Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
File: eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft (raw, json)
Hash identifier: bT05bXLuzgPe2/85YIAofZCMRgb98GVkpaiVasvJQ98=
Subject key identifier: 43:71:38:A4:A2:EA:F1:FA:DE:32:83:75:35:DD:E8:DF:C1:11:56:B3
Authority key identifier: 79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F
Certificate issuer: /CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
Certificate serial: 01987DF82AD8687535B8966771A076577B80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
Manifest number: 1619
Signing time: Wed 06 Aug 2025 06:01:12 +0000
Manifest this update: Wed 06 Aug 2025 06:01:12 +0000
Manifest next update: Thu 07 Aug 2025 06:01:12 +0000
Files and hashes: 1: eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl (hash: m/d0Cx4j3qk01xudpq4y36G4ndAwNyTP6wXbPXBRQsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:2a:d8:68:75:35:b8:96:67:71:a0:76:57:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792efedfbb96dcaad1565d21bf4aa8567b0b649f
Validity
Not Before: Aug 6 06:01:12 2025 GMT
Not After : Aug 7 06:01:12 2025 GMT
Subject: CN=437138a4a2eaf1fade32837535dde8dfc11156b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:3e:bd:94:d4:3d:ee:f4:9a:c9:e9:b9:54:
00:5b:d8:3d:e5:1f:e3:d1:e6:1a:03:4a:12:4a:ab:
80:a9:16:37:a1:47:26:26:cc:8e:67:a0:6d:ed:77:
45:10:9c:69:6b:51:f0:35:88:15:fc:83:a8:1c:42:
23:79:36:cc:11:d4:2d:82:4f:e7:bf:f3:de:39:3c:
54:ca:7b:09:2f:23:e0:21:84:2e:08:a5:7c:d6:db:
c5:14:b4:cd:8b:f5:3e:6c:99:e2:77:72:e0:bb:4a:
e0:c6:6a:d9:84:5e:f6:bf:ab:ba:17:00:ad:f4:69:
c4:c9:59:f2:e0:23:0c:a6:b1:48:04:3c:90:4d:d6:
91:cb:ad:cd:ce:48:5b:b9:7e:44:f9:20:11:49:f0:
f7:76:24:28:d1:47:51:c0:bf:a8:a9:5e:d6:02:32:
f1:60:f0:15:6f:31:0b:dc:b7:5d:26:34:d4:c0:23:
d2:df:cd:bc:c8:e4:02:ee:cb:8d:d2:3d:f4:1c:fd:
98:f4:e5:dd:ac:80:5e:8d:e2:96:66:7b:2a:3f:20:
fe:07:0e:24:d1:0d:39:3d:70:d9:f9:4b:cf:8f:12:
81:c5:33:52:d2:d1:3c:2f:63:4f:f8:e9:ed:3b:9e:
c2:60:ae:77:f2:78:70:fc:50:e9:28:b2:30:c5:5e:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:71:38:A4:A2:EA:F1:FA:DE:32:83:75:35:DD:E8:DF:C1:11:56:B3
X509v3 Authority Key Identifier:
keyid:79:2E:FE:DF:BB:96:DC:AA:D1:56:5D:21:BF:4A:A8:56:7B:0B:64:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eS7-37uW3KrRVl0hv0qoVnsLZJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d8aca2-4a8f-41f1-bd9e-7eab0485d34d/1/eS7-37uW3KrRVl0hv0qoVnsLZJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3e:dc:41:31:91:ce:74:26:2f:9c:41:e5:1a:30:d9:b6:51:
a8:29:17:a5:f4:8b:62:d7:f3:6c:48:f1:15:ea:b8:e8:60:50:
2e:94:3f:06:ab:39:14:69:a9:8e:4e:a0:93:82:5c:2c:0d:b5:
aa:b7:ae:e1:20:a2:61:37:26:cc:3b:ed:ac:f5:51:f3:79:78:
a3:c1:36:5c:6f:cb:d9:4d:b3:00:a8:76:1c:22:7f:cc:a9:7b:
53:82:0a:f1:67:72:68:f2:a3:67:3d:a4:cb:08:85:22:aa:a1:
99:de:d1:9d:3e:88:a2:35:73:f3:be:5c:f0:47:29:01:37:bd:
3c:5e:7c:38:fd:39:19:85:5b:98:1f:27:85:33:4f:63:93:7a:
74:b8:c2:09:4d:20:8b:e0:b0:e9:40:31:31:e9:a3:03:fa:e6:
68:58:b5:e0:4c:78:d1:f3:ce:74:ff:7f:6e:56:70:d7:b9:16:
a9:d6:4f:63:a8:6e:f9:c6:34:2f:b0:e8:04:76:be:52:b4:bc:
09:23:dd:c8:d9:5d:8e:61:a2:d3:f9:83:f1:3b:8c:90:2c:c7:
f3:7b:e2:97:cf:a1:da:a2:df:8f:22:5d:53:c2:29:d7:6f:50:
59:6c:21:54:c1:11:b8:6e:99:9e:1d:e0:c3:90:a6:a8:17:f8:
87:8e:80:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:03:31 2025 by rpki-client