Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier: J+VP7245H2gZclFmPARWjJ1WXCIt94bg5A8+Flb2d0c=
Subject key identifier: 7E:29:74:DE:95:9F:1C:CD:21:29:4B:58:D5:0F:FB:A1:31:7E:CC:37
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial: 01989F02F282DF23B8EEB04CE465A7AE2197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number: 02C0
Signing time: Tue 12 Aug 2025 16:00:27 +0000
Manifest this update: Tue 12 Aug 2025 16:00:27 +0000
Manifest next update: Wed 13 Aug 2025 16:00:27 +0000
Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: lPfGK0uVUsmds9TJnkbPwMrbf9j2V5JEtXAmSqNGtcc=)
2: gylVxgv2wVCzGr0PfDa1DOljS0w.roa (hash: LJzn39XG+RijMzRlRM7pRtoqSA79D4mMA2x3jy4QHzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:02:f2:82:df:23:b8:ee:b0:4c:e4:65:a7:ae:21:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Validity
Not Before: Aug 12 16:00:27 2025 GMT
Not After : Aug 13 16:00:27 2025 GMT
Subject: CN=7e2974de959f1ccd21294b58d50ffba1317ecc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:77:3f:6e:ca:98:30:02:2b:fb:4d:46:49:f3:
88:b0:3b:03:32:90:51:29:08:c9:3b:eb:e6:38:5d:
be:fe:4d:68:9c:74:00:19:96:93:d9:8c:6a:96:ac:
21:a3:9d:c5:cc:5b:dd:b9:38:24:1b:37:db:02:1b:
5c:bd:7c:f1:3c:08:41:62:2f:e9:6e:52:a8:11:6e:
51:13:cf:87:f3:f8:f1:a9:a2:0a:28:2a:c9:00:3b:
9e:93:cc:ae:61:f3:b5:ed:2c:81:81:5c:33:e5:0e:
3d:36:8a:51:8f:4d:61:85:2b:25:a1:0a:95:cf:12:
0d:38:df:04:0d:a8:62:8e:ce:a6:79:fb:c8:02:b2:
38:ef:ca:0d:7e:69:46:68:98:7f:71:5a:50:f6:be:
6f:bb:28:83:8f:d1:a7:5c:80:7e:54:85:67:37:2a:
7b:ed:72:53:69:e1:32:85:20:96:21:7c:16:96:8a:
cf:af:b3:c6:87:3c:3e:c3:a1:57:d2:41:ec:d4:f6:
c8:d3:f5:35:c5:f8:52:b0:1e:13:d3:5f:62:f0:18:
6c:32:29:78:c0:ea:7a:9c:6d:11:30:d7:3f:11:40:
19:98:81:d3:ed:ee:12:63:8b:39:e4:55:d7:55:6b:
11:37:17:dc:ed:9b:72:ec:cf:2b:2c:ce:c7:e3:ad:
25:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:29:74:DE:95:9F:1C:CD:21:29:4B:58:D5:0F:FB:A1:31:7E:CC:37
X509v3 Authority Key Identifier:
keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fe:e4:31:67:33:bf:cb:19:9f:14:68:8e:5d:41:b8:cd:8c:
a0:31:7c:dd:e7:71:69:7b:db:aa:90:89:bc:a7:9d:e5:65:e7:
86:9c:3d:76:7f:ac:5c:f8:4e:38:ee:80:77:ac:89:39:2c:b1:
05:82:a5:e4:66:b2:10:36:0e:14:73:e0:f8:24:cf:00:0a:81:
48:7a:8c:20:33:1c:b1:d9:a8:57:a2:72:69:94:27:59:f5:be:
05:d2:95:81:97:4d:98:9d:25:7f:60:90:65:19:56:df:1c:d1:
73:17:4d:ec:a3:f4:7e:83:39:0a:88:50:ba:4a:de:d8:c1:e9:
46:54:17:0b:f5:7f:6f:5b:d6:c8:e0:df:ad:5a:a7:66:b8:11:
ed:6f:f5:c9:af:01:33:72:0d:31:47:b4:4a:ed:ed:2f:99:7d:
db:49:76:18:6b:e4:0a:76:6f:a3:fa:4a:84:75:85:5d:ad:60:
fb:ce:1a:09:e7:cf:2b:94:d0:89:cc:f7:bc:1d:c2:15:c2:96:
1b:ad:29:2d:11:60:ed:1a:af:ab:38:6b:64:5c:7e:b7:32:cc:
25:ca:bb:72:01:6d:2d:09:71:d0:84:3e:e5:af:c5:90:31:ae:
d9:a3:ec:d5:7b:93:79:bd:b6:58:d5:4a:10:7b:17:dd:c9:b8:
7a:c9:5f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:09:30 2025 by rpki-client