Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier: LBRZnFhGeRDeGnplOCuBB0UjYNTXQtEIyxmsEPNV5R4=
Subject key identifier: 16:75:7B:EB:E9:CB:59:2C:5A:E6:AA:02:4C:48:D6:E1:00:FF:05:11
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial: 0198726187C70E2252B565A5B457841F39DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number: 0D84
Signing time: Mon 04 Aug 2025 00:00:50 +0000
Manifest this update: Mon 04 Aug 2025 00:00:50 +0000
Manifest next update: Tue 05 Aug 2025 00:00:50 +0000
Files and hashes: 1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: Xjnalfqkapos93r3tSgoYHkB0X8OIYceLUShpsCBNvU=)
2: VXStklzuRlpg_R8nfz573Xq7Noo.roa (hash: IbT51sa2OOKxE/XOPtTGvEY7Cw0dCovzg7t9jfSRhHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:61:87:c7:0e:22:52:b5:65:a5:b4:57:84:1f:39:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Validity
Not Before: Aug 4 00:00:50 2025 GMT
Not After : Aug 5 00:00:50 2025 GMT
Subject: CN=16757bebe9cb592c5ae6aa024c48d6e100ff0511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:ff:71:5d:f6:8e:50:8d:89:d6:96:cb:e6:
8c:85:27:99:7b:99:d4:7b:08:1e:dd:9f:28:7d:6f:
d2:01:33:07:ee:04:34:ec:84:f1:da:f2:0a:86:6a:
a6:ee:b9:e4:62:9c:28:84:b1:b8:51:89:be:65:56:
aa:33:a3:6a:0f:29:ae:fd:e6:28:e7:03:f7:71:1a:
7e:1f:16:6f:05:7d:70:11:24:d4:f4:c2:d8:0c:cf:
87:a4:c4:7d:0f:54:82:d1:df:1f:2e:0e:36:3d:f6:
fa:ad:5b:ef:5c:c1:37:b4:04:e9:dd:79:e8:17:4f:
8d:92:7b:47:01:76:23:16:d1:e8:81:0a:fb:14:a5:
45:9c:6c:59:70:8e:e1:d9:59:95:5c:b0:2f:1d:3e:
32:df:01:2d:96:fa:91:0f:7b:08:49:f6:0b:40:70:
da:c9:59:0a:95:91:88:62:e2:80:e0:1d:76:cd:e1:
6d:cb:ed:c9:0f:50:f7:31:2a:38:e8:30:9f:66:91:
2b:32:62:4f:5f:d9:52:c1:15:ce:66:da:89:3b:e9:
55:26:9a:af:4f:da:13:25:e0:7b:0c:53:a9:7f:31:
5a:88:a3:54:cc:91:e0:98:cd:73:8e:0a:70:2b:4b:
2f:b3:65:d9:e7:64:f2:dc:fc:a4:a3:4b:f0:c1:f7:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:75:7B:EB:E9:CB:59:2C:5A:E6:AA:02:4C:48:D6:E1:00:FF:05:11
X509v3 Authority Key Identifier:
keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6b:c2:15:3c:c8:93:4e:08:52:f9:bf:bf:8c:ad:8a:1e:9b:
9f:2e:db:63:7d:28:0b:93:a9:e7:43:c5:b3:33:31:8b:bc:d6:
05:13:83:c2:e5:79:1b:be:cf:08:0e:a0:d4:df:4d:c3:38:ba:
b8:b2:c0:a3:43:10:6d:90:b1:48:7b:f9:31:f8:13:02:b9:9f:
8e:ee:54:ab:ef:7f:18:cc:34:94:58:c3:9c:8a:ca:01:23:07:
4c:d5:0f:87:2f:c3:e8:28:b6:ff:33:14:1d:66:b2:65:94:bb:
4b:11:a6:3c:0d:af:8c:f7:7b:14:73:ac:e9:ed:8a:e4:0e:33:
11:7c:91:c1:ad:ef:c8:8c:ce:87:3b:ba:d3:6c:01:c5:56:07:
50:58:cf:df:ba:ab:49:58:cf:c5:2f:c0:9b:30:f7:9a:32:8a:
0e:0a:ff:62:fc:d2:b0:0e:58:f2:49:d3:06:60:a5:3b:64:a3:
5d:dc:ec:de:ed:6e:22:22:11:bf:ea:ea:a3:5b:79:5f:11:50:
24:e5:fa:a1:73:bb:4f:37:9d:b5:2f:bb:55:f8:76:b2:90:91:
b6:9c:2d:4b:7f:70:58:f4:67:5f:af:e2:f1:0f:a4:92:8e:78:
5f:9f:fc:17:e3:4f:7d:1e:97:a3:87:9e:57:0d:0d:7c:53:b5:
a1:58:6e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:57 2025 by rpki-client