Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
File: 7D09fly_GK9mt_W0peCsGezTmHY.mft (raw, json)
Hash identifier: +5+ybympRx9TlqHY+eSRTpR1VVqzs6365Z/PC9QD0OE=
Subject key identifier: 77:08:A2:BA:61:DE:41:4B:E6:AE:8E:F8:9F:4F:FD:08:67:57:C8:01
Authority key identifier: EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
Certificate issuer: /CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Certificate serial: 01989ECCF5FB2EE88E2DAB8387C732254116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
Manifest number: 162B
Signing time: Tue 12 Aug 2025 15:01:29 +0000
Manifest this update: Tue 12 Aug 2025 15:01:29 +0000
Manifest next update: Wed 13 Aug 2025 15:01:29 +0000
Files and hashes: 1: 7D09fly_GK9mt_W0peCsGezTmHY.crl (hash: 4FOo/7sV5sqWS6x0mhME09TRbGI5P/h9tK5oZBAdaBo=)
2: DJI5pA0yQdHfWf9YZsCq7SLW83k.roa (hash: aYlNDPO2QXpilHLu8WGoR0IYFB4fHF6uZQ2LQMfMdjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:cc:f5:fb:2e:e8:8e:2d:ab:83:87:c7:32:25:41:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3d3d7e5cbf18af66b7f5b4a5e0ac19ecd39876
Validity
Not Before: Aug 12 15:01:29 2025 GMT
Not After : Aug 13 15:01:29 2025 GMT
Subject: CN=7708a2ba61de414be6ae8ef89f4ffd086757c801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f8:4e:60:1f:66:b6:48:fb:2b:7a:60:71:aa:
47:76:9e:e7:cc:d7:e7:2a:be:ce:b6:0c:f1:73:d0:
be:1e:ce:2b:a3:f4:2a:c8:17:8f:18:18:bf:75:51:
37:fc:7a:3e:9b:61:70:76:21:54:16:74:d2:29:17:
02:23:24:99:3e:d1:26:36:99:a2:d3:50:90:d4:13:
42:23:d7:c5:88:05:ba:ad:40:f2:42:d2:77:99:32:
89:b4:aa:1f:d7:0e:52:c5:35:d6:d5:9a:8e:66:2a:
2a:c9:7d:52:a7:7d:98:c8:7c:43:38:a6:d8:11:10:
4c:91:cf:dc:1d:47:e9:ff:3c:73:17:5a:36:04:2d:
7f:c6:28:c0:81:74:61:ef:17:d3:61:56:04:37:19:
6c:a4:85:1e:a2:bb:02:c7:df:57:0d:15:49:19:29:
e9:33:78:cd:b2:56:fe:3f:2b:d2:c5:c3:a4:d3:7a:
61:5b:ad:03:d3:1d:d3:2b:04:69:30:d8:15:ce:13:
24:0f:4f:e0:f2:b0:3c:35:ec:43:d3:8b:af:ca:99:
f2:dc:d8:48:b4:a0:b5:06:c8:24:9f:0a:a6:87:3b:
9b:4d:85:0b:24:52:55:23:02:4e:2e:09:23:26:45:
76:03:14:41:46:f3:bf:33:90:7a:6d:36:b2:05:b2:
5f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:08:A2:BA:61:DE:41:4B:E6:AE:8E:F8:9F:4F:FD:08:67:57:C8:01
X509v3 Authority Key Identifier:
keyid:EC:3D:3D:7E:5C:BF:18:AF:66:B7:F5:B4:A5:E0:AC:19:EC:D3:98:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7D09fly_GK9mt_W0peCsGezTmHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b659fc-6b9b-4847-b6a3-4660fad83985/1/7D09fly_GK9mt_W0peCsGezTmHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f6:6f:af:ac:ea:85:f2:be:27:93:bb:72:13:19:7e:23:3f:
b7:b8:54:04:a9:01:29:9c:96:75:2f:de:15:15:31:25:15:79:
31:19:1c:2a:df:d7:8d:40:5d:c3:b0:66:40:6c:9d:a0:a5:a5:
43:ee:80:63:79:6c:c5:07:86:f5:07:49:3d:56:4f:3e:06:c5:
34:37:b8:68:cd:09:46:30:86:e9:e4:c0:37:7c:2a:8d:86:1d:
12:8b:d8:79:86:af:92:52:7c:57:54:f3:7d:6d:7a:bb:1c:bf:
23:9c:0d:68:3f:81:a1:2e:68:fc:2d:aa:7d:95:1d:63:7f:af:
13:5e:4c:78:96:a7:a7:54:d4:5f:1b:85:08:70:44:91:99:e6:
ce:7f:67:7e:0c:9b:8a:a1:c9:d8:79:5d:e8:29:05:f3:b2:24:
52:40:8b:3a:c8:d4:4d:9b:c1:f4:9d:02:fa:1e:5f:1e:3b:b7:
33:b9:39:39:07:39:3e:66:62:a1:63:51:a6:a1:a1:6f:c6:2b:
6a:93:9f:b6:da:fd:14:a2:b6:d5:84:6c:68:ba:78:12:d5:30:
31:e4:ae:6a:c0:b3:d6:53:7c:41:de:0e:69:7b:e4:e8:d2:46:
ad:bc:a9:c0:68:39:88:05:74:92:35:e8:a5:34:7a:59:fd:24:
0c:ea:4e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 18:16:05 2025 by rpki-client