
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
File: e7M4LBagpWFZkNS85jTcUWgvLqo.mft (raw, json)
Hash identifier: 8D0LpTbKpJ2ebpf7l/MF43ek/guIr3nVCvWGyII7jSE=
Subject key identifier: 2C:4F:79:09:1B:FE:9C:1D:98:78:17:A5:6E:13:F0:13:A0:C5:27:1E
Authority key identifier: 7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
Certificate issuer: /CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Certificate serial: 0198868D0295926CDC2397713526FB379757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
Manifest number: 0914
Signing time: Thu 07 Aug 2025 22:00:44 +0000
Manifest this update: Thu 07 Aug 2025 22:00:44 +0000
Manifest next update: Fri 08 Aug 2025 22:00:44 +0000
Files and hashes: 1: e7M4LBagpWFZkNS85jTcUWgvLqo.crl (hash: lKR0lsNEGqtnnlEvEncgHqj/5IMpId7bXS2vHlsaEaw=)
2: qGUXVQ_YIWaxyPrsBvv99Mi17Xk.roa (hash: ahyxLXkQdJnYzPf9suZu/LdsDie1JIPApAeOAOCQ4OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:8d:02:95:92:6c:dc:23:97:71:35:26:fb:37:97:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bb3382c16a0a5615990d4bce634dc51682f2eaa
Validity
Not Before: Aug 7 22:00:44 2025 GMT
Not After : Aug 8 22:00:44 2025 GMT
Subject: CN=2c4f79091bfe9c1d987817a56e13f013a0c5271e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:dc:9c:9a:bd:11:33:d8:d2:f0:aa:0d:c2:
ed:c0:ba:ed:85:90:0e:7f:7d:c7:4c:20:5f:95:1f:
52:05:0c:7a:18:59:6b:d6:ea:92:00:3b:bc:ad:93:
7c:d7:4c:94:d7:af:37:a6:4f:44:73:6e:67:20:bd:
22:cd:b7:d0:35:4b:7f:e2:5d:f5:d0:3e:fd:6d:10:
16:95:57:19:16:7b:a6:49:97:5e:7c:f5:4a:54:be:
0f:7e:63:9a:00:5b:ed:40:6e:78:a8:58:96:ec:e8:
8b:10:cb:66:c1:f3:90:7c:bc:29:95:d0:9d:2e:fe:
29:5b:4c:4c:ae:8a:31:e6:5c:86:28:f9:41:09:33:
d5:b2:7e:f1:17:aa:84:17:9e:ba:43:1b:2b:e2:65:
47:16:93:f6:61:74:c7:92:7d:8d:75:0e:49:37:1e:
88:90:de:20:6a:b8:63:18:7d:33:43:bd:1c:f6:2a:
1b:2b:93:d4:03:6f:50:23:c9:86:dd:35:11:4a:77:
a6:58:9f:49:43:69:7d:67:e6:78:01:04:cb:82:15:
75:71:67:ce:5b:35:28:ea:41:9d:43:84:bb:d9:1e:
bf:f7:a9:4f:f5:f8:55:53:b5:b8:2a:fe:03:77:bd:
8a:90:1c:33:7e:41:96:b2:d3:f5:ec:e9:02:c0:60:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4F:79:09:1B:FE:9C:1D:98:78:17:A5:6E:13:F0:13:A0:C5:27:1E
X509v3 Authority Key Identifier:
keyid:7B:B3:38:2C:16:A0:A5:61:59:90:D4:BC:E6:34:DC:51:68:2F:2E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7M4LBagpWFZkNS85jTcUWgvLqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/940a74-a2f2-4bd6-8e5a-9554a5ac36bb/1/e7M4LBagpWFZkNS85jTcUWgvLqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:42:c6:5e:e9:49:fa:4c:9a:4a:74:1e:7b:29:55:0b:a0:bd:
25:9a:50:d0:90:d8:2b:f5:9b:31:a2:76:f3:55:16:ce:b2:71:
dd:9c:1d:7c:74:cd:8b:55:a3:09:0f:13:46:7e:de:c6:9a:cd:
79:5b:11:f9:76:c7:c2:37:ad:23:6c:65:ba:9a:b2:a9:ed:5d:
f3:41:a2:a9:0f:a7:ae:8e:52:2f:42:4e:d8:f7:87:64:97:45:
78:d2:c0:dc:ab:7c:27:50:00:95:4f:f4:08:dc:43:9e:d7:86:
8e:84:10:1b:03:5a:b8:78:0a:32:fe:44:c0:b1:86:05:ae:dc:
68:17:7d:39:5b:f6:d4:27:01:bb:39:dd:31:a7:24:d3:71:70:
09:3a:e4:b1:dc:a8:2d:ad:6e:2a:e2:ae:5f:f6:db:0b:9f:68:
6e:4e:9e:15:37:38:72:8a:44:51:8c:86:80:e4:9f:09:69:95:
e5:df:69:b9:4b:6e:91:89:80:ac:4b:c7:e5:51:e8:a4:b4:35:
90:6d:82:b1:47:29:83:86:f9:a2:77:9a:29:ac:43:d5:2d:07:
53:26:f2:a1:37:9f:67:9e:f0:41:79:99:40:48:33:ac:f5:5f:
3f:b1:9c:80:51:f8:de:50:4a:1d:06:b0:46:e3:59:57:f6:2c:
c4:1f:ee:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:43:48 2025 by rpki-client