Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
File: 670ir7gN-togA9QOVG2v03_4af0.mft (raw, json)
Hash identifier: 0eGhCC/EW6xQbSNqcRSAs8g4phX4trpGFgIDZccZx1w=
Subject key identifier: A0:DD:36:37:90:8B:F2:7A:48:FD:0D:AB:3F:53:DE:D5:39:8B:BC:FC
Authority key identifier: EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
Certificate issuer: /CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Certificate serial: 01983B04CF0BDF22C14AE118C21E7E4AFCC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
Manifest number: 04EE
Signing time: Thu 24 Jul 2025 06:00:27 +0000
Manifest this update: Thu 24 Jul 2025 06:00:27 +0000
Manifest next update: Fri 25 Jul 2025 06:00:27 +0000
Files and hashes: 1: 670ir7gN-togA9QOVG2v03_4af0.crl (hash: LBhPVs38R8mtOIqEth8eD2FW4RvzHahpCB1p8Ogdd9o=)
2: Lg69_8_Hwhk8sLJu5EjPC6QyXmo.roa (hash: KXCYGeobuTRdhwIdNvFIRapr7Co2MUanxSVUEVx8L70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3b:04:cf:0b:df:22:c1:4a:e1:18:c2:1e:7e:4a:fc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbd22afb80dfada2003d40e546dafd37ff869fd
Validity
Not Before: Jul 24 06:00:27 2025 GMT
Not After : Jul 25 06:00:27 2025 GMT
Subject: CN=a0dd3637908bf27a48fd0dab3f53ded5398bbcfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1a:49:be:a6:19:b1:e8:c7:f6:b5:8b:43:b0:
6b:89:ac:b3:3a:54:94:0b:ac:6b:1b:17:e2:f7:c4:
7c:d8:39:fd:7c:22:02:52:fa:b3:d8:db:25:13:5c:
7d:6a:c1:ce:80:89:85:be:8f:ed:8b:57:e1:27:8c:
0e:ed:b6:e3:8e:bf:d7:6a:fc:3c:79:1f:89:5a:5f:
1f:3f:f1:07:bb:9b:27:10:39:d5:98:b4:f0:e0:33:
c1:9d:92:3e:8d:ed:a6:3f:16:7c:fc:8d:1a:74:3f:
ec:13:e0:67:7a:9b:9d:42:e2:d6:d0:79:26:b4:4a:
24:31:a4:58:cb:34:a9:1c:74:14:9d:52:5d:82:15:
b4:27:3d:6d:74:05:e9:70:e5:d6:e4:8f:84:36:dc:
6e:79:ca:68:b6:5d:b6:ab:1b:1e:a9:82:3c:d4:5e:
53:15:eb:69:ab:32:95:69:87:2c:9c:65:59:5c:65:
36:a3:29:cb:0d:6f:8c:d1:ca:b3:46:ec:84:b4:1d:
73:0d:74:98:3d:5a:34:05:08:42:0a:7a:38:f0:1b:
33:0a:b7:e5:c9:31:18:01:a2:53:1a:c6:98:b4:f3:
fe:8a:12:83:4e:2d:73:56:04:08:f0:03:da:4d:d0:
c9:20:8b:6b:99:83:37:50:5a:35:90:5c:1b:98:5a:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DD:36:37:90:8B:F2:7A:48:FD:0D:AB:3F:53:DE:D5:39:8B:BC:FC
X509v3 Authority Key Identifier:
keyid:EB:BD:22:AF:B8:0D:FA:DA:20:03:D4:0E:54:6D:AF:D3:7F:F8:69:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/670ir7gN-togA9QOVG2v03_4af0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7d3565-7b00-4d81-9ab3-919eaba61b94/1/670ir7gN-togA9QOVG2v03_4af0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:37:e6:1a:f5:64:e8:33:22:07:ee:9f:a1:e3:c3:5f:93:ef:
92:62:d8:5f:49:45:af:99:54:1b:c1:fd:64:25:5e:1c:8b:b0:
2e:40:39:53:1c:59:bc:7a:11:fc:7d:29:cf:a8:72:b5:ee:dc:
3a:41:12:17:f2:29:21:77:04:f3:91:87:6d:7d:04:5e:ed:be:
e4:8b:7a:84:50:05:55:e2:b1:0c:66:6f:f4:8f:b9:80:42:ea:
46:7e:ff:a9:fc:d7:02:86:65:78:fb:b8:62:9e:8e:51:98:13:
e6:f4:d6:6f:ff:9b:bc:71:78:25:26:c7:a1:00:cc:95:f2:88:
b9:12:8e:a3:7d:6c:61:8f:dd:9e:b0:d4:63:0d:f0:83:2b:a5:
83:19:71:fd:35:07:0d:bd:30:a8:73:46:d5:55:0d:c3:13:fe:
61:5f:8c:3c:95:47:5d:c6:27:a4:d9:b1:74:34:71:bc:8f:37:
35:a1:db:a6:64:56:bb:bb:42:f9:b6:b0:29:67:e0:72:bf:68:
04:8c:7d:23:34:55:58:b9:de:89:f5:d9:3c:04:5c:dc:b2:96:
a3:ad:98:ce:fd:2c:05:e6:da:5b:71:10:05:43:cd:48:25:f3:
1a:e9:fe:d1:6c:89:ae:e9:6c:4d:b1:2e:b7:4f:4b:de:f3:b6:
d8:71:10:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 08:22:36 2025 by rpki-client