
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
File: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft (raw, json)
Hash identifier: qNGDGJwutBaQ2QNj3cw0/KrJGlcoxq5lFNLHb4opi4M=
Subject key identifier: F3:EE:5B:4F:07:A2:4D:9A:F8:FF:04:D3:F8:F3:DA:D7:CA:95:5A:C9
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 01987DC0D322CF4834916627684CD383E43F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
Manifest number: 056D
Signing time: Wed 06 Aug 2025 05:00:45 +0000
Manifest this update: Wed 06 Aug 2025 05:00:45 +0000
Manifest next update: Thu 07 Aug 2025 05:00:45 +0000
Files and hashes: 1: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl (hash: UiIK3kw0W6TnHqHl4UpOXVzpwAqUsynkNf8MpUY5WIQ=)
2: V8rwHt-KBtkyfMDcY6GbBS5O3lg.roa (hash: VKRjbMp2cA/7F+gIKAoYPT0t4kmN1vcNg+P5YqdMBPI=)
3: vLkg6vsM00eiYmKWC5SDs25Gs0o.roa (hash: laQ0wIfMQs3t8Q/rYbMaQJvlRI3pM205xGMs2yoH4OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:d3:22:cf:48:34:91:66:27:68:4c:d3:83:e4:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Aug 6 05:00:45 2025 GMT
Not After : Aug 7 05:00:45 2025 GMT
Subject: CN=f3ee5b4f07a24d9af8ff04d3f8f3dad7ca955ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7b:c7:30:6a:1a:0e:67:cb:5b:93:5a:06:6c:
14:ae:62:82:07:27:ba:01:5c:4e:24:22:4e:42:48:
75:30:d6:72:0e:56:ec:6c:28:06:7e:f2:f3:4a:cf:
73:78:27:ec:33:d1:92:8b:2b:aa:2c:2a:55:59:99:
2d:75:e3:25:6e:18:f2:51:3a:87:a1:cd:70:81:e4:
b4:c8:8c:16:9e:fe:32:fc:70:f7:b2:9e:7f:c3:54:
16:08:1f:3d:c6:34:f4:b4:38:ee:6f:19:01:52:5d:
3f:33:92:48:7a:1b:d2:b5:3f:38:4c:ca:b1:4d:da:
dd:a7:9b:5a:6a:a8:39:87:73:8d:96:03:36:2e:27:
9e:f1:67:2f:af:c1:34:6a:3d:ce:13:14:6e:aa:1b:
2a:67:fc:c4:46:a2:bd:0a:ad:a8:0d:d7:5b:99:29:
4e:f3:d5:83:a5:70:0d:af:40:b6:5d:bf:8c:3c:27:
4d:27:15:8f:5e:26:0e:12:83:15:79:ba:44:4f:ad:
65:00:82:ae:04:1c:ea:38:d6:0f:7b:e5:e1:47:0d:
54:3d:d1:44:a1:9b:77:e2:e5:ce:ea:aa:d8:70:b2:
56:37:51:ef:ee:9e:0d:66:bc:d0:12:b3:32:5e:aa:
02:95:82:3e:48:63:43:b5:97:5c:02:4c:dd:ce:02:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EE:5B:4F:07:A2:4D:9A:F8:FF:04:D3:F8:F3:DA:D7:CA:95:5A:C9
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c2:e2:31:45:67:84:cb:8a:db:24:fa:18:ac:d2:26:83:81:
87:89:82:de:54:f3:0b:60:4a:1d:92:07:17:28:d4:62:e8:6c:
23:89:53:52:98:f9:ff:41:49:34:2b:43:22:e1:73:86:03:1c:
d7:64:71:79:4d:28:7a:36:41:9e:f3:d6:5a:fb:f0:63:4c:de:
88:0d:0f:f2:02:01:cd:8c:6d:3a:e1:16:69:88:69:31:11:f6:
cb:4b:10:2d:7d:ed:36:93:ca:8c:40:0e:6c:6a:93:a6:09:da:
cf:30:09:c6:a7:af:ef:54:e8:0d:af:dd:47:2b:91:41:f2:f5:
32:e4:0d:50:34:f3:8a:99:6d:72:11:56:74:a2:22:d6:af:f2:
73:8a:12:4f:e3:f1:c3:fe:70:64:9f:17:b7:02:3f:39:64:21:
0b:4d:42:19:fd:32:c0:e1:a2:4c:92:87:85:71:c0:39:d5:5b:
fc:79:3a:9f:9b:97:c2:e9:1b:2b:64:54:e0:41:6a:ca:fb:56:
3a:62:a0:d2:30:1b:d3:90:c7:d7:03:56:76:f9:b0:90:d0:b2:
31:c3:90:a1:7c:34:ea:52:30:0a:7f:a6:21:bc:ec:45:b0:89:
4c:5c:3b:ee:1a:1f:a2:0f:af:57:00:b4:a2:84:12:c2:52:2b:
94:b7:1c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:22:43 2025 by rpki-client