Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
File: 7-oXe8wrDvZMq2BObmQnsa3gv2k.mft (raw, json)
Hash identifier: LMxO7wvhrGPJdVyvWrnpv/JlGP3stWTaFAD78mzbVxQ=
Subject key identifier: 07:4D:29:C2:45:BD:24:A0:74:4F:13:32:DC:21:C9:00:87:BB:5B:A3
Authority key identifier: EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
Certificate issuer: /CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Certificate serial: 019872CF68CC5692C9794098F40AE7B14F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
Manifest number: 0E7C
Signing time: Mon 04 Aug 2025 02:00:52 +0000
Manifest this update: Mon 04 Aug 2025 02:00:52 +0000
Manifest next update: Tue 05 Aug 2025 02:00:52 +0000
Files and hashes: 1: 7-oXe8wrDvZMq2BObmQnsa3gv2k.crl (hash: SB4I8s5nCaWVZcYre/ILU7/bmriIjz/1jKOED23/Oks=)
2: BfBzjofHcSu4a3jygqfPxr7xm38.roa (hash: WZsJkNeqT7b0+zK6F4CNPynL3I93rxtNrXgK5qWCEEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:68:cc:56:92:c9:79:40:98:f4:0a:e7:b1:4f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efea177bcc2b0ef64cab604e6e6427b1ade0bf69
Validity
Not Before: Aug 4 02:00:52 2025 GMT
Not After : Aug 5 02:00:52 2025 GMT
Subject: CN=074d29c245bd24a0744f1332dc21c90087bb5ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:b3:20:fe:f3:4f:da:35:92:5b:48:aa:8b:
9d:41:f3:c3:c4:11:42:ce:a7:91:94:a5:10:c0:bb:
0a:61:c3:08:23:c7:97:6b:e7:8e:43:2c:6e:8f:12:
c8:3d:ff:55:26:57:fc:9a:91:d2:fe:98:7b:e2:35:
c8:5b:18:08:67:ec:c0:2f:de:73:b8:5c:ef:de:79:
8a:c4:6d:1f:65:58:92:8e:a5:28:f5:6c:9a:a6:6a:
d9:6e:f2:fa:96:7a:ba:5f:ac:91:ef:dc:5c:0c:5d:
47:7f:83:50:36:8e:bb:a4:66:4e:23:f3:d6:bc:f2:
76:3b:e3:45:4f:1e:8f:17:f3:ba:83:6a:55:70:47:
d4:2e:0f:27:16:0c:4d:ed:1d:9a:cb:e2:ae:0c:09:
76:09:ed:0a:03:09:07:80:e4:16:66:83:2c:04:ea:
b6:b0:b1:0a:30:9e:c8:33:8a:f5:2d:24:fd:30:28:
d5:85:b8:da:63:e9:13:c5:59:31:ca:39:76:31:f5:
eb:73:6f:47:76:91:0e:e0:70:92:e6:8e:07:0b:72:
8f:26:70:67:3b:72:5b:12:d0:fd:17:3b:6a:69:14:
5a:00:88:7d:ec:d1:6e:9c:b8:2b:d9:c1:95:d2:21:
b9:09:1b:c4:55:94:49:d4:cd:50:d8:7a:46:60:7d:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4D:29:C2:45:BD:24:A0:74:4F:13:32:DC:21:C9:00:87:BB:5B:A3
X509v3 Authority Key Identifier:
keyid:EF:EA:17:7B:CC:2B:0E:F6:4C:AB:60:4E:6E:64:27:B1:AD:E0:BF:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-oXe8wrDvZMq2BObmQnsa3gv2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/7-oXe8wrDvZMq2BObmQnsa3gv2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:be:6d:50:d2:62:30:31:2a:4a:2b:b7:61:41:19:29:1e:66:
53:ef:26:3b:b2:e0:0a:b8:df:c1:a5:54:a6:92:1d:81:6d:47:
4d:e6:a2:81:52:9d:bb:6a:af:da:58:ef:fc:3b:a6:a9:2d:16:
a2:9a:e6:94:10:0e:0c:0c:e2:23:e9:6a:ca:c0:fb:2f:8f:18:
86:2f:5d:f9:83:9d:66:d6:fb:a4:75:f6:66:12:67:b9:59:50:
5c:57:5c:5b:63:60:99:0c:9b:98:9c:ae:d7:10:f1:e6:ff:ff:
73:3b:a3:10:cd:42:ff:c1:80:da:e4:12:c2:d4:84:99:12:96:
c2:64:9c:60:6d:b4:62:1c:93:8e:5f:34:ae:c7:84:e5:36:98:
c9:1b:b6:aa:8f:08:24:87:26:44:47:55:e1:2b:d4:08:10:fe:
1e:11:35:5c:68:ef:b3:5f:1f:5b:ba:f3:4d:fc:17:9a:01:dc:
b9:51:da:9d:ef:a4:7d:f0:46:1d:3a:bb:4e:95:aa:a4:ca:c3:
98:24:92:06:2a:64:45:7c:8a:ba:66:24:2c:65:17:3a:69:0f:
f9:e4:52:61:1c:d4:1d:2f:9c:e9:15:a8:d7:42:01:8c:9a:55:
0b:5b:03:a5:db:5c:32:f1:4b:59:14:34:de:10:97:f0:f1:ed:
28:34:aa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:07 2025 by rpki-client