Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.mft (raw, json)
Hash identifier: UxuQpPsrf3jZVKC2UwIfdH2TWZXhsb1n6tzsfK8yaKM=
Subject key identifier: 98:06:15:66:69:38:62:11:BE:0F:39:35:73:BD:52:B4:3E:FC:46:23
Authority key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Certificate issuer: /CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Certificate serial: 019873746AFA5539396B9EEBA7F82682048C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
Manifest number: 0A0F
Signing time: Mon 04 Aug 2025 05:01:05 +0000
Manifest this update: Mon 04 Aug 2025 05:01:05 +0000
Manifest next update: Tue 05 Aug 2025 05:01:05 +0000
Files and hashes: 1: 7FOM3K-fkkZJfceuRYRTef5qcXQ.crl (hash: 8y5g6wFzeOK2Zursb6ZPz1mSJYWR3BCUOx4nHh+uBS4=)
2: BDuB9Tdy1bkdHiiKbCLGOLXhLgM.roa (hash: /BEhxsli53ZdIFQcNasA4TXy3qdR7JtPphvJxMDLbVM=)
3: o9u62C62uEKyliiaqilmlCLeC54.roa (hash: IbrVnLHNGZTQPhCJ7F+rZGHYI9Autu0dmXqnxbbk8VA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:6a:fa:55:39:39:6b:9e:eb:a7:f8:26:82:04:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Validity
Not Before: Aug 4 05:01:05 2025 GMT
Not After : Aug 5 05:01:05 2025 GMT
Subject: CN=9806156669386211be0f393573bd52b43efc4623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:65:a6:86:10:52:07:b8:a2:80:c7:7a:a5:26:
14:2f:72:e2:89:80:77:b8:02:84:5f:89:df:c0:fa:
c4:48:8a:a1:af:12:39:35:90:21:71:fd:51:ce:4a:
4d:1c:75:51:b3:db:f3:13:f5:9a:2c:ab:1e:dc:5b:
e0:f1:b3:8a:16:4c:cc:68:f1:5f:51:16:b7:1b:20:
80:9d:d1:7c:28:a7:f8:de:1e:4d:de:9d:25:17:7a:
7e:8b:4c:b9:f7:44:0f:ce:58:25:0b:a7:08:af:76:
e8:bc:8d:ba:3c:5b:0f:1d:e8:d9:36:27:15:ae:fc:
ad:5d:cf:b7:e5:0e:4e:80:11:28:27:fc:2a:9b:51:
fb:96:89:c5:b0:98:67:e3:41:3a:24:84:c1:4c:11:
55:96:82:58:21:c5:ff:d0:42:d0:30:6a:6f:81:1c:
b1:08:e7:09:26:68:9a:af:ac:07:cb:24:f7:c5:cc:
fe:0a:b5:a7:14:54:a1:6c:d9:1d:d8:62:aa:0d:cd:
65:7c:49:40:8c:b5:0a:a5:02:17:cb:16:3e:7b:a4:
a0:95:27:36:65:ca:cb:0d:d5:55:f6:6d:01:2f:95:
25:88:29:f9:4e:1e:18:e3:16:a6:27:e7:9c:ef:e1:
83:14:70:eb:4e:7a:df:9a:a2:f6:45:b4:53:70:d7:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:06:15:66:69:38:62:11:BE:0F:39:35:73:BD:52:B4:3E:FC:46:23
X509v3 Authority Key Identifier:
keyid:EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:09:bf:24:35:b1:54:0d:c4:d9:25:ea:4b:d4:f4:80:1f:f6:
78:fe:27:51:84:e5:87:aa:23:d8:9b:27:82:cb:b3:20:9f:d8:
d2:0a:cf:68:b6:2d:50:c6:4a:42:d2:15:f8:b8:98:8c:86:be:
7c:34:96:f9:85:e9:c4:4b:db:c7:dd:5b:53:8d:44:a1:af:b7:
f9:83:0a:99:46:50:5f:59:48:33:43:13:0d:6c:88:75:63:b5:
87:05:bd:de:a5:da:e1:85:08:1d:f9:83:03:2f:9a:a1:96:5c:
a8:95:84:dc:b3:db:a1:1d:36:e2:24:32:6c:c8:71:07:70:71:
1e:b5:8d:45:49:74:ba:94:7f:44:09:90:c9:ec:43:3e:38:60:
db:ef:d1:4b:11:80:02:07:17:7f:58:8c:1f:ce:13:ca:05:87:
7d:71:e3:c3:b6:61:50:bc:dd:c8:e4:c7:f9:fc:16:f4:82:74:
98:b1:93:48:4c:95:e5:3b:b3:4b:a7:f1:7e:75:52:79:fa:38:
a4:4d:44:d5:35:ad:e7:10:4b:48:cb:4e:ba:d6:64:18:b1:d6:
7d:9c:aa:35:91:43:da:b2:5c:18:f9:45:68:4f:c6:8e:b1:9c:
5e:87:1a:f4:38:f8:3c:6d:27:1c:17:ae:0c:79:9e:6d:0d:c3:
de:17:6d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:56 2025 by rpki-client