Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
File: 7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json)
Hash identifier: 9d1oeEz4kGn3NXca18VTBskIH9BPqzQ7q5i6IXjA5P0=
Subject key identifier: 9E:13:13:8D:89:24:02:E7:DC:CC:B7:BD:14:AB:DD:CB:8D:05:B0:0B
Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Certificate serial: 0198A04D973DBF50656927017294E3C6AA99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
Manifest number: 028F
Signing time: Tue 12 Aug 2025 22:01:36 +0000
Manifest this update: Tue 12 Aug 2025 22:01:36 +0000
Manifest next update: Wed 13 Aug 2025 22:01:36 +0000
Files and hashes: 1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: hZyamKUAlw2JVi0H3Jp2+i7H+k7X6CH3LWYxdU9Dlfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:97:3d:bf:50:65:69:27:01:72:94:e3:c6:aa:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Validity
Not Before: Aug 12 22:01:36 2025 GMT
Not After : Aug 13 22:01:36 2025 GMT
Subject: CN=9e13138d892402e7dcccb7bd14abddcb8d05b00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:69:66:72:fa:c6:fe:24:bf:8d:08:74:34:
26:24:30:52:b8:82:66:95:29:7e:13:93:89:93:f0:
90:09:2d:71:88:c1:9c:28:76:6c:8b:2c:8d:84:47:
33:b9:c0:bb:96:ff:e8:94:e1:a9:d6:d5:58:df:3d:
1b:4e:57:ff:60:15:ab:8c:c8:25:bc:4a:d7:1f:f0:
1c:43:e0:10:c0:d5:15:ee:62:0e:41:3c:6c:59:9d:
20:7c:3e:f4:c9:a1:b9:fa:da:53:ee:29:85:df:23:
4b:04:a9:56:ba:96:e8:94:3f:e3:fe:26:5a:e8:0c:
4e:a6:23:89:5e:6b:d2:45:df:ae:8f:06:a3:c6:ae:
ca:b1:85:38:cb:21:a4:3c:66:c8:40:81:53:66:c9:
d0:08:a3:b1:1f:a7:8b:4f:46:45:07:a7:2d:c4:f1:
bb:44:56:d4:ba:3d:c1:84:1c:bc:04:dd:3e:9a:6b:
8a:51:7f:02:73:0b:5e:a0:7f:64:62:f6:1b:db:81:
fc:c7:57:27:f9:66:9d:d6:11:9d:2e:41:09:27:07:
50:7a:8e:fa:5b:01:c3:10:e2:f0:2b:d5:ed:38:2d:
65:9a:77:91:11:d3:70:06:aa:59:bf:b9:02:04:c8:
9f:1c:61:4a:82:88:ca:5c:7e:ab:7c:33:e5:fb:b9:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:13:13:8D:89:24:02:E7:DC:CC:B7:BD:14:AB:DD:CB:8D:05:B0:0B
X509v3 Authority Key Identifier:
keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d1:db:b3:53:ce:3c:6d:0a:3f:3a:be:ab:89:de:8b:0f:cd:
06:ae:61:68:5e:20:80:d8:8a:de:3d:1c:f6:7a:25:75:86:68:
16:55:a8:98:94:bf:7e:01:86:c8:7b:1b:e5:96:6b:a3:23:f2:
19:12:3b:d3:2f:a4:9a:f0:61:1b:a4:81:c7:82:34:ba:a3:62:
cd:b6:6c:db:dd:54:33:bf:05:e7:5c:4c:00:b4:95:2e:18:4a:
84:78:1a:6b:89:ac:dc:ab:74:36:2a:15:ff:3a:50:d6:02:6a:
db:eb:6d:ae:40:c3:f7:0c:bc:13:ea:14:de:92:77:4e:4f:3c:
77:3d:9d:54:25:4c:a8:42:3e:a3:ce:3f:85:5c:11:18:ac:51:
7c:84:1a:64:0a:47:9f:02:e5:97:a3:f8:cb:49:5b:5c:36:2a:
b3:5e:c6:85:e4:66:98:81:10:aa:58:96:8c:38:22:87:7c:3d:
e7:d1:77:d7:6a:5d:97:18:eb:27:d6:d5:eb:52:7e:4f:e2:1d:
89:6a:8f:f6:aa:fb:02:7b:84:5e:c6:59:eb:51:46:e8:c8:51:
f6:0b:ab:92:a9:d1:3d:4e:2b:6f:d9:a7:8b:61:f2:c1:aa:94:
53:3d:99:7a:ef:40:dd:1d:bd:9c:4f:fa:c6:91:da:0c:eb:97:
b6:fc:c4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:35 2025 by rpki-client