Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier: 5iBeJgmr/cYERIW5sfx2NEDll8nFzmo/CuMLE6GHkmc=
Subject key identifier: E6:58:DB:E2:4B:93:05:73:E5:DA:B4:5F:DD:3E:59:4D:8D:BA:71:74
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial: 0198887B3B75988A2F61BFE053BB46F2D6A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number: 01FE
Signing time: Fri 08 Aug 2025 07:00:34 +0000
Manifest this update: Fri 08 Aug 2025 07:00:34 +0000
Manifest next update: Sat 09 Aug 2025 07:00:34 +0000
Files and hashes: 1: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: Sh835+yLmtZ4Bt4akMpQ2g/MsyJjD/NeNlpoGvLC/SI=)
2: qBI-2zh83yrxwps5B2wpeqKjzBE.roa (hash: +a40JJUntJvdA4SOSdLnTGJXNEt6hOF4b5LOIU68Stg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:7b:3b:75:98:8a:2f:61:bf:e0:53:bb:46:f2:d6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Validity
Not Before: Aug 8 07:00:34 2025 GMT
Not After : Aug 9 07:00:34 2025 GMT
Subject: CN=e658dbe24b930573e5dab45fdd3e594d8dba7174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:e9:6a:b3:7c:35:a9:39:c0:47:aa:1b:00:
af:18:f0:61:45:a7:f8:ad:93:00:41:f7:28:1d:20:
7a:51:0f:6a:6e:a0:2d:3d:07:3a:6f:6b:e5:27:b6:
ad:52:33:38:f0:46:50:f9:73:dd:f8:bc:1f:fd:cc:
70:45:83:4f:d8:cf:c4:3c:51:a4:53:17:88:1a:c3:
25:9a:47:bb:fc:12:ce:33:98:fa:a4:70:bd:98:9a:
7a:a6:d4:10:85:73:e3:ba:91:94:79:ea:2c:25:73:
b0:15:59:a1:1f:6f:07:89:42:a5:cf:64:95:dd:1c:
fe:84:21:ed:e9:85:09:77:0c:fe:01:97:61:f7:5a:
73:eb:f4:ef:99:50:ad:3e:96:65:42:cb:fc:ae:e4:
68:3d:cb:85:f4:70:44:9d:39:46:94:2d:c1:50:6e:
ca:12:7e:61:ea:86:b4:8e:69:5f:34:88:95:43:a9:
0a:88:13:dd:0d:25:2e:68:34:8c:09:7d:ea:2d:2a:
16:40:fc:56:34:cd:16:aa:9b:81:0f:6b:98:fb:f3:
70:9e:c0:d0:20:b0:8e:c3:c2:01:ea:9f:70:aa:58:
78:6e:a8:7d:4e:b3:12:9d:e3:97:11:57:81:ee:e3:
74:2c:f0:c9:f7:9b:2e:81:4e:5f:25:6b:95:ab:6f:
0b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:58:DB:E2:4B:93:05:73:E5:DA:B4:5F:DD:3E:59:4D:8D:BA:71:74
X509v3 Authority Key Identifier:
keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e6:c8:55:b2:47:40:04:10:22:b2:d8:af:92:c1:d7:1b:e2:
5d:21:09:93:9e:2d:a3:c7:c6:a9:98:89:13:52:99:17:79:fb:
b5:8c:55:b0:c3:56:f5:be:4c:24:c1:af:64:58:0f:9f:28:d9:
df:8f:5a:08:2d:17:2a:b1:76:d7:34:32:fb:1c:68:8d:c9:15:
e5:c2:16:ad:23:75:dc:be:11:14:2e:14:e1:83:3a:3f:8f:57:
38:a0:ac:70:e1:d1:00:b1:2c:31:48:c8:f0:fa:99:07:6c:3a:
7f:22:cf:8b:ce:a4:f2:d8:16:c3:ef:f0:db:d3:81:f4:1d:e4:
be:53:00:d3:f5:dc:49:19:79:c1:75:60:a6:ee:3a:69:c2:93:
6c:b2:54:e9:65:da:73:83:cb:92:24:19:c4:ac:4f:62:40:bc:
8e:b6:be:81:95:c2:29:12:24:66:d3:02:a8:f9:73:f1:12:f3:
45:0e:73:f8:94:0d:16:18:05:c1:95:e5:a1:3d:e5:b2:c7:65:
40:c8:a5:5b:a4:5c:4f:3a:9e:72:c6:4a:61:b5:40:d1:10:06:
0f:78:32:b3:8d:23:c2:8b:b2:c8:3e:b5:9d:03:12:b2:20:36:
66:58:27:66:09:39:2a:18:26:65:cf:52:6f:1a:96:78:b2:d7:
82:5a:7c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:06:32 2025 by rpki-client