Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
File: 7Y3fghIIo3DjpbfvjNR5fPxXdII.mft (raw, json)
Hash identifier: 9zoCw8RULvpTzvH8/GUIg+XtTuOflfF0YS0n6btRg5w=
Subject key identifier: 4B:85:FA:9E:02:63:4E:31:B5:E0:73:F1:74:CD:F8:C8:80:BF:1B:E4
Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
Certificate issuer: /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Certificate serial: 01987B9C4CB9105D8E1E47E145AC2165E1F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
Manifest number: 0C9B
Signing time: Tue 05 Aug 2025 19:01:37 +0000
Manifest this update: Tue 05 Aug 2025 19:01:37 +0000
Manifest next update: Wed 06 Aug 2025 19:01:37 +0000
Files and hashes: 1: 7Y3fghIIo3DjpbfvjNR5fPxXdII.crl (hash: Q75z8hiZOTi1hZWnsgYXGagPc10gfSTzjGl9MPBGW+A=)
2: DurnQ3dAzPxoCUXWiroCcReHID8.roa (hash: k2ck5I6D1NKufGijk0qz5B1og8UdirayVzhgWYYPrYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9c:4c:b9:10:5d:8e:1e:47:e1:45:ac:21:65:e1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Validity
Not Before: Aug 5 19:01:37 2025 GMT
Not After : Aug 6 19:01:37 2025 GMT
Subject: CN=4b85fa9e02634e31b5e073f174cdf8c880bf1be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:67:b4:ae:92:2c:78:da:5b:2f:29:7e:bc:
91:1c:0c:2d:18:3e:84:38:6a:1d:73:d5:31:3c:e8:
99:1e:7e:5b:d8:cb:e5:c4:b4:a5:c3:7d:60:a2:c7:
a6:94:82:52:04:01:98:08:f5:83:32:75:a2:70:6d:
14:ef:65:ee:53:62:12:07:c6:df:e3:b0:32:9e:67:
71:ee:da:b0:50:f6:8e:a7:0c:18:d2:f6:0b:bd:47:
38:07:50:8c:a5:48:b5:ca:6a:9b:c4:b2:4f:48:8a:
20:84:69:59:a4:ac:8d:d3:5b:27:99:34:c4:c6:3a:
86:c3:c8:d7:0f:f3:66:cc:ec:a8:90:7b:6e:3e:8b:
5b:29:de:68:96:e1:b7:a2:64:ea:ce:61:8c:11:6e:
ab:ec:09:17:d6:48:0b:27:6d:45:3d:e4:cb:37:77:
a6:72:42:60:2d:45:ee:c0:d2:a6:22:87:25:cf:63:
2d:9e:06:00:be:2f:2a:a4:96:28:52:74:da:74:d6:
e7:c2:fe:d0:40:27:33:b6:40:4d:d1:a2:78:be:21:
f6:1e:85:05:1b:e1:cb:31:a4:51:3e:66:12:fe:33:
2a:db:2a:24:01:db:0f:ae:4e:a7:5a:ff:9e:5e:19:
e5:b2:7c:f1:67:c4:9a:98:e5:e0:49:e1:ac:3f:30:
f3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:85:FA:9E:02:63:4E:31:B5:E0:73:F1:74:CD:F8:C8:80:BF:1B:E4
X509v3 Authority Key Identifier:
keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7d:70:a1:e3:e5:be:ff:ea:f0:78:00:4a:e9:b0:1a:db:39:
72:4c:df:14:ed:52:be:85:06:84:0c:6b:ad:99:6d:47:5e:da:
5b:73:c5:40:57:57:2b:bc:5b:0f:ad:db:e8:8a:cd:14:c0:dc:
e7:c9:da:66:65:7d:cc:4c:bd:61:6f:66:ac:06:04:ed:72:d5:
17:a4:de:95:f5:18:e4:71:81:e9:d7:dc:34:79:da:51:d5:a2:
68:6a:73:e9:13:cb:97:3f:c4:9d:97:3b:c0:51:a4:ef:41:ab:
0c:59:82:a7:2e:c9:04:67:74:a9:3d:cb:12:fe:2b:b8:e6:31:
e1:1d:ab:14:42:a7:1f:e8:7d:58:75:dc:82:08:a6:c3:84:9c:
42:69:e7:5b:3a:21:9a:52:9d:7a:12:5c:a7:dc:90:99:95:86:
56:3e:e8:d0:44:33:8e:be:08:9e:f5:25:c7:3b:59:7e:ac:57:
a9:b7:b6:77:06:7e:b0:c1:4c:81:e4:3f:95:9a:13:d5:f2:6e:
e2:c0:9a:1f:65:cc:2e:e4:b2:b7:6a:eb:56:3a:8e:b0:27:90:
d2:3c:c8:19:d5:85:2c:5d:c3:fe:d0:1f:b8:67:79:12:99:54:
6c:45:5c:22:9c:a5:ae:9e:73:47:99:d0:92:f9:68:e9:63:e0:
f1:0f:73:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:17:41 2025 by rpki-client