Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
File: 7VKTzUpieoRq7WDKf7XVqQGarlE.mft (raw, json)
Hash identifier: t1Nhzt1XdWuNnO4Gry8Fnt6dzPDwE7JesxjXqySYSIM=
Subject key identifier: E0:25:2D:12:C7:8E:2D:78:31:74:D7:78:B9:A2:DB:B4:12:36:30:7C
Authority key identifier: ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
Certificate issuer: /CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Certificate serial: 01987D8A399138CA1A5DCD0D6088E417DF4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 04:01:07 +0000
Manifest this update: Wed 06 Aug 2025 04:01:07 +0000
Manifest next update: Thu 07 Aug 2025 04:01:07 +0000
Files and hashes: 1: 7VKTzUpieoRq7WDKf7XVqQGarlE.crl (hash: m71e05MobFVeRHa9mUl7IIcUFNFcNe0EwN9XkE0WK8g=)
2: ISP0TJJTh3tprVicVW974-nq9rI.roa (hash: pUMX+/MC+BS6vpOzP0rNo03/k6W3G+9Ru/0k0Am9kHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:39:91:38:ca:1a:5d:cd:0d:60:88:e4:17:df:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed5293cd4a627a846aed60ca7fb5d5a9019aae51
Validity
Not Before: Aug 6 04:01:07 2025 GMT
Not After : Aug 7 04:01:07 2025 GMT
Subject: CN=e0252d12c78e2d783174d778b9a2dbb41236307c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:27:c6:7f:60:da:70:f6:3e:6b:bd:c3:9d:cd:
95:97:cd:3e:ca:68:3a:48:fd:4a:2a:37:2c:9a:d9:
84:5b:83:ef:f5:cc:de:82:29:c5:12:4e:85:88:b2:
0a:6a:ae:97:8f:8e:a1:fa:95:93:8a:eb:62:c1:b7:
da:14:11:62:54:c1:6d:52:0b:d1:b4:51:62:84:df:
8c:eb:c4:97:88:1e:f5:ba:2f:fd:b1:4b:a2:a0:72:
7e:3b:9a:ce:68:75:9c:51:41:79:8a:55:70:f9:45:
62:ba:4c:82:73:03:9e:ed:d7:77:7e:2e:73:a8:71:
99:b1:de:33:77:68:62:d4:7a:8f:8a:08:6c:c3:8d:
4a:55:31:11:86:d0:c1:4a:8e:d2:49:11:f5:4c:10:
78:c1:c8:4a:60:fa:8c:ff:c7:73:2d:3b:66:7f:f2:
d1:76:77:88:d4:fa:36:3e:93:8c:6f:7f:06:ba:b1:
66:88:83:f7:7e:87:c6:ef:38:a3:63:40:fe:0b:c6:
85:4a:99:6d:cc:a0:b1:8b:3c:8c:0b:e4:e3:7b:4c:
4e:b0:ef:53:62:dc:40:90:70:6e:2e:79:11:c6:d2:
63:f3:4d:df:89:9b:f3:5f:b8:d1:4c:4d:61:f2:77:
19:40:66:4e:7c:9a:81:d6:00:1c:06:70:29:22:c5:
52:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:25:2D:12:C7:8E:2D:78:31:74:D7:78:B9:A2:DB:B4:12:36:30:7C
X509v3 Authority Key Identifier:
keyid:ED:52:93:CD:4A:62:7A:84:6A:ED:60:CA:7F:B5:D5:A9:01:9A:AE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VKTzUpieoRq7WDKf7XVqQGarlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2029a9-4396-4717-ab05-e24336ec8a08/1/7VKTzUpieoRq7WDKf7XVqQGarlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:5d:1f:a6:33:a4:04:61:35:7f:a2:db:77:a8:4a:59:3f:7f:
59:7e:71:bb:4f:67:0d:2e:73:b9:75:82:8d:d4:6e:4f:bd:01:
c2:17:34:a5:f4:e3:64:31:da:69:b8:44:78:13:b7:e5:30:07:
11:f5:c0:b7:52:44:96:39:8f:76:f4:2a:60:ad:73:ed:53:01:
75:9f:80:14:99:7c:e6:68:79:67:40:96:f8:6b:b9:f3:eb:1b:
0a:c0:f9:51:c3:a9:05:ca:cd:16:0a:df:1f:9d:bc:d5:36:89:
07:89:0a:68:5d:4e:5a:bf:ce:78:35:16:71:53:9c:b0:bc:4d:
d1:ac:f7:f9:10:6e:1d:99:3b:10:cb:c2:5a:e9:26:d8:99:cc:
14:9e:5e:af:f4:f2:67:53:c5:4f:41:52:57:7d:3f:b4:18:e3:
30:c2:bb:3f:e1:1c:ac:38:94:45:1e:f3:6c:9f:9f:3d:31:06:
ee:d8:76:60:e5:77:e9:4e:5f:92:33:e9:4e:3a:98:ac:91:ae:
5e:64:47:3e:42:af:8e:04:fc:c6:30:ee:9e:76:aa:32:10:c7:
20:aa:a6:29:53:3a:db:ee:8e:00:0d:ee:85:35:23:70:3a:0e:
c4:eb:b9:f0:90:9d:54:69:56:b7:1b:e0:6f:ce:7e:88:c3:36:
e7:0a:47:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:31:10 2025 by rpki-client