Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
File: 7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json)
Hash identifier: Zzmi2oYw9zYbqgnLekt4dchVivTRHtQJiRrHmKzXwhk=
Subject key identifier: D2:6A:B0:7E:64:6E:F6:F2:B9:F4:B5:FE:1E:4F:32:ED:16:FE:C7:45
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 019875D1B34B72F087F67FFF1F4894DD3842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 16:02:13 +0000
Manifest this update: Mon 04 Aug 2025 16:02:13 +0000
Manifest next update: Tue 05 Aug 2025 16:02:13 +0000
Files and hashes: 1: 0LHXRZXlT4Z5tzVCD5n3wMEK_5I.roa (hash: I8mxC60DkZg+/Z8S1/Ta7eOakDYR4IDLK8C2wNx5/L4=)
2: 6fX3AcGq-C5YFIqBi50as54EhPA.roa (hash: 1KbqHGJ44yLkRFe9MKFCx+SDk5i4hgNCAcTBDnuKRDc=)
3: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: pOpUv3aiUY99SLLuNRlqOOE0lkOcTjiqChxn83xZzTc=)
4: EGu7n5ptipM5eNOhCckU54k5DkQ.roa (hash: T5q/E4P5U9BLCmb7DxjfaSe8vQrSmm6xkzEcVmgP2NA=)
5: PJ3rrJoRRyeXmoPdL7qN8QsvEpA.roa (hash: GLnfA8SK+T7VmaJvhK7gTu86DZRC9gqxwVMFgNBn2ek=)
6: RxZdH8tJj14wo9lUz6xXNXqBRwA.roa (hash: 5ZzEhibv41QuiqdnfKIE7PgA9XlisOrBTAH+e4R62Ys=)
7: V20vcYbyilDSQD-Jtx8d2qJDtnY.roa (hash: 2USt4pmFmNQvxtA5b7+ZLT1hKFltQnZghx27ehbthpQ=)
8: nHLGbM1FaGgG8wvdxg9Y5XPBlQw.roa (hash: EnIVps1oa/43pm3iNHQ84rjsTR4sIc4UNGGhICjrp8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:b3:4b:72:f0:87:f6:7f:ff:1f:48:94:dd:38:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: Aug 4 16:02:13 2025 GMT
Not After : Aug 5 16:02:13 2025 GMT
Subject: CN=d26ab07e646ef6f2b9f4b5fe1e4f32ed16fec745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:85:3e:4b:89:c6:05:fa:7b:6a:48:98:b3:
b5:f3:61:5a:c8:8e:f9:f0:a6:06:c0:d0:c1:86:42:
cc:69:5f:a2:8b:21:1e:9d:09:87:a3:cb:eb:e3:83:
2b:20:3f:7c:33:2e:9a:c0:cb:d3:f5:a0:80:8c:9f:
a1:59:e9:58:aa:18:01:4d:c3:1c:84:ca:6e:b0:1d:
dc:45:14:cd:e5:de:32:f8:70:b0:b2:6c:ca:ea:58:
bc:3b:82:63:c7:6e:90:e9:5c:7c:92:7f:df:33:0b:
33:b6:89:f7:d5:48:33:da:f1:b3:e3:ce:79:12:78:
71:d3:24:c1:d2:07:80:0c:f0:1a:4e:e2:fd:e0:a5:
84:26:4c:41:af:20:55:51:55:07:b1:0a:d0:1f:ae:
4e:bf:a6:08:b2:ff:d4:e4:36:9b:b8:bd:5b:ab:c1:
80:ba:a9:a4:67:a7:c5:85:c0:d7:fa:93:79:cf:c8:
3c:e0:4a:3c:4b:69:15:5a:20:c4:04:18:81:b1:24:
f7:f8:4c:19:4b:18:0f:0b:1f:c2:45:81:73:2f:b9:
e3:44:0d:df:ac:80:62:1b:25:24:e6:4c:ee:d1:aa:
a4:96:4f:18:22:69:ab:fb:ba:ab:ae:fb:e8:24:0b:
ae:83:81:e2:44:ad:00:a7:5e:08:4c:a4:27:0a:17:
4b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:6A:B0:7E:64:6E:F6:F2:B9:F4:B5:FE:1E:4F:32:ED:16:FE:C7:45
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:28:47:91:e6:7a:00:43:a7:3a:e0:22:9c:6d:95:dd:4a:94:
e8:a9:9a:0f:06:24:a9:dc:fd:3e:28:a8:69:67:5d:0b:ea:6d:
42:9b:a2:cc:52:c7:46:ff:c1:40:85:ae:ce:24:fe:3c:28:dd:
77:a1:6f:3b:0c:47:5b:e7:c9:07:76:43:b4:98:43:71:6c:f8:
30:36:b2:da:c4:dd:18:cc:2f:fa:c7:f6:fa:7a:14:f8:61:80:
7b:f4:07:9a:a0:18:38:bf:44:00:43:ac:4f:f7:e2:13:1e:74:
aa:2c:94:ad:bb:f5:07:ba:a4:1d:a9:a9:d9:cf:81:92:c6:47:
c4:fd:c4:93:fe:bd:de:49:16:2b:5f:98:71:a0:bc:85:f7:b3:
88:0a:4f:13:7a:d9:f4:cc:7f:72:8d:69:20:fd:c3:79:0a:13:
d3:e0:2a:d1:bd:e8:29:71:78:46:66:51:06:31:f1:90:6f:38:
87:f9:e7:b3:d6:1b:f8:65:e9:c3:84:5c:f2:5a:e5:2d:ac:a3:
d0:89:7d:1a:3d:17:3e:ff:8f:14:69:0c:f5:f1:cc:d7:a3:0c:
8f:2d:f3:6c:c8:a9:4c:00:45:be:8f:59:9d:85:5d:86:fd:36:
94:56:8a:ea:03:55:7d:2f:2b:3b:5b:53:02:74:c2:2f:de:1e:
b1:c8:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:13:43 2025 by rpki-client