Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: LnpC7yvp+R4eEkXh5agVwM48kFufIolHsVeo6oiI/II=
Subject key identifier: 86:DD:BC:6A:26:1E:49:76:A2:FA:C9:C9:99:4E:BB:3F:AB:09:D5:87
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 01988B456A2BC7FC0B2D2C30A638614F9649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 20:00:38 +0000
Manifest this update: Fri 08 Aug 2025 20:00:38 +0000
Manifest next update: Sat 09 Aug 2025 20:00:38 +0000
Files and hashes: 1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: /aR1DuF0pA7RkYuLHCwljtC8AO8YGX6WuSfP3A4lSTY=)
2: QmonITNns_8Q9qn9QpgL_m0jbZY.roa (hash: lePHGLh8RQcKhBsHHefYW0245CnYH1iaj+dz5PW9vD0=)
3: d24ICbco0VbAsWx0dcNaky51E1k.roa (hash: d1k6XX+Y5B2DmgHQo92ou+wFZc56ndYpjjXsKkYwekM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:45:6a:2b:c7:fc:0b:2d:2c:30:a6:38:61:4f:96:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Aug 8 20:00:38 2025 GMT
Not After : Aug 9 20:00:38 2025 GMT
Subject: CN=86ddbc6a261e4976a2fac9c9994ebb3fab09d587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:8d:d8:d7:4a:b2:0e:42:bf:66:fc:de:b0:77:
bd:4a:6c:db:91:dc:34:6f:c9:f4:12:b1:6f:56:3a:
ea:ae:34:32:e3:44:e1:01:58:2e:b2:5a:ac:71:b4:
c8:fa:bd:01:63:ab:24:87:1b:d4:41:a6:e9:6e:da:
43:ee:78:60:4f:7b:4d:8b:ec:52:f1:5f:0f:64:7c:
c1:52:e5:02:5d:74:5b:11:84:5f:ab:a5:43:f4:c2:
62:72:25:4f:4b:75:b5:d8:22:cf:a8:d4:3b:f1:2c:
8f:c6:bf:63:e8:e1:15:55:22:11:34:ca:ee:e5:9b:
b1:bb:da:e5:16:82:c9:fa:73:3d:01:26:b1:5a:99:
a3:cb:29:a3:6b:2e:70:87:8b:7f:54:3e:58:b2:03:
b2:8b:90:8e:9d:b0:d6:ef:ef:7a:33:b0:ca:94:ca:
52:3c:40:71:db:92:3d:bf:2a:e4:be:2b:82:10:7d:
2c:ad:83:1f:a5:95:7e:5d:5f:0b:1d:64:92:ec:f2:
80:5b:df:96:91:76:4e:75:04:62:44:bc:d7:ba:a7:
54:3b:f0:4a:0b:1a:ab:8d:20:3e:10:12:32:9c:f7:
f5:b6:a9:19:72:b2:f8:49:da:3c:28:ef:9c:39:6a:
6e:d0:f5:77:0d:07:11:93:82:a2:f6:2e:d0:d0:55:
77:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DD:BC:6A:26:1E:49:76:A2:FA:C9:C9:99:4E:BB:3F:AB:09:D5:87
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e4:09:39:71:4b:99:aa:d9:b3:79:fa:b3:49:6d:90:46:43:
7a:b7:0d:b0:06:03:73:ed:a2:ce:64:d3:1d:23:b4:65:27:d2:
36:84:32:55:79:5c:30:39:c8:32:ab:f2:e5:be:fd:ae:bb:47:
13:53:ba:aa:19:f1:93:2a:00:81:ec:dd:75:80:fb:66:f7:db:
03:39:7a:18:78:6c:c3:54:83:bb:3f:1c:59:da:af:00:bd:fc:
90:93:b4:13:af:e7:2f:2a:bd:9f:26:83:6d:e6:3a:08:b5:60:
6c:42:af:23:1b:0a:a9:fd:7d:1c:58:48:45:dc:62:00:1b:f5:
d8:bd:2b:bb:5f:93:10:1c:db:81:84:9f:20:f8:64:6c:c3:4a:
7e:ef:96:c4:2c:90:79:44:d5:69:f1:18:32:5c:7c:de:ee:76:
5c:8b:bb:87:6d:e2:fe:b9:de:b0:33:63:95:0c:0e:45:e3:64:
37:0b:4b:b5:31:da:a3:5d:85:7e:5a:6a:99:e1:9f:41:13:52:
90:83:3a:be:36:2e:66:2b:a7:62:ef:a2:65:f5:5a:cf:66:ee:
b2:88:ed:77:6e:56:cf:e6:8a:98:0b:2d:14:5d:2f:a5:21:08:
ae:1d:6a:ce:93:2b:55:09:6c:82:af:9f:b7:68:3f:3f:b3:f3:
e4:ed:2c:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLRWorx/wLLSwwpjhhT5ZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMjI1OWYxNThiOWFhNzZhYWQwYjFhZGZhNjJjMWVlZDQ1
NTlkMTQwHhcNMjUwODA4MjAwMDM4WhcNMjUwODA5MjAwMDM4WjAzMTEwLwYDVQQD
Eyg4NmRkYmM2YTI2MWU0OTc2YTJmYWM5Yzk5OTRlYmIzZmFiMDlkNTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8o3Y10qyDkK/ZvzesHe9Smzbkdw0
b8n0ErFvVjrqrjQy40ThAVguslqscbTI+r0BY6skhxvUQabpbtpD7nhgT3tNi+xS
8V8PZHzBUuUCXXRbEYRfq6VD9MJiciVPS3W12CLPqNQ78SyPxr9j6OEVVSIRNMru
5Zuxu9rlFoLJ+nM9ASaxWpmjyymjay5wh4t/VD5YsgOyi5COnbDW7+96M7DKlMpS
PEBx25I9vyrkviuCEH0srYMfpZV+XV8LHWSS7PKAW9+WkXZOdQRiRLzXuqdUO/BK
CxqrjSA+EBIynPf1tqkZcrL4Sdo8KO+cOWpu0PV3DQcRk4Ki9i7Q0FV36QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbdvGomHkl2ovrJyZlOuz+rCdWHMB8GA1UdIwQY
MBaAFO4iWfFYuap2qtCxrfpiwe7UVZ0UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80MTAxMmUtNzg4NS00ZjQwLWJkZjQt
MzQ5N2NlMWI3MWJmLzEvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80MTAxMmUtNzg4NS00ZjQwLWJkZjQtMzQ5N2NlMWI3MWJm
LzEvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQeQJOXFL
marZs3n6s0ltkEZDercNsAYDc+2izmTTHSO0ZSfSNoQyVXlcMDnIMqvy5b79rrtH
E1O6qhnxkyoAgezddYD7ZvfbAzl6GHhsw1SDuz8cWdqvAL38kJO0E6/nLyq9nyaD
beY6CLVgbEKvIxsKqf19HFhIRdxiABv12L0ru1+TEBzbgYSfIPhkbMNKfu+WxCyQ
eUTVafEYMlx83u52XIu7h23i/rnesDNjlQwOReNkNwtLtTHao12FflpqmeGfQRNS
kIM6vjYuZiunYu+iZfVaz2busojtd25Wz+aKmAstFF0vpSEIrh1qzpMrVQlsgq+f
t2g/P7Pz5O0suQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:53:24 2025 by rpki-client