
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
File: 7OZJjRdK31yJo2XC0eR33PJPmC4.mft (raw, json)
Hash identifier: 4HQulElLmt5NPCBSG74+szmASr+MlQMgm1Qyf3fL2uM=
Subject key identifier: 86:93:2E:F3:23:22:66:3E:29:3B:00:D0:87:8A:EA:FA:AE:C1:98:49
Authority key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
Certificate issuer: /CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Certificate serial: 019885E8D1D776CB24BE12FC20164076F4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
Manifest number: 02D8
Signing time: Thu 07 Aug 2025 19:01:24 +0000
Manifest this update: Thu 07 Aug 2025 19:01:24 +0000
Manifest next update: Fri 08 Aug 2025 19:01:24 +0000
Files and hashes: 1: 7OZJjRdK31yJo2XC0eR33PJPmC4.crl (hash: KJ3jlYGM2zU4TODESk9/CYjg2P+GVeQqy0xhuvRWjGA=)
2: C6x_6w-E774Ctv2tM-pwvlDis4g.roa (hash: INLpD3Xn2Y08yhQMCV4sfvThKHmVJ+/cWpnVIk0AjIY=)
3: Gsw4M_lTA_8kRZfXKXl2Ow61fLs.roa (hash: wx/H0ps5Y+S8LfFB+UMWHcMD/ey9o03wwXXZ26Kx9zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:e8:d1:d7:76:cb:24:be:12:fc:20:16:40:76:f4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Validity
Not Before: Aug 7 19:01:24 2025 GMT
Not After : Aug 8 19:01:24 2025 GMT
Subject: CN=86932ef32322663e293b00d0878aeafaaec19849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:48:17:d5:fb:e2:9c:c9:ce:6b:7a:ad:85:
1b:bf:b9:8e:c3:b3:6f:c2:3a:81:30:a9:d5:59:8e:
15:a9:15:45:c7:a8:f6:8f:4a:d8:44:47:c4:f4:3a:
f6:b3:5f:6a:e3:05:41:d0:22:82:e6:85:0d:23:3d:
7c:20:22:b4:75:2b:83:d9:68:72:96:0b:8d:8e:d8:
9a:fb:8d:26:74:12:18:2f:c5:b7:71:16:fd:df:dc:
3e:ee:a0:14:7f:c6:66:bb:fb:47:11:27:56:1b:ee:
68:b8:af:da:65:c3:df:7c:1b:71:16:9d:80:39:27:
32:18:93:c3:fc:a1:fc:9c:0e:86:92:b4:1a:42:51:
c7:8f:2e:93:4a:ef:b6:3b:f6:b0:d1:b1:40:1f:5d:
fe:a9:e8:05:0e:3b:7a:ba:d4:7a:70:a4:79:3b:73:
44:75:06:ff:9a:3c:b7:07:e5:76:63:5a:c1:f6:f2:
c2:3b:58:ed:9f:78:ec:c3:75:da:41:a5:84:75:40:
35:52:14:76:3b:d3:ce:74:3f:60:a1:1c:9c:ec:36:
3c:71:02:52:f1:e6:67:71:97:c5:f7:f1:a8:5a:aa:
d4:43:58:45:7c:ac:a0:46:0f:04:c5:d1:36:ed:4c:
87:ac:54:6d:54:4a:29:0d:88:d0:59:d9:5c:db:fd:
4a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:93:2E:F3:23:22:66:3E:29:3B:00:D0:87:8A:EA:FA:AE:C1:98:49
X509v3 Authority Key Identifier:
keyid:EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:23:7a:de:c7:6a:51:c3:b4:cf:57:9b:e3:f9:2a:b2:51:37:
e9:8f:39:d0:41:ed:62:99:76:f8:04:7f:2e:b1:a0:be:58:c1:
81:28:11:df:44:f7:c9:86:8f:d5:33:59:5d:19:2c:eb:f8:95:
11:9d:c2:14:0f:ef:67:44:00:b0:86:27:9f:82:16:15:71:cf:
2b:68:cb:8e:cd:5a:e4:b8:1d:d7:55:55:fe:cb:21:57:10:03:
45:16:de:d1:8f:9c:99:18:b7:88:24:fe:67:db:d1:8f:af:f1:
28:8c:c5:6a:76:fa:f5:2b:de:07:4a:54:e8:c2:c8:3c:15:74:
af:9c:75:50:8a:c5:3c:84:4c:23:5b:5d:bb:4b:16:c0:be:b5:
7b:99:10:ed:49:95:de:97:9f:53:70:2b:d6:6d:99:93:b4:51:
bd:21:1d:13:25:d2:cf:4a:09:2e:3d:f1:99:bd:41:88:c4:32:
5e:58:1e:6c:b9:0d:33:37:67:a2:8b:12:dc:61:7d:60:6e:d2:
ea:0c:d3:48:bd:d7:df:53:4c:05:cf:fe:43:86:c8:5a:18:2f:
f7:b8:dc:fc:8f:47:a4:c9:c6:5a:d3:84:39:5d:0b:9d:c9:f2:
b1:98:a0:38:17:12:38:14:c3:f2:cc:f1:c7:66:9f:cb:5c:a4:
f0:b5:3f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:00:40 2025 by rpki-client