Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File: 7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier: hUVzy8hBLztwTTktebE9bvorbluZhdiBA0s0ucWRpqQ=
Subject key identifier: 2A:16:70:3F:CA:0A:EA:89:60:12:9A:E3:55:7A:3B:72:BE:09:7A:35
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial: 01987F0A4A6AFEC092ADF1DBB8F9A141D4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number: 0CDD
Signing time: Wed 06 Aug 2025 11:00:37 +0000
Manifest this update: Wed 06 Aug 2025 11:00:37 +0000
Manifest next update: Thu 07 Aug 2025 11:00:37 +0000
Files and hashes: 1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: fUJfHLN6cQXg8I6ahN3TpmzMM5C0NtN0dF4Ud3iMK8k=)
2: ki56jkg-Ht0i-AxPw2XEPPfU3mc.roa (hash: 2NDyIuvL9kHGhxL4y5SFFt1xoYZ8BtFLva+lo3l3Ky4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:4a:6a:fe:c0:92:ad:f1:db:b8:f9:a1:41:d4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Validity
Not Before: Aug 6 11:00:37 2025 GMT
Not After : Aug 7 11:00:37 2025 GMT
Subject: CN=2a16703fca0aea8960129ae3557a3b72be097a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:50:df:60:ec:25:60:96:9c:ff:54:61:f4:
f6:31:00:a6:55:be:44:2b:3a:7f:8d:08:2d:23:bb:
30:09:c9:e5:9b:8e:50:4a:db:bf:24:e5:93:c4:13:
fd:04:2e:11:c3:81:aa:6b:31:f8:57:85:c2:2e:a0:
88:cc:c2:74:fa:13:f5:bb:54:85:5c:1f:50:22:9c:
ef:f1:60:27:a2:5f:49:68:57:84:1f:d0:8c:66:67:
b9:6f:51:95:7d:77:88:80:de:ea:3e:d0:0e:b9:e5:
12:c3:57:2f:2d:f7:cc:13:7f:72:61:67:6b:b8:e7:
ec:56:38:50:d2:fd:c6:eb:89:df:03:71:62:c6:ea:
05:19:1e:6b:9c:ef:4e:2f:1c:f6:41:79:53:69:86:
9c:40:86:c5:73:e2:c3:2c:b5:da:2d:cb:65:5e:0d:
d1:7f:b5:5b:f8:f5:61:93:fe:33:75:2f:fd:08:62:
9f:83:22:c1:1a:ed:15:a2:cc:e7:e9:7e:50:7e:ad:
9f:4f:93:9f:0a:b6:62:ff:19:6e:d8:b4:b5:41:7b:
30:77:2f:b1:1e:63:d0:3d:f9:a1:43:bd:09:3f:74:
60:80:7d:53:b1:ae:63:59:41:f3:ff:b2:57:7c:d3:
53:af:07:cb:f5:03:b8:15:9d:0f:92:12:0e:aa:63:
ee:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:16:70:3F:CA:0A:EA:89:60:12:9A:E3:55:7A:3B:72:BE:09:7A:35
X509v3 Authority Key Identifier:
keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c1:ad:f9:99:f8:c0:b2:ae:a4:83:a0:dd:22:4c:ab:fb:7e:
a8:56:e5:96:d5:1e:41:1d:df:11:07:14:d2:f8:58:3e:f2:a0:
3d:68:75:d5:de:88:db:94:98:b2:5a:33:f6:13:cb:c1:c7:55:
2a:c1:8e:6b:92:dc:62:1d:a8:25:81:3d:0e:45:b6:fc:33:5d:
78:ed:98:b4:65:6b:18:82:e3:fa:ba:3c:7c:5b:a8:3b:00:76:
45:e4:fa:85:79:dc:27:31:7d:61:73:a1:94:aa:e3:8b:d7:a8:
0a:ac:8d:e5:35:f9:25:27:cc:40:55:91:38:48:4a:70:b8:e5:
20:a3:9c:ba:bc:a0:8c:a3:85:1f:60:30:b5:fd:9b:23:d4:03:
d1:c7:e5:d1:99:c5:35:4c:e6:d4:13:e9:50:00:e5:81:05:36:
62:e1:a9:23:68:5d:c1:45:3c:60:e6:85:82:f5:8a:03:b3:dc:
18:97:f2:ea:84:92:b9:08:6e:28:b8:b7:11:a0:9a:cf:66:50:
30:8c:ec:84:da:71:a9:10:39:64:03:21:3d:7a:2b:1a:73:b8:
49:6d:39:ab:29:42:6a:38:bf:07:75:4b:bc:b7:1d:49:fe:ee:
7c:ec:0f:42:8a:ec:86:de:3d:3b:06:e1:5f:06:41:b1:e0:78:
70:6f:08:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:22:30 2025 by rpki-client