Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
File: p7He9pWIXq3lzMi0vioCuxYHnpw.mft (raw, json)
Hash identifier: TWfaH2/c1rAOtEjESuUDozqzgSTgPBDnq6hXE0TR2yI=
Subject key identifier: 21:6E:62:F9:2E:D6:C4:47:83:D7:2C:4A:54:C8:25:0E:EE:E3:52:DC
Authority key identifier: A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
Certificate issuer: /CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Certificate serial: 019884310517C0B59BD5A0B11B52F88F7384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
Manifest number: 0870
Signing time: Thu 07 Aug 2025 11:01:01 +0000
Manifest this update: Thu 07 Aug 2025 11:01:01 +0000
Manifest next update: Fri 08 Aug 2025 11:01:01 +0000
Files and hashes: 1: 2ZXONPsq8Wq-C73Y4ZOdG8CP47o.roa (hash: 23qtSB8U1yvtJIhVOx0ex1wgA9IS3rvYP3HTfvaa5cc=)
2: p7He9pWIXq3lzMi0vioCuxYHnpw.crl (hash: TsuqsGYMaVUJ6q/QaenHZDSaV/ZCwGJEefDb/BxMg9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:05:17:c0:b5:9b:d5:a0:b1:1b:52:f8:8f:73:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b1def695885eade5ccc8b4be2a02bb16079e9c
Validity
Not Before: Aug 7 11:01:01 2025 GMT
Not After : Aug 8 11:01:01 2025 GMT
Subject: CN=216e62f92ed6c44783d72c4a54c8250eeee352dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:f5:a4:e2:6b:b1:89:76:e4:f1:1e:38:65:
92:ae:6f:c1:58:b6:8d:b5:41:d3:1d:65:60:be:97:
06:78:91:04:09:32:00:44:ed:42:53:76:42:36:3d:
bf:87:61:6c:18:55:32:60:44:36:9e:08:23:8a:54:
17:3c:ae:aa:eb:c0:d4:bb:8d:2c:fa:93:47:e3:14:
ff:74:77:80:ca:44:4e:cd:b4:09:12:62:f2:6e:2a:
23:bd:e6:cc:d7:3b:73:29:ee:b1:80:d9:82:3e:da:
00:02:7f:11:8d:7f:ed:77:25:c5:bf:e3:21:ad:4a:
0e:e2:8d:94:12:43:47:76:7a:8b:59:b6:bf:9f:df:
8e:f7:9f:af:ca:b8:25:aa:f9:10:95:32:e6:ff:b2:
16:e8:9c:39:88:6a:04:ea:4b:54:a0:fe:9c:86:be:
c7:33:10:6b:a1:c2:c0:22:3e:25:06:7e:3c:f3:18:
68:5e:de:47:5e:dd:cd:2d:ef:94:86:9d:dd:b4:af:
35:5d:94:6c:07:83:b5:e2:e7:88:82:86:fc:3f:63:
81:8d:e1:8c:fe:e3:d9:20:8e:37:5e:ea:64:0d:f9:
60:90:69:74:35:1d:90:55:ba:2b:90:1d:22:8d:80:
f2:8d:8d:8c:cf:0a:41:67:6c:16:41:52:9e:9d:04:
28:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6E:62:F9:2E:D6:C4:47:83:D7:2C:4A:54:C8:25:0E:EE:E3:52:DC
X509v3 Authority Key Identifier:
keyid:A7:B1:DE:F6:95:88:5E:AD:E5:CC:C8:B4:BE:2A:02:BB:16:07:9E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7He9pWIXq3lzMi0vioCuxYHnpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/688cae-5f96-4875-8701-944ecec7a423/1/p7He9pWIXq3lzMi0vioCuxYHnpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d2:67:d3:23:46:d0:8a:eb:77:c4:88:73:78:64:b6:87:45:
d1:92:e9:72:95:ca:9a:7a:b6:97:de:d4:10:46:1a:21:b4:bc:
4f:48:ba:ba:b1:16:a9:b0:c4:97:2a:5a:eb:28:45:67:52:b8:
00:74:bc:20:a0:32:f5:1c:8c:58:8a:80:75:f5:19:95:53:ed:
37:c7:2b:c9:cc:33:ff:58:bb:20:d0:7d:2b:7c:0e:14:6b:e1:
b0:be:a7:22:21:4e:a1:d3:e5:d3:17:66:6c:9e:c5:66:8c:17:
6b:de:c1:59:b6:0f:e6:97:de:03:d7:0c:61:9c:88:fc:df:9c:
77:fe:d3:15:61:35:43:e7:80:19:17:29:86:85:7f:64:2f:86:
67:4b:e5:fe:3d:00:ff:40:ae:d0:ba:20:e8:de:4c:b4:58:4b:
ed:0f:5d:22:03:9e:f4:d4:e9:bf:b1:9a:50:c3:05:77:01:53:
8c:b8:b4:55:8e:a9:cc:d9:65:09:74:07:de:19:57:cb:8a:6d:
eb:b2:83:0f:dc:f3:df:a1:40:a0:d4:31:b0:92:1c:35:68:f5:
81:ec:c8:60:4b:ca:6c:24:3b:1b:22:cc:85:a6:df:5e:6f:74:
db:21:4f:b0:37:08:cc:56:f1:51:2b:2b:18:21:72:2c:b6:88:
7d:c1:90:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:15:49 2025 by rpki-client