
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier: LJGqhNwGuFjzyfuZAVMskd56wFjeY4DRiT4hWdi8ldg=
Subject key identifier: 23:41:4C:8C:A9:79:87:4B:1F:AF:59:A0:BA:97:5C:95:4A:38:6C:64
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 01987DF7CD5059B7214E377E32C9E2EA0F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 06:00:48 +0000
Manifest this update: Wed 06 Aug 2025 06:00:48 +0000
Manifest next update: Thu 07 Aug 2025 06:00:48 +0000
Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: llr0VLHhhC8ThrFilpHdVd37ajBlxk37bicytG4nqew=)
2: EytKkp-cHU6YafCnB0z54OPcAnc.roa (hash: qXa8VJW5qO7AGM9oVgWuxQ8fPmA9SdZQmj6ClsTDzLA=)
3: SSk5EJ2eeCxHqtRI36s4YAa6XHE.roa (hash: Qy4Hae6uxNoX2t2wWLKuUW7INir6rrE0SB0/N7PGSAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:cd:50:59:b7:21:4e:37:7e:32:c9:e2:ea:0f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Aug 6 06:00:48 2025 GMT
Not After : Aug 7 06:00:48 2025 GMT
Subject: CN=23414c8ca979874b1faf59a0ba975c954a386c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:68:29:9c:50:26:f8:af:5f:08:50:55:3b:
3d:75:c6:af:83:c3:7c:68:4d:5a:ca:69:56:fc:e0:
50:44:ea:dc:09:47:23:8d:4a:eb:68:ea:78:82:65:
da:eb:53:c6:40:1a:23:3c:78:07:a6:c3:d9:f5:92:
eb:3d:78:f1:da:76:d7:5a:10:3c:b0:e2:fb:12:52:
9a:d5:13:e4:2e:42:02:0e:b9:57:45:5d:bc:cd:7a:
fc:f8:38:3f:a7:81:9f:18:09:c5:ef:0e:55:ab:30:
ef:59:ec:00:ce:71:df:88:c2:52:d2:dd:2f:4a:f0:
67:b0:36:1c:57:8a:75:24:c6:fa:10:30:56:78:81:
ba:32:88:c8:d5:2a:22:0d:fd:9e:eb:67:b0:bf:77:
89:1f:f7:2a:a6:b1:b0:d2:e5:bd:5c:ab:3d:6f:d7:
ed:c5:ec:06:ea:eb:f7:6c:50:15:73:ac:0b:22:02:
35:aa:4c:3a:f8:bf:d1:e2:75:fd:62:1e:c8:18:ad:
57:b9:d8:c1:e1:e8:4d:02:79:cb:49:cd:cf:7d:4f:
dd:55:02:1b:c8:d9:4a:a0:2c:c2:b5:ba:7f:74:13:
e0:a7:55:7f:ea:ef:91:33:7d:f9:36:db:89:97:50:
0b:10:67:34:d4:1a:f1:eb:30:a2:5a:23:a4:a2:12:
76:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:41:4C:8C:A9:79:87:4B:1F:AF:59:A0:BA:97:5C:95:4A:38:6C:64
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c7:d3:e9:7e:9b:3e:dd:0f:94:8f:9c:b8:50:ef:9b:d4:18:
37:79:b1:9e:9d:45:1b:a6:4c:8c:c0:f7:71:3c:df:df:a2:35:
14:46:ca:2a:8e:84:31:c0:bb:e8:8a:32:dc:4d:15:0b:1d:c8:
47:5e:3c:1c:ab:69:36:69:bc:96:6f:5b:5d:2e:f9:fc:8b:df:
0a:1e:30:36:6d:80:08:1d:76:b7:6e:d7:df:24:52:db:9d:6a:
4a:67:97:c4:e5:6b:ad:e6:47:7c:ba:66:ae:90:94:ea:7a:ed:
4e:60:55:a0:ff:95:7f:31:5e:87:f3:bb:2f:bd:65:03:6d:05:
a2:85:98:2c:a0:46:36:82:96:81:55:a7:c5:e6:57:6a:6f:3c:
f0:85:2c:02:59:2a:cb:34:37:a0:0b:e5:1e:44:fc:0f:cf:47:
95:4d:8b:04:7f:c2:98:43:1e:15:b7:8e:be:2c:1b:f2:45:51:
71:02:df:c0:7f:7a:9a:a5:69:75:eb:2a:89:9a:05:f6:3a:bb:
ff:c5:a3:50:6e:56:95:34:5c:be:3d:97:04:26:2b:79:44:48:
40:ee:4f:53:67:bf:92:b1:fe:ec:06:01:bb:70:a4:20:b0:11:
51:26:e5:fb:8b:e6:df:62:f4:58:5c:e2:29:1e:d4:7d:3f:3b:
f9:fa:16:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:02:46 2025 by rpki-client