
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
File: 7jcJhfg_QTMBEcNQzWseHurVJqo.mft (raw, json)
Hash identifier: Gpffi5Xj7dxyvbuRfpPsqol2dk65Q7ID36KRFZNzPf8=
Subject key identifier: 1E:CA:E4:35:27:12:76:A7:EE:A3:B4:7F:00:7D:AE:A7:1B:CF:14:ED
Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
Certificate issuer: /CN=ee370985f83f41330111c350cd6b1e1eead526aa
Certificate serial: 01987E9CF439E216573485B4B81B071D7213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
Manifest number: 1622
Signing time: Wed 06 Aug 2025 09:01:11 +0000
Manifest this update: Wed 06 Aug 2025 09:01:11 +0000
Manifest next update: Thu 07 Aug 2025 09:01:11 +0000
Files and hashes: 1: 7jcJhfg_QTMBEcNQzWseHurVJqo.crl (hash: mt9Wl6cjwvASCSiiNmoJHUpv1X2/3VbJUxZRwD8zvUA=)
2: YMiovkkM1pTRsj2s2pWWavdNH3M.roa (hash: d26rfkrfXfTKQZRjWJD5TAVJi3E84OTuQPo2eEaVnMI=)
3: cXrx1ROqbRYTJpBaY9JfsPVk3Ow.roa (hash: e0I94SNdLBs+vaXUAirpLtLE8FeKHQEH/NhmFQRxO+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:f4:39:e2:16:57:34:85:b4:b8:1b:07:1d:72:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa
Validity
Not Before: Aug 6 09:01:11 2025 GMT
Not After : Aug 7 09:01:11 2025 GMT
Subject: CN=1ecae435271276a7eea3b47f007daea71bcf14ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5d:b8:9a:6b:9f:3f:7b:eb:a4:13:ca:69:15:
a7:65:30:00:64:d5:14:4b:f0:fa:53:83:09:bb:c0:
2a:98:0a:10:3a:d1:77:1f:9a:df:31:cc:a6:cf:f3:
c2:fe:7e:5f:d0:a3:35:fd:90:3b:30:56:2c:a5:de:
b7:93:ea:58:b2:1d:f5:ee:b4:1f:6e:88:bf:4a:78:
01:06:d1:85:be:ff:84:ab:65:d7:ee:03:5d:20:f1:
f7:57:e7:6b:07:b7:ba:a0:d3:ce:cb:03:1b:4a:47:
b7:aa:f9:d2:d5:03:d1:52:cb:a7:77:cf:db:de:53:
ca:35:b8:ea:17:cb:42:41:c0:96:50:0b:d2:be:7e:
b1:fa:d1:6f:87:65:c2:f0:1b:af:4c:b7:6b:fc:82:
46:aa:31:13:e3:49:b7:c1:66:e2:5f:df:02:53:1e:
50:d0:5e:32:65:73:bd:02:74:f6:3b:b9:e1:85:d4:
f5:eb:61:7f:5d:e5:3b:48:49:93:3f:56:fb:cc:81:
3e:96:79:06:e3:2f:ae:ae:e0:cd:a8:7e:08:bb:cb:
2a:a5:b2:2d:05:ac:2d:99:07:08:a7:e4:cd:13:28:
27:d1:da:81:03:88:78:85:bd:13:5c:32:f6:23:6b:
7f:71:15:d9:57:c4:85:b5:9a:ff:62:d4:e6:9b:ea:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CA:E4:35:27:12:76:A7:EE:A3:B4:7F:00:7D:AE:A7:1B:CF:14:ED
X509v3 Authority Key Identifier:
keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:78:7b:45:a9:cc:a9:3c:53:ec:54:63:e0:5f:f9:63:09:e0:
1d:2c:5a:ef:66:f5:ef:e2:60:85:99:d2:84:a7:5c:e8:02:77:
ff:10:7f:b8:f0:fc:35:81:9b:b4:c6:c6:6f:ac:e5:bb:91:35:
e1:af:f1:4e:25:9e:f4:29:8e:05:39:09:b8:9c:0a:60:ed:2c:
46:ce:15:7d:64:24:33:0d:59:6d:44:d2:05:76:ab:8c:c9:50:
5e:f3:ce:c2:06:51:14:6e:47:a7:f5:a7:e9:1a:bf:ce:79:2e:
09:c1:d9:e5:49:47:67:f9:0e:23:21:49:0b:1a:83:bb:3d:b8:
4a:d9:51:99:5a:87:3a:39:c9:91:ce:95:4b:2f:5d:6d:65:cf:
e2:7d:e8:06:c1:d0:23:06:6b:ea:d1:48:7f:8c:c7:4c:8a:5e:
1b:83:ab:16:48:8e:06:18:b9:f2:f9:63:c1:86:28:dc:7b:44:
b5:3c:b0:5e:2c:ba:ea:ba:0b:95:32:f4:01:eb:44:ca:ee:86:
9b:5c:bf:59:97:72:55:25:99:0b:be:57:a5:65:8b:26:6b:a1:
2a:1f:6a:b2:a0:0a:35:ab:ca:e8:d7:23:70:4b:e7:1c:4d:70:
1b:16:6f:e0:80:2c:67:0e:a7:69:a6:b7:54:20:f0:a3:76:d3:
d9:54:26:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:13:02 2025 by rpki-client