Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: AOBn6oqsCb+Crjwd6rFJMH9kYX6o+nqEp7Vf3BFuQWQ=
Subject key identifier: CA:54:FC:9F:DB:58:5E:D1:EA:EC:64:FC:2B:94:C7:7D:FF:A0:CC:74
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 019A53084390F1146D7874805CDD56B1CB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 08:00:41 +0000
Manifest this update: Wed 05 Nov 2025 08:00:41 +0000
Manifest next update: Thu 06 Nov 2025 08:00:41 +0000
Files and hashes: 1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: Zx8N0PWiAPP9JJES45XRFaun73k4piW1+ERh2Zp45js=)
2: QmonITNns_8Q9qn9QpgL_m0jbZY.roa (hash: lePHGLh8RQcKhBsHHefYW0245CnYH1iaj+dz5PW9vD0=)
3: d24ICbco0VbAsWx0dcNaky51E1k.roa (hash: d1k6XX+Y5B2DmgHQo92ou+wFZc56ndYpjjXsKkYwekM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:43:90:f1:14:6d:78:74:80:5c:dd:56:b1:cb:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Nov 5 08:00:41 2025 GMT
Not After : Nov 6 08:00:41 2025 GMT
Subject: CN=ca54fc9fdb585ed1eaec64fc2b94c77dffa0cc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:23:03:6e:d3:a9:fb:87:2b:17:5d:7f:bb:
0f:6d:31:8c:aa:8d:d4:51:0e:04:8e:d1:98:8a:5d:
a4:e5:ad:d2:1b:11:0a:0b:1e:41:92:97:1c:f8:9f:
b2:6f:d2:a3:8d:3e:c3:66:63:bf:41:28:48:56:81:
56:a9:20:4c:94:bb:a0:09:a4:e7:b3:e5:48:4c:f2:
80:96:82:a8:d7:e8:12:92:24:8a:f6:82:59:4f:c4:
89:6e:99:c3:bf:f8:dc:d1:dc:21:7d:73:88:94:c2:
92:41:84:28:48:6c:70:b3:ff:8f:e6:7d:1a:c9:b7:
3d:0e:08:f8:c1:2c:5d:bb:c3:7a:51:1f:36:08:dd:
ef:d4:4a:86:7e:ca:a6:e2:29:b3:bf:73:7b:0c:a4:
73:e4:5a:88:92:01:3f:f1:83:8f:b9:a9:36:1a:51:
f3:af:9b:ae:c5:9c:93:a4:20:0a:a3:74:f6:a3:74:
9c:06:13:3f:dd:cd:4c:f6:e0:22:e0:8a:f3:7b:34:
fd:e4:b6:7a:b2:aa:1a:c8:82:8b:0d:80:6e:56:69:
e2:89:48:29:bc:48:0c:d9:77:7a:f0:ad:e2:48:64:
93:d3:7c:e9:93:9c:6a:0b:d9:87:ce:da:63:a0:e2:
f1:e8:57:5b:dc:f4:30:d7:13:de:a9:f8:5b:67:c7:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:54:FC:9F:DB:58:5E:D1:EA:EC:64:FC:2B:94:C7:7D:FF:A0:CC:74
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:64:d8:2a:24:13:aa:ca:6c:ef:e6:d6:4d:37:96:ca:6f:5e:
1f:9f:73:04:39:a7:18:db:01:bf:f5:a1:02:a3:c8:c1:7f:8a:
f9:96:3c:0e:6a:0b:48:97:04:93:7f:9e:81:57:87:8e:9d:3b:
87:09:d7:a2:b2:e9:b5:46:d0:c9:b9:58:c1:07:e7:5a:09:f1:
11:b3:7f:0d:32:e2:9a:b8:e5:98:2e:9c:fb:c7:ac:65:d5:4f:
16:4b:ec:1c:b2:46:16:0f:df:f8:76:be:ca:0f:be:ac:56:2e:
06:64:b4:33:64:49:2d:6e:49:df:07:5a:db:ce:ba:c2:12:a0:
e7:9e:48:64:58:65:08:75:21:ff:aa:65:dd:61:56:8f:cc:60:
49:78:59:20:8d:1a:f1:00:bf:e2:db:4f:b8:4e:f5:c8:94:1e:
f7:cd:7a:41:fe:14:04:fd:2d:a8:f6:af:ba:c9:cb:2a:1f:a2:
fa:b8:7d:6f:06:5a:b1:aa:e5:c3:24:06:6c:44:4a:45:d1:81:
be:5e:58:e2:48:fa:8e:43:bc:9c:1f:db:ed:21:10:cf:c7:89:
db:50:ad:12:35:3e:e9:2d:19:65:1a:c8:29:14:55:e1:92:db:
04:7e:5b:92:3e:d9:f2:ef:5d:0a:88:03:c3:ff:ba:16:b0:a9:
d7:17:f3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:08:59 2025 by rpki-client