Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
File: 7b5zqycw806U8SDpv8Va9EBTafY.mft (raw, json)
Hash identifier: dIDqamGhEFfWaZY4Pd/cuuBhYj6IO2SDoMZNEENcEE0=
Subject key identifier: A0:D0:D6:A1:FB:EB:82:68:71:0F:68:58:B6:3E:F7:85:53:DF:9F:BC
Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
Certificate issuer: /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Certificate serial: 0198665E65893BCEB3BAB69680BAF863DFD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
Manifest number: 03AF
Signing time: Fri 01 Aug 2025 16:01:58 +0000
Manifest this update: Fri 01 Aug 2025 16:01:58 +0000
Manifest next update: Sat 02 Aug 2025 16:01:58 +0000
Files and hashes: 1: 7b5zqycw806U8SDpv8Va9EBTafY.crl (hash: VaH5g5W/+FLe9Lsje9J0jjvLSfhwBf0+NpX0HyB8yHI=)
2: K7v_erre4xqrVjEHRvxy-76X3oY.roa (hash: 73JVJm8ra91Vis54U60FFg9PWumAI6t/5NGHyQV5dMo=)
3: RqDjTULio7HkucdqWVIGBKTqd0Y.roa (hash: PcWewLEjusrfHJnBpktJ+OmKEcChBIByu4RElEeoGKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:66:5e:65:89:3b:ce:b3:ba:b6:96:80:ba:f8:63:df:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Validity
Not Before: Aug 1 16:01:58 2025 GMT
Not After : Aug 2 16:01:58 2025 GMT
Subject: CN=a0d0d6a1fbeb8268710f6858b63ef78553df9fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:4f:05:83:48:8d:62:ca:bf:c1:8a:e8:53:
f6:c5:bd:46:6c:03:22:2d:9d:8b:f1:41:25:76:cf:
ee:62:bc:83:2d:d1:73:b7:80:71:db:e2:21:32:6a:
99:55:13:ce:d2:ab:c6:ae:bd:f4:65:d9:a7:e0:ed:
c8:1b:a3:a8:dd:34:f6:94:dc:ec:cd:6f:89:37:7d:
c7:0d:53:94:a8:72:88:68:67:4a:94:55:1f:ac:2d:
b9:3b:f0:0d:39:82:7a:23:de:33:3f:b5:d8:52:1c:
79:3b:45:2e:53:22:d4:97:17:a1:79:1f:4d:15:b1:
89:81:d3:3a:f1:d2:c3:a7:36:25:14:e0:d6:24:0e:
df:18:22:ca:cd:87:6d:68:c7:cc:58:49:31:86:26:
b0:9b:f3:dd:91:ca:d5:ff:d9:92:d1:87:85:d0:f4:
75:83:28:c2:8e:9d:9f:6e:3d:a9:e2:59:ca:11:a1:
83:8f:87:0b:af:db:7f:e5:e7:1a:76:e9:8a:5d:86:
da:82:7d:77:99:a4:09:1e:f0:0d:3a:a6:49:d3:11:
01:ee:26:09:d9:02:b3:6f:78:13:87:db:1e:6e:b6:
5a:55:3e:8c:45:c2:b9:99:40:f0:13:0e:36:a1:98:
d4:b5:db:c3:0a:07:6c:8a:af:8e:c1:4a:c7:95:9f:
8d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D0:D6:A1:FB:EB:82:68:71:0F:68:58:B6:3E:F7:85:53:DF:9F:BC
X509v3 Authority Key Identifier:
keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4e:d6:98:06:58:4c:c8:60:92:38:37:e6:44:b5:cf:4f:70:
81:01:e8:b3:b5:aa:2b:7b:aa:47:16:20:fd:cc:c2:86:cc:d6:
61:78:4b:87:f3:fc:46:1e:ab:da:2a:16:40:da:e3:3f:a7:fa:
5c:3c:d2:0e:83:41:a3:26:10:7d:3d:48:e7:0d:cc:e8:40:9a:
a4:ac:09:39:84:b0:d9:2b:75:d2:63:17:52:e5:6f:1b:74:b8:
c3:5f:94:21:40:93:9c:ec:f4:8f:00:70:32:9f:2a:38:aa:e3:
64:42:8a:78:06:72:93:53:5e:47:f2:e4:6f:f3:89:ed:e0:dd:
ab:78:46:98:4d:39:db:a8:ef:14:f6:2b:b2:99:8d:ee:e8:16:
61:87:0f:82:6d:94:3e:07:ba:48:79:c2:3c:42:3b:51:ce:3a:
aa:24:c2:02:05:78:33:96:f0:94:30:0f:cf:90:33:92:59:77:
63:63:63:b0:f0:30:82:75:84:47:2b:e9:41:f5:27:95:e2:36:
cc:ca:ff:6a:89:36:07:69:38:d3:6a:3c:89:c1:d5:f6:9a:fb:
da:5a:9f:f4:14:7d:0b:a4:37:4b:66:d6:fd:14:fe:66:ff:53:
41:90:f0:aa:82:7c:7a:c7:c6:ee:86:5e:75:f4:16:90:79:46:
ae:94:b4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:12:21 2025 by rpki-client