Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: F6t26zClxxCH4TsOaME/RttXDnA6xZORZumuzN1WKCE=
Subject key identifier: 30:5F:8F:53:5D:F2:CE:DB:4D:47:47:53:F0:B7:2E:FD:0C:9D:7E:2F
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 0198989329AA0DCE2E953D59CC1AF8DDA8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 162C
Signing time: Mon 11 Aug 2025 10:00:37 +0000
Manifest this update: Mon 11 Aug 2025 10:00:37 +0000
Manifest next update: Tue 12 Aug 2025 10:00:37 +0000
Files and hashes: 1: 1utcwuOmOI7txytHlcapG00bDWQ.roa (hash: KoDsbv2AuvIm5mO9VxRMXrTvsRyvxgVtQhUhy9Zv0J4=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: HZiplLheytIuC5h5t5u71f53xB3X+9p6DNr6a2o86TQ=)
3: TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa (hash: SXaSky/YVlsAmsXgPwkA8PXkQ+jueu3hy97DblT9VwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:93:29:aa:0d:ce:2e:95:3d:59:cc:1a:f8:dd:a8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Aug 11 10:00:37 2025 GMT
Not After : Aug 12 10:00:37 2025 GMT
Subject: CN=305f8f535df2cedb4d474753f0b72efd0c9d7e2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:08:d5:49:23:71:f0:2f:41:88:32:65:ec:
d5:18:cd:cf:cf:62:e1:a1:2b:1a:62:e7:04:b7:d4:
80:25:9e:05:38:df:58:bb:be:4b:18:79:ef:9c:d8:
f1:82:cb:aa:63:24:9b:ba:0b:cc:56:d7:9d:11:ea:
0e:ff:64:10:6d:db:f8:85:54:4a:f6:84:99:ce:c3:
94:bd:a2:f3:19:a6:3a:38:f6:52:fc:74:04:88:bf:
f9:d0:10:da:a0:10:d2:f1:41:ae:ea:c4:29:95:10:
51:60:59:ff:21:82:5a:41:67:e2:77:11:3c:6c:bb:
38:88:4d:7d:44:6c:11:98:bc:35:15:bc:1f:22:dd:
bb:ab:5e:c2:66:d6:b9:3b:0e:e7:df:ff:51:e8:19:
cc:d0:a1:bb:5a:69:cd:7b:96:31:e0:b5:44:24:ee:
b1:df:01:47:d9:1c:aa:63:f7:40:c4:a7:6b:5d:d4:
17:30:d7:eb:e2:5c:70:45:53:8a:84:49:d8:91:8b:
bf:32:a5:a9:9d:ca:22:54:8f:41:96:ec:2f:0e:1a:
19:79:89:0f:1f:c6:9c:67:57:3a:22:90:87:26:71:
80:06:d6:7b:43:55:e2:27:8a:e0:47:5f:e8:33:2d:
c8:90:45:44:bc:ab:a8:9f:42:15:f9:e1:9e:70:60:
a4:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5F:8F:53:5D:F2:CE:DB:4D:47:47:53:F0:B7:2E:FD:0C:9D:7E:2F
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1b:9f:4c:5f:dc:15:20:ed:30:03:59:d5:60:5b:d3:d1:39:
bc:11:9a:d1:84:29:09:8f:f0:35:ed:74:2a:69:78:65:01:fb:
5c:c9:97:5f:4e:3e:4c:1c:8f:ab:08:94:66:e1:c5:57:4b:f8:
a7:cf:02:db:3d:ef:95:aa:3a:f8:e5:bd:ed:43:24:39:06:6e:
c3:01:96:59:b2:5e:00:d9:3d:43:17:ba:1e:39:e4:bd:16:00:
b6:95:db:72:7e:cd:c5:2a:a0:b9:b1:7c:8c:50:c6:ab:03:d0:
a9:e2:22:79:fa:a8:16:ad:6e:50:ef:19:58:61:18:81:70:ba:
e3:d7:93:17:89:4a:af:c9:06:69:e0:02:57:a6:bd:e4:a6:af:
04:78:ac:9b:3c:6a:92:fd:16:5e:4a:e3:19:b5:d6:78:02:43:
a0:03:37:90:9a:5e:19:82:df:b9:a2:f4:be:c5:ea:ac:ef:31:
93:8a:ca:77:b7:10:3b:bd:f3:64:dc:ff:de:16:5f:14:45:a7:
7e:9d:8e:f0:9a:82:ac:76:d5:f1:3a:44:fe:d7:c6:d8:c9:30:
ec:82:08:e8:a0:7a:f7:b4:44:20:91:18:2c:c0:00:cb:5c:59:
bc:eb:0a:6c:e4:05:77:7a:4a:10:83:77:7f:65:0b:b4:aa:11:
fe:2a:ab:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:16:12 2025 by rpki-client