Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
File: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft (raw, json)
Hash identifier: X3GNwSfVclSmPfTOj94LLQnYFgsx5yMNLoaETkckBMw=
Subject key identifier: D9:D2:AF:99:8B:D0:B0:2C:64:67:CC:44:34:C2:84:3F:4E:34:67:35
Authority key identifier: EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
Certificate issuer: /CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Certificate serial: 01987E65F5EB28B357E026EC8BC2F3055344
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 08:01:07 +0000
Manifest this update: Wed 06 Aug 2025 08:01:07 +0000
Manifest next update: Thu 07 Aug 2025 08:01:07 +0000
Files and hashes: 1: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl (hash: okQr6r0j78gGV9JIkBafgoFz/BCppTu/RL1zOHggY9Q=)
2: wIp_Owgcqosf4Zfkdoq2QLvnJUw.roa (hash: 1qal0bkeh/nfDvlv2LnznS6FzwmXQAEY+XJKvfyD2Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:f5:eb:28:b3:57:e0:26:ec:8b:c2:f3:05:53:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Validity
Not Before: Aug 6 08:01:07 2025 GMT
Not After : Aug 7 08:01:07 2025 GMT
Subject: CN=d9d2af998bd0b02c6467cc4434c2843f4e346735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:4c:81:0a:e7:6b:22:34:ea:af:2d:15:72:
77:1d:d9:4f:42:3a:a2:84:10:d2:e4:86:91:c4:34:
9e:3f:89:c4:cb:75:e2:2e:cd:84:37:ac:92:92:de:
1f:61:16:f3:77:b0:5b:22:85:09:e6:5c:31:50:7e:
e2:7c:3d:da:76:18:e6:66:f3:80:ad:36:e7:3a:25:
9e:2a:5e:d2:63:47:fe:c3:77:bd:6f:55:43:0d:1f:
c8:37:1c:a0:c3:92:ff:5d:1b:09:78:fd:d9:f6:7b:
44:ad:eb:54:1c:7b:b4:d3:29:b1:4c:7b:a9:f5:ea:
12:ab:fc:45:e8:af:ca:9b:64:52:5b:f0:6e:ad:ee:
f7:39:fa:9c:4a:34:31:14:33:f1:63:0e:8f:18:e3:
38:6e:b2:11:c8:ed:5e:61:ed:b0:78:7b:09:58:6a:
c1:7c:0c:16:d4:a7:81:7d:d8:f8:a4:58:b5:f8:a9:
c4:36:7c:10:4e:48:af:b6:1a:4d:3c:4a:b4:56:79:
f3:a5:8b:a6:0e:e0:ea:51:17:cb:80:39:5f:b5:f0:
e8:9e:c8:02:2a:4e:50:5a:ff:ed:b6:5c:52:79:29:
75:9e:aa:a0:9b:b2:fa:ed:b6:43:e9:b1:e6:68:f1:
67:37:3b:0a:60:ef:37:27:77:07:7e:6e:9c:a6:2b:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D2:AF:99:8B:D0:B0:2C:64:67:CC:44:34:C2:84:3F:4E:34:67:35
X509v3 Authority Key Identifier:
keyid:EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:81:6f:9f:e2:47:1b:b3:e9:4b:3b:27:03:7a:01:96:93:73:
6b:cf:e7:c2:b6:bc:ee:58:5b:a6:68:29:ae:a0:7c:14:da:7b:
5b:2b:a9:50:60:4a:46:70:36:21:f6:68:51:cb:81:2a:aa:61:
ff:34:56:8e:3d:15:ec:7c:1f:ab:b6:45:4c:bf:d3:04:63:50:
dc:44:df:c1:a3:2f:3c:66:6f:df:68:3f:ac:83:40:b0:fa:41:
07:f6:78:7a:ce:0e:94:6e:d5:11:9e:94:72:d0:78:49:e5:30:
9f:db:59:1b:ea:d8:50:72:bc:41:13:3d:66:b8:4f:70:56:ce:
2c:5e:4d:77:3b:33:72:2e:9c:11:fd:bc:11:09:fd:a2:ca:c8:
41:82:b2:18:cb:09:ec:4d:28:1f:f6:f5:a2:22:26:0d:aa:8d:
9a:e7:d3:36:20:fc:ff:95:48:b2:64:63:de:b8:bd:75:2b:47:
86:58:3b:ed:f7:e4:40:e8:a8:b0:d3:0c:f5:d6:55:ff:6a:18:
42:fc:2c:aa:b0:91:a3:10:0b:8b:8e:4f:f7:9a:8f:cd:bf:5c:
ba:a7:f5:60:77:8d:0d:2f:c1:a9:ab:46:ff:41:8e:2d:a5:b4:
a7:46:5d:ad:40:da:d8:a4:88:b5:5c:f7:17:8c:7a:2b:7e:0f:
c8:f6:85:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:08:33 2025 by rpki-client