8MubQ+2olZEzQWBQuJZ31W9Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:f0:8c:8f:61:29:ac:6d:74:27:85:1d:87:ba:82:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc3988a84f9fbb4185ea4ac5b721845ca28037e
Validity
Not Before: Aug 12 11:00:44 2025 GMT
Not After : Aug 13 11:00:44 2025 GMT
Subject: CN=9dd9f417db66981daafee29e3bc2ee178b50bb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:91:11:db:13:d3:27:a7:7c:c6:92:bf:6d:4e:
8e:a4:4c:71:5c:4e:ba:93:a1:61:d7:64:6e:e7:f5:
74:c2:ce:6a:49:d4:b3:33:b0:00:1a:6b:17:0b:ab:
2d:fe:50:9d:c9:f2:94:bc:ff:12:0b:c7:90:a0:94:
23:e9:60:1f:15:2c:b9:a9:78:6b:eb:4a:93:b1:03:
23:f0:a6:0a:ad:5b:d5:1e:01:c1:be:07:c9:49:eb:
3d:1b:82:57:d2:71:f2:42:c3:a8:3c:f9:73:68:6b:
45:a5:50:59:c0:d7:ef:80:ee:29:00:4b:ff:e5:c9:
4b:82:9d:ac:0c:82:29:84:e3:8d:ab:f1:7c:c8:8e:
32:93:fe:5c:57:8f:83:10:0b:8a:87:e9:3d:34:9e:
cc:c1:80:f2:e0:43:f8:e6:e2:c7:41:b6:c6:bd:1a:
aa:70:8f:7d:e5:6d:40:1a:9a:ff:28:95:45:19:b4:
e4:c4:32:ad:50:55:03:45:54:12:83:74:0d:39:5a:
95:95:1c:d5:38:b2:18:3d:bc:3d:12:b9:18:5a:ff:
9c:b1:de:b2:88:48:85:0f:4a:08:38:e3:13:06:56:
50:89:ac:2d:47:f2:e3:2e:e1:56:36:72:bd:db:9b:
7a:b4:58:a3:7e:fb:84:45:fc:b4:b1:97:92:f6:92:
d2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D9:F4:17:DB:66:98:1D:AA:FE:E2:9E:3B:C2:EE:17:8B:50:BB:45
X509v3 Authority Key Identifier:
keyid:ED:C3:98:8A:84:F9:FB:B4:18:5E:A4:AC:5B:72:18:45:CA:28:03:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cOYioT5-7QYXqSsW3IYRcooA34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a7c811-de55-4417-bb31-10fced5fd4ee/1/7cOYioT5-7QYXqSsW3IYRcooA34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9f:93:e4:ea:af:17:91:37:42:86:2a:a2:07:55:87:b4:3d:
89:21:69:28:ee:93:6d:09:1e:13:84:30:28:73:98:9e:c4:94:
86:d4:e6:b1:93:87:83:a6:fe:41:fe:0a:e3:d3:d9:7c:09:83:
4b:51:c7:96:c8:d8:89:3c:d3:ef:b9:50:77:0a:f9:ef:29:14:
3d:37:12:90:25:0e:c5:2a:88:57:db:7c:eb:79:e9:39:15:1d:
1f:05:28:25:9d:1c:50:2b:ba:aa:09:7c:23:9c:91:25:63:36:
af:26:0a:56:52:5e:0c:c1:76:c1:26:9a:2d:89:7c:91:d9:91:
54:f9:a7:bc:56:58:30:e9:c2:c3:ea:78:97:05:28:7f:f8:59:
b8:51:2b:f3:b6:e8:be:a0:9f:3b:3d:a8:b2:51:73:20:cb:e1:
8a:f7:ea:9b:fa:ff:26:31:d1:f0:68:9d:fa:d2:3b:4d:ab:fb:
29:52:b2:6d:a6:64:ae:d2:70:f9:11:2c:8a:52:0f:7a:01:12:
1b:b4:5b:47:12:70:15:76:a8:de:0c:e7:f2:1c:5e:bd:14:75:
f8:28:37:fb:cd:d4:3e:4e:b8:4a:0b:bf:59:69:84:23:a2:08:
f7:41:75:8a:23:69:26:ca:cf:0e:66:b8:97:6b:94:14:ff:3c:
16:ff:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:04:16 2025 by rpki-client