Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
File: 7ixIe2tr3aIheQctkqjwHo5zZjQ.mft (raw, json)
Hash identifier: r4HGKNsANvdM3KH8EYZkaaCmWkurG2TWRNNYwCZLBLY=
Subject key identifier: 4F:70:95:05:B3:0C:AE:60:EF:DA:FD:BB:40:0D:7E:42:A1:41:80:E7
Authority key identifier: EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
Certificate issuer: /CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Certificate serial: 01988B7D6BB5E16FD7D2743EB2D19144F14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 21:01:49 +0000
Manifest this update: Fri 08 Aug 2025 21:01:49 +0000
Manifest next update: Sat 09 Aug 2025 21:01:49 +0000
Files and hashes: 1: 7ixIe2tr3aIheQctkqjwHo5zZjQ.crl (hash: y+B2hSTe9L/A/qu0lhgZFuvq5fP8ys9FVeE3LAuO2C8=)
2: ZMaLoOweTuOcv_nvUbVyQTqS1mc.roa (hash: NcJ71xMcWOHUOX+wLT3smK9g9a6MiR/wNPSYjOJtrKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7d:6b:b5:e1:6f:d7:d2:74:3e:b2:d1:91:44:f1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2c487b6b6bdda22179072d92a8f01e8e736634
Validity
Not Before: Aug 8 21:01:49 2025 GMT
Not After : Aug 9 21:01:49 2025 GMT
Subject: CN=4f709505b30cae60efdafdbb400d7e42a14180e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:37:66:7e:c8:b8:b4:7f:5e:3d:40:0e:b3:c0:
9e:3f:82:a4:b1:d8:5b:83:e3:1e:e0:e4:1e:cd:f9:
b8:9f:9e:1a:98:51:6a:2f:9d:bb:ad:bd:6f:e4:48:
3c:c3:8d:c1:a8:b4:56:2f:46:cd:11:81:70:9d:b9:
10:91:db:91:49:37:cd:18:44:64:66:16:14:81:63:
58:73:4d:a0:7d:19:30:6a:76:5d:db:f8:b9:5c:25:
6a:d9:31:44:dc:7b:0e:5a:8a:7f:f6:b0:72:25:ab:
c1:69:25:bd:e4:fd:af:6e:85:4a:c6:4c:ad:88:b4:
86:27:99:52:68:99:ca:6a:f5:21:33:d4:94:1b:90:
a8:47:65:40:ef:f5:aa:a2:40:a7:55:6e:d4:6b:cc:
f2:8c:f5:0d:54:a1:fc:e1:8a:1b:fd:73:01:af:45:
29:f7:2c:3c:f5:5a:f2:dc:93:ba:54:d1:ff:2d:db:
88:48:d2:87:84:be:ba:ac:0b:b4:00:7d:57:40:89:
a4:41:78:f5:d7:f5:79:97:32:2d:eb:f8:40:a9:16:
db:39:9f:4d:3a:d5:02:d4:fc:77:7b:cc:57:6a:08:
7c:72:56:82:4f:28:39:59:86:16:a6:a9:42:6e:b4:
14:aa:e9:85:ed:cd:c2:56:64:00:9e:cb:e0:62:19:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:70:95:05:B3:0C:AE:60:EF:DA:FD:BB:40:0D:7E:42:A1:41:80:E7
X509v3 Authority Key Identifier:
keyid:EE:2C:48:7B:6B:6B:DD:A2:21:79:07:2D:92:A8:F0:1E:8E:73:66:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ixIe2tr3aIheQctkqjwHo5zZjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ff027-33d4-419d-aa6b-4b983f1b84a2/1/7ixIe2tr3aIheQctkqjwHo5zZjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:79:cd:93:3e:af:30:e1:a3:47:23:ca:31:ff:ba:86:dc:f2:
f8:dd:05:e0:80:1b:0f:40:ea:8d:2f:20:d6:54:91:21:c4:84:
81:ff:f6:ab:e8:2e:ed:2b:9d:63:f8:67:31:00:14:40:24:91:
bd:0b:d3:ea:6d:c7:ba:a0:7a:ac:ec:ef:90:b4:45:db:cf:90:
b9:ad:e9:7d:53:42:43:f1:b9:27:87:14:df:48:8c:ee:81:82:
9e:61:f7:6d:d3:3b:29:8d:17:fb:ab:e7:40:6b:59:a3:15:16:
1e:a2:b0:ff:df:fa:aa:f4:48:fc:20:f3:36:76:6f:f1:32:7b:
e5:09:3a:a5:8f:e9:28:31:28:40:0d:8f:34:64:dc:78:03:01:
8b:20:8a:cc:9a:e0:4d:53:ff:12:81:89:85:a1:ee:93:98:1f:
1d:53:68:26:25:02:b3:7c:b5:7b:7c:f7:18:fa:39:d0:a1:43:
e0:3b:5f:33:ae:16:57:f3:5c:21:77:e9:bd:d0:49:41:20:e8:
0c:c6:ee:b1:fd:75:d3:16:0e:16:9c:43:eb:a7:a4:df:79:7b:
89:e5:03:21:4d:bc:ee:04:8d:81:25:c1:4b:34:ea:a1:6b:d3:
c4:40:0e:24:ef:de:41:45:75:8b:c9:a0:f2:01:b3:19:44:fc:
d5:97:1c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:28 2025 by rpki-client