Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
File: 7gJORqdGvzs6897Agc5-vEQRAKM.mft (raw, json)
Hash identifier: HiF3xvsuU+iDlCK8mvjfXQ1juufx9OLaBC/hadn053g=
Subject key identifier: 70:E4:18:35:91:25:50:68:B0:B5:57:4E:69:BA:CC:10:A7:CE:86:C1
Authority key identifier: EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
Certificate issuer: /CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Certificate serial: 01988DA1DA0353C4A829586F727FF06BEFE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 07:00:51 +0000
Manifest this update: Sat 09 Aug 2025 07:00:51 +0000
Manifest next update: Sun 10 Aug 2025 07:00:51 +0000
Files and hashes: 1: 7gJORqdGvzs6897Agc5-vEQRAKM.crl (hash: lJjrxV3ttHZtUa6rjLphlnwAoALglUYATmCdlBtqv7M=)
2: nigLCn7wWT0ueFZoLpA3hlPaWgA.roa (hash: q+VheV55aItc4rpRaaib9XdkzvuIJSEg9slh0BtNQXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:da:03:53:c4:a8:29:58:6f:72:7f:f0:6b:ef:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee024e46a746bf3b3af3dec081ce7ebc441100a3
Validity
Not Before: Aug 9 07:00:51 2025 GMT
Not After : Aug 10 07:00:51 2025 GMT
Subject: CN=70e4183591255068b0b5574e69bacc10a7ce86c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5d:23:2e:59:53:e7:d2:1d:e0:bb:9b:62:ef:
29:bd:a7:9f:57:0a:76:42:3b:23:27:bb:a2:af:b8:
dd:10:05:59:e0:4d:30:d1:94:ba:aa:0d:21:11:29:
5e:76:c5:89:17:fa:99:fb:fc:68:1e:7b:d9:bc:21:
63:e6:d2:67:e9:c8:fb:a9:ca:70:a5:d3:8a:29:aa:
7d:23:5a:71:83:ca:ae:59:a8:6f:83:a6:a6:d7:43:
fd:60:4f:12:95:4f:3b:90:4a:a1:85:aa:a8:c5:db:
fe:47:4c:ca:f2:02:29:b4:43:b4:a8:e4:51:84:15:
52:8b:26:74:53:3d:88:ef:69:cc:5d:4e:ca:43:ae:
da:08:53:05:f4:d1:f8:29:16:7f:0c:76:f7:3c:76:
61:9b:14:6b:54:78:38:17:5a:5a:52:f8:50:49:0b:
71:f3:d9:eb:31:6a:a1:c2:13:57:3d:d6:22:88:02:
62:19:1d:1b:da:47:f6:59:d7:2e:b4:e2:27:1c:07:
0d:99:07:e0:1e:cf:8d:56:74:d5:c4:72:04:1a:e3:
9d:e1:8a:fe:b2:43:df:79:de:d8:7c:a3:80:3f:82:
f6:28:05:d9:03:d8:f5:0b:08:0f:df:9e:b5:d5:25:
b4:27:c9:35:dc:a1:36:e1:24:3a:e2:bd:ab:38:38:
6d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E4:18:35:91:25:50:68:B0:B5:57:4E:69:BA:CC:10:A7:CE:86:C1
X509v3 Authority Key Identifier:
keyid:EE:02:4E:46:A7:46:BF:3B:3A:F3:DE:C0:81:CE:7E:BC:44:11:00:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gJORqdGvzs6897Agc5-vEQRAKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0954b3-280a-4ca6-b84d-311304a9a211/1/7gJORqdGvzs6897Agc5-vEQRAKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:71:22:17:c0:f4:4a:a3:bd:9d:24:e1:a0:2e:77:20:ac:49:
a5:35:a3:fe:fd:8a:5f:34:b4:cc:61:c7:ba:76:3a:4d:05:1e:
09:f2:73:d1:1f:4d:e0:e0:f1:34:3d:70:27:84:53:59:8f:e5:
15:88:ef:27:2a:8c:56:b5:55:de:1b:ee:94:c8:dd:66:bc:f4:
99:df:04:4d:fd:33:e2:47:87:53:3a:4a:10:83:ee:38:8f:23:
8e:dc:a6:5a:41:90:1c:a7:25:f9:95:e5:76:8b:69:9d:89:d3:
cf:b6:54:b5:b6:38:63:9c:86:e5:fe:1f:fb:b2:4c:92:58:ba:
90:1d:15:39:07:7f:bd:f4:9b:a2:c0:43:2d:d3:da:9d:f0:4b:
16:d2:6d:64:37:50:71:75:55:31:72:86:d7:74:3b:6b:62:70:
87:a4:22:7f:b3:03:13:f5:3e:91:2f:09:d8:6a:d0:f5:70:58:
8b:23:8b:fa:7d:eb:ae:8e:72:a0:a3:98:3b:5a:59:bc:fc:f1:
a5:03:0f:11:58:5e:74:1b:08:d5:69:8a:5b:09:32:10:88:04:
6d:db:9d:c9:54:2c:14:4c:96:3e:da:95:71:4c:55:c5:f3:36:
91:be:05:f7:a5:12:60:86:d5:ea:f4:8d:ed:93:50:bf:69:b1:
48:2d:d3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:28 2025 by rpki-client