Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
File: 7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json)
Hash identifier: 6sz6tJp1cjDm//Bwg9K4QUFg6GnWW0kzzGauveJwyGk=
Subject key identifier: 23:BF:14:D4:92:BC:74:1F:EC:42:30:EB:52:04:96:F1:D4:42:A6:E0
Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
Certificate issuer: /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Certificate serial: 0198A04EDF1D77AA6880EDBB3C64F2CFFA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
Manifest number: 162C
Signing time: Tue 12 Aug 2025 22:03:00 +0000
Manifest this update: Tue 12 Aug 2025 22:03:00 +0000
Manifest next update: Wed 13 Aug 2025 22:03:00 +0000
Files and hashes: 1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: joKTF0T4sCok7h8mH9X01e2Q+42of7uR4+evEq1UKME=)
2: xE_JDYJwb1MCr7C57Rm2iLhdKIw.roa (hash: sRhgH4Cj24QxldRTdKVZiNUSEzN+8JXEsh8ETe2KACg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:df:1d:77:aa:68:80:ed:bb:3c:64:f2:cf:fa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Validity
Not Before: Aug 12 22:03:00 2025 GMT
Not After : Aug 13 22:03:00 2025 GMT
Subject: CN=23bf14d492bc741fec4230eb520496f1d442a6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2d:b7:57:2b:fd:8a:2f:56:c1:12:da:f4:3b:
9b:84:24:52:25:63:9d:7b:24:ff:13:a7:33:3c:9e:
09:a3:56:e4:bc:a8:46:4d:e7:b6:0a:40:e2:aa:61:
e6:42:1e:13:9b:f6:80:3d:b8:a1:35:1f:64:b2:61:
ac:b3:80:cf:ef:8b:b8:79:2d:7f:13:35:77:49:a4:
7d:53:69:ba:68:4a:d7:6c:21:11:57:e8:91:8b:cf:
d7:00:f0:81:74:61:ec:1f:f3:aa:73:87:7a:08:a7:
3a:22:e1:78:e9:86:3c:44:d5:30:14:0b:c0:7a:22:
e7:27:fc:78:e8:1a:eb:94:cd:03:23:15:22:56:1e:
f2:12:08:13:c4:0f:de:42:5c:94:88:f1:7d:db:73:
dd:d5:a0:dc:77:fe:ab:1b:1b:11:ee:58:15:e4:71:
ec:27:34:ea:7e:95:27:a4:44:b3:98:28:8a:e2:9c:
0e:dd:7f:47:f2:34:92:ee:61:f5:f4:65:e9:64:4c:
4e:b1:97:9a:f2:b4:56:64:e6:27:3b:50:9e:8a:79:
a9:90:6c:0b:f2:0e:a2:bb:20:5a:8a:aa:95:df:07:
50:26:69:97:b2:ef:f1:db:1f:bd:3e:67:57:b8:91:
bc:60:eb:62:cb:e1:c8:45:33:3b:96:68:c0:3e:44:
df:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:BF:14:D4:92:BC:74:1F:EC:42:30:EB:52:04:96:F1:D4:42:A6:E0
X509v3 Authority Key Identifier:
keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:4a:40:a5:72:87:70:08:1d:bf:1a:ac:73:78:c8:c9:43:46:
c3:5a:97:34:56:43:6e:3e:b4:6e:a6:64:02:c7:09:d1:86:47:
b3:b5:bb:6f:44:5f:27:72:c1:e3:01:bf:e2:69:76:86:5a:b5:
08:5e:05:1f:9c:49:4e:11:13:b4:33:4c:ad:9f:24:ab:95:3a:
2c:45:b3:44:ba:1e:ab:d6:56:47:78:4a:c0:49:4d:8b:7d:46:
eb:5a:19:60:6b:42:f6:37:13:5e:99:55:8f:18:65:4c:6f:f8:
55:d8:e6:af:46:d5:67:82:d7:c9:4c:a1:a6:12:f1:0e:32:6c:
9c:8d:ae:f6:8a:f4:79:30:01:63:bc:1a:15:fe:0f:2f:ba:74:
93:00:63:8f:69:a9:b3:14:ac:8e:51:d7:87:6e:38:5f:24:c5:
33:9f:8e:69:95:fd:61:55:5f:ed:58:f7:28:24:41:fe:c3:d2:
d0:82:ce:48:f4:88:1f:69:bd:39:e7:be:b0:02:6d:aa:a9:31:
f3:20:05:36:67:78:62:40:b6:cf:f8:93:e0:7a:20:28:5f:e5:
d0:d9:c7:69:8e:aa:d1:9d:2d:ee:a7:cd:58:5e:35:d7:24:d4:
49:6a:96:f8:00:9b:b4:dd:fa:b5:cb:d3:af:ef:ed:1f:4f:4e:
3d:73:fe:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:24:23 2025 by rpki-client