Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File: 7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier: TKf4jMMpM1rHwS55p3GSncYY9/ZqueFFNWN5q7ZHZL0=
Subject key identifier: 3F:7F:DF:5D:CF:79:D9:05:A4:3A:7E:19:C9:7B:E1:91:47:8D:3F:23
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer: /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial: 019873749D564BF6701EC907ECA036B8298A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 05:01:18 +0000
Manifest this update: Mon 04 Aug 2025 05:01:18 +0000
Manifest next update: Tue 05 Aug 2025 05:01:18 +0000
Files and hashes: 1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: 5AwubWbRFKrBRD6pjtkEwCw81ajsC51vDFCrI1sBBDo=)
2: 9zc3UK9Q2NW5kQioYk692gU-YJI.roa (hash: BBodVy2RZip9O+WWUTv52ptxLTbUw/7auCFYyPArRAA=)
3: UQ_3RuYAdJoYpjdqceJNmc5aoug.roa (hash: q3FXkXKtZ8hFVmAvp+UOJxjM7FKEfq7BOOg+5WvlLx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:9d:56:4b:f6:70:1e:c9:07:ec:a0:36:b8:29:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Validity
Not Before: Aug 4 05:01:18 2025 GMT
Not After : Aug 5 05:01:18 2025 GMT
Subject: CN=3f7fdf5dcf79d905a43a7e19c97be191478d3f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:3c:04:a9:4d:3d:93:b4:b9:c0:a0:23:6d:
c7:26:08:22:7d:68:cd:07:a9:c4:38:25:08:b7:e7:
a1:1b:86:4b:72:30:b2:6a:40:ab:28:55:f9:43:7a:
b9:d4:04:6e:77:b2:5b:3c:f8:2c:55:bd:9d:90:8d:
3c:99:20:59:63:59:d5:d6:3d:14:11:db:17:b0:a5:
9f:53:07:cd:51:e5:55:41:7c:ec:13:74:14:f4:8f:
f5:c2:0d:23:2d:32:77:b5:fe:e3:ac:47:03:4a:21:
a3:b1:ea:3d:2d:12:11:94:22:18:98:04:36:f2:52:
92:49:50:d3:bb:ca:93:cd:59:37:29:f9:aa:b1:55:
1f:2d:f0:e2:a2:a6:cb:61:ad:76:50:45:92:d1:79:
c2:98:c6:47:29:d7:73:26:3c:f6:ca:e0:ab:1f:19:
44:df:54:7c:53:a6:2d:09:56:a2:4c:01:6e:7d:22:
b2:fe:60:6e:67:0e:dd:e5:57:88:fe:d0:1a:39:d2:
bc:ee:49:61:d7:6b:9b:49:bc:4c:a4:55:c7:12:55:
ba:e7:2c:e2:90:18:6e:4a:76:7a:9a:11:82:50:5e:
c6:9d:43:7f:a3:6f:78:b0:5c:55:69:05:87:e2:f1:
b6:ae:39:9e:e9:79:3d:f8:35:12:a8:ae:37:82:e5:
f4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7F:DF:5D:CF:79:D9:05:A4:3A:7E:19:C9:7B:E1:91:47:8D:3F:23
X509v3 Authority Key Identifier:
keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:fb:33:fa:dc:20:ad:37:3d:b6:53:03:fa:37:df:aa:1b:11:
bd:01:21:ee:df:2e:db:c4:42:a2:c6:50:70:3a:5e:ee:25:38:
b0:5f:e4:08:65:cd:34:d5:e9:d0:51:2d:38:e0:7e:93:f1:1c:
02:8a:37:83:9f:0f:3d:31:e6:df:c9:94:0c:83:dd:56:dd:64:
b3:5f:51:ff:6b:1e:3d:c2:24:cf:57:b7:eb:e6:54:04:e8:94:
5e:92:2b:0f:21:29:c4:4d:43:5e:1f:32:9e:bc:a3:fe:97:37:
13:7b:6e:c1:24:b6:f6:f1:53:88:39:4b:86:6a:54:c3:9a:2f:
fb:f4:ab:21:30:7d:a0:a3:c9:56:ed:79:3b:09:5a:b4:38:ee:
f3:c2:dd:ea:24:06:c5:22:3a:ce:82:f0:7c:4e:53:b4:43:20:
5b:ca:7a:ea:d5:2a:6d:a7:4b:2d:69:6f:b0:2d:80:0c:72:d4:
50:26:b9:eb:b1:8a:db:64:8a:d9:86:3b:39:14:e1:08:96:bb:
29:cb:3c:28:f5:f3:fe:bd:ba:e1:bb:73:b1:2f:ae:68:53:b7:
c2:3d:27:6e:1c:c7:48:e3:40:4b:bb:e6:db:6f:2c:25:5e:b6:
83:87:f5:0e:50:a3:a4:22:7d:96:1c:2c:28:63:2e:58:f2:47:
05:2c:fa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:40 2025 by rpki-client