Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
File: 7JxoXPZnHMZW-S52RVejg3jygnw.mft (raw, json)
Hash identifier: FAOOWQzT64U7NAIaWWIH9ISCoEHcSIxwr7FcmtMGY50=
Subject key identifier: 82:B4:9E:66:D8:4F:4B:BD:99:2C:57:00:32:59:35:CF:D9:E5:08:32
Authority key identifier: EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
Certificate issuer: /CN=ec9c685cf6671cc656f92e764557a38378f2827c
Certificate serial: 0198530ECE2AAF9B59CD6B32D8591A09DBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
Manifest number: 0735
Signing time: Mon 28 Jul 2025 22:02:15 +0000
Manifest this update: Mon 28 Jul 2025 22:02:15 +0000
Manifest next update: Tue 29 Jul 2025 22:02:15 +0000
Files and hashes: 1: 7JxoXPZnHMZW-S52RVejg3jygnw.crl (hash: IGammdBTgQCtBylXBlGiPW1TG1gOPsk1PrmPkB/otAg=)
2: NS3PLsvPHZ5BNMXscaI6lUiQ-_0.roa (hash: ifHPopmI8C/fWhHZ7kUlh0L0Qv3UiOcYMZNGauolx84=)
3: SbkVZx35DZkFyVg9B2PgqJ5H5dY.roa (hash: hRekjjnAg6h7a7cb6mrdtQIFkMy6cN1akvAzAJVtwDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:ce:2a:af:9b:59:cd:6b:32:d8:59:1a:09:db:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec9c685cf6671cc656f92e764557a38378f2827c
Validity
Not Before: Jul 28 22:02:15 2025 GMT
Not After : Jul 29 22:02:15 2025 GMT
Subject: CN=82b49e66d84f4bbd992c5700325935cfd9e50832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:3e:c9:01:a9:0f:24:a0:0c:37:fe:b9:98:
0d:98:9f:5f:b4:68:31:5a:57:08:5c:80:dd:cc:2f:
90:43:b1:bc:76:fd:ea:e0:11:bf:cf:12:bc:13:bf:
03:12:d8:9a:26:90:c5:10:53:f1:1b:e6:d9:e3:0d:
f2:98:5f:19:31:12:9b:44:27:45:4e:e7:bb:66:30:
74:be:71:f2:b1:71:bc:4a:9b:c0:58:47:3e:4e:78:
2e:6c:8a:6b:92:af:04:16:85:f7:ed:c4:be:4f:e4:
9c:e4:71:6b:22:7a:b7:6d:14:0a:c1:9f:a5:fb:fe:
6a:1c:35:08:3f:37:56:91:76:f7:28:0d:73:93:9b:
60:c8:65:db:52:e6:22:31:53:42:ea:47:5d:21:5a:
fb:2a:b9:7f:1b:b2:d4:28:b6:db:75:53:cd:6b:4c:
9b:e6:53:9c:f1:96:13:d7:e1:d6:a5:97:42:3a:af:
4e:d7:fa:2e:8a:bb:96:1b:9a:cf:3d:a1:70:a5:ba:
e2:83:41:5c:17:77:25:3e:c5:85:e5:ec:46:87:c1:
ca:56:37:36:15:17:67:72:55:a8:7f:b8:f1:73:70:
52:fa:74:d1:08:fb:e3:28:8a:27:8a:64:5a:13:20:
76:86:c2:59:e5:e3:68:6f:eb:19:9e:dc:61:f6:e7:
33:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B4:9E:66:D8:4F:4B:BD:99:2C:57:00:32:59:35:CF:D9:E5:08:32
X509v3 Authority Key Identifier:
keyid:EC:9C:68:5C:F6:67:1C:C6:56:F9:2E:76:45:57:A3:83:78:F2:82:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JxoXPZnHMZW-S52RVejg3jygnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e9b56e-3b5b-43b1-8bb5-bab48dab4cd6/1/7JxoXPZnHMZW-S52RVejg3jygnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:43:70:a0:b0:5e:b6:d3:20:78:64:09:fb:67:01:a1:e0:0a:
52:a8:ec:f0:74:16:92:b7:7d:ff:e6:9e:83:a0:79:92:89:04:
e8:76:4a:c9:5f:36:df:4d:01:02:e3:2b:5f:50:0e:f3:65:de:
5e:c2:e9:fc:99:09:ba:c1:e1:f0:f6:23:6a:f8:71:e1:fd:49:
b0:d4:15:96:46:23:58:6d:87:1f:03:68:47:3c:92:1b:70:4a:
d3:e9:10:5e:77:b3:45:e2:7f:15:8c:55:13:4e:b3:b6:c7:22:
7c:f2:52:89:b1:5f:2f:01:bc:7d:2d:83:17:05:22:74:6b:1e:
fe:8b:39:96:df:8a:63:59:b3:71:47:63:7f:c9:97:8d:ef:f7:
a9:8d:63:b5:53:48:fb:cc:c1:62:01:5c:36:02:a8:b5:6b:68:
ec:98:4e:9f:88:5e:e3:3f:73:45:34:79:c7:b2:64:da:a7:c6:
21:e4:6b:bf:5f:c5:99:02:0d:30:ea:f5:2b:72:dd:2a:2a:04:
d3:ac:21:8a:60:4a:87:fb:29:a5:4d:e8:7d:f3:cb:4a:71:4a:
30:e8:86:ab:45:51:a3:d0:ad:3c:d6:fd:bc:0d:dc:6e:b7:0c:
6a:43:88:bc:6d:0f:5f:cd:fc:07:f1:98:b4:d6:08:19:82:fc:
5c:3d:98:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:51:12 2025 by rpki-client