Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier: O8+l1+JewDyslMzG5uGaGDeYhcU9WZsW+6L99q/Lagk=
Subject key identifier: E7:19:3D:C1:84:D9:A9:D1:2B:5B:BA:1A:3D:B2:25:E1:9D:AD:FB:B4
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer: /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial: 01989F3ADF5C512203EDF175A9FB1894999B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number: 162B
Signing time: Tue 12 Aug 2025 17:01:32 +0000
Manifest this update: Tue 12 Aug 2025 17:01:32 +0000
Manifest next update: Wed 13 Aug 2025 17:01:32 +0000
Files and hashes: 1: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: zQjakHand5f0W2MuyEVZUJxEJuq4vc8Q/3ZLMQdxWA0=)
2: Uol637i_aGyEjqsV-G-zBBGF_fM.roa (hash: GHwCfKteNhzkVgd1pFW2ZoKvEFt5K3t+m0uHz8s/0GA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 17:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:df:5c:51:22:03:ed:f1:75:a9:fb:18:94:99:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Validity
Not Before: Aug 12 17:01:32 2025 GMT
Not After : Aug 13 17:01:32 2025 GMT
Subject: CN=e7193dc184d9a9d12b5bba1a3db225e19dadfbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:54:a4:14:3d:0d:fb:d6:28:e2:02:95:55:
95:8e:de:4a:c8:46:83:2d:02:d1:e7:9b:4c:54:29:
15:c9:36:2e:27:4f:fc:5c:7c:81:81:4b:22:e8:b8:
40:1e:c1:3d:21:78:a6:4d:01:a9:6b:3d:d3:d6:43:
30:d5:bd:dc:ff:ca:97:ec:71:27:30:1f:ba:bd:84:
b8:27:c3:9c:7b:d0:73:dc:6a:3d:65:f5:36:67:ff:
1e:44:b9:16:08:b1:42:a4:6a:9d:bd:43:fc:46:38:
fb:ff:34:5f:84:a9:a6:13:b0:d3:5f:d6:f8:5f:60:
38:a7:39:a9:34:ac:e7:c9:61:d2:5d:a2:66:30:f5:
c6:01:d8:71:0c:15:9a:ac:67:eb:b7:b2:1f:33:8c:
52:1c:7b:95:97:86:e7:a7:00:82:6b:85:f1:f8:93:
88:05:e8:89:6b:c4:fc:86:43:dc:4b:c0:c3:7e:9a:
60:c9:4b:e1:62:07:fe:87:a6:e5:06:53:32:22:28:
45:a7:4d:30:38:c9:91:1c:47:2d:0f:35:20:ab:a1:
b4:00:8f:ea:8d:4b:f6:d3:1d:ac:a8:af:27:89:2e:
3c:f4:0d:81:e6:93:cc:7c:0a:db:f3:15:de:80:00:
bc:f7:ac:78:5b:c0:88:e6:61:18:10:09:f3:a2:28:
db:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:19:3D:C1:84:D9:A9:D1:2B:5B:BA:1A:3D:B2:25:E1:9D:AD:FB:B4
X509v3 Authority Key Identifier:
keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:a4:90:da:b8:a0:9a:36:8d:b0:a5:7e:54:9f:2b:be:88:97:
77:98:29:69:d5:aa:ae:33:74:40:f6:e8:8f:b6:88:11:8e:5d:
cd:9d:49:3f:53:81:a4:fc:7b:52:5a:79:ac:0c:2e:4d:87:f4:
32:db:c4:fa:76:c0:ad:f0:69:e6:e3:4c:6e:a6:5e:fe:68:ef:
0a:3d:91:64:fe:91:ff:4e:2b:86:ed:55:d1:e2:58:c8:b5:4f:
de:48:60:33:7b:2c:1a:69:64:00:dd:75:8d:ba:9f:11:87:bc:
42:6c:fc:ea:76:0f:e9:11:fc:25:36:ce:da:07:3d:71:41:ee:
2a:d6:e6:a0:d9:6c:6d:ec:2d:f3:e5:04:03:0f:35:b9:2f:92:
ec:e9:7c:47:ce:20:69:eb:c2:62:d5:c4:1c:ee:72:7c:78:aa:
c9:75:84:3f:e9:9d:5c:56:6f:5b:98:bc:ac:8d:ce:4d:a6:60:
35:61:64:2a:b6:ec:e5:21:a1:63:1d:9c:e4:bd:f0:4d:4a:d9:
01:fb:77:dd:d6:e8:ff:44:89:13:5b:ff:79:c1:af:cb:6d:f0:
16:60:6f:80:10:4f:f3:43:17:20:ed:2b:6a:dc:50:2a:9f:db:
42:78:e3:73:4d:60:c0:98:78:65:60:99:25:dd:8a:f7:c7:99:
01:0f:4f:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifOt9cUSID7fF1qfsYlJmbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjN2Y0YTMzODdkYjgzOGNkYTgzN2FiOTJhNmNlOGY2ZmZj
M2M5OTAwHhcNMjUwODEyMTcwMTMyWhcNMjUwODEzMTcwMTMyWjAzMTEwLwYDVQQD
EyhlNzE5M2RjMTg0ZDlhOWQxMmI1YmJhMWEzZGIyMjVlMTlkYWRmYmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVVUpBQ9DfvWKOIClVWVjt5KyEaD
LQLR55tMVCkVyTYuJ0/8XHyBgUsi6LhAHsE9IXimTQGpaz3T1kMw1b3c/8qX7HEn
MB+6vYS4J8Oce9Bz3Go9ZfU2Z/8eRLkWCLFCpGqdvUP8Rjj7/zRfhKmmE7DTX9b4
X2A4pzmpNKznyWHSXaJmMPXGAdhxDBWarGfrt7IfM4xSHHuVl4bnpwCCa4Xx+JOI
BeiJa8T8hkPcS8DDfppgyUvhYgf+h6blBlMyIihFp00wOMmRHEctDzUgq6G0AI/q
jUv20x2sqK8niS489A2B5pPMfArb8xXegAC896x4W8CI5mEYEAnzoijbbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcZPcGE2anRK1u6Gj2yJeGdrfu0MB8GA1UdIwQY
MBaAFOx/SjOH24OM2oN6uSps6Pb/w8mQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUt
OGE4NjVmZDYyMWM4LzEvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8yMmY3MjktOTdhOC00MDhiLWIzZTUtOGE4NjVmZDYyMWM4
LzEvN0g5S000ZmJnNHphZzNxNUttem85dl9EeVpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5KSQ2rig
mjaNsKV+VJ8rvoiXd5gpadWqrjN0QPboj7aIEY5dzZ1JP1OBpPx7Ulp5rAwuTYf0
MtvE+nbArfBp5uNMbqZe/mjvCj2RZP6R/04rhu1V0eJYyLVP3khgM3ssGmlkAN11
jbqfEYe8Qmz86nYP6RH8JTbO2gc9cUHuKtbmoNlsbewt8+UEAw81uS+S7Ol8R84g
aevCYtXEHO5yfHiqyXWEP+mdXFZvW5i8rI3OTaZgNWFkKrbs5SGhYx2c5L3wTUrZ
Aft33dbo/0SJE1v/ecGvy23wFmBvgBBP80MXIO0ratxQKp/bQnjjc01gwJh4ZWCZ
Jd2K98eZAQ9Paw==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:31 2025 by rpki-client