Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File: 7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier: 67iK3l//FryAWkd+Y2An1Pc/madZwtI8x6QfwO6CWMQ=
Subject key identifier: 2B:81:C6:7C:EC:1A:55:92:A2:C0:66:EB:43:7A:A4:B0:91:D7:6E:38
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer: /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial: 0198548DEE05ED0E9A3E7F72DBC37A114FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number: 0CC7
Signing time: Tue 29 Jul 2025 05:00:44 +0000
Manifest this update: Tue 29 Jul 2025 05:00:44 +0000
Manifest next update: Wed 30 Jul 2025 05:00:44 +0000
Files and hashes: 1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: brInIJu1a+ELjY55rEH3xLDW9V2lHtprXfD8xxOWIvY=)
2: ki56jkg-Ht0i-AxPw2XEPPfU3mc.roa (hash: 2NDyIuvL9kHGhxL4y5SFFt1xoYZ8BtFLva+lo3l3Ky4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:ee:05:ed:0e:9a:3e:7f:72:db:c3:7a:11:4f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Validity
Not Before: Jul 29 05:00:44 2025 GMT
Not After : Jul 30 05:00:44 2025 GMT
Subject: CN=2b81c67cec1a5592a2c066eb437aa4b091d76e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:30:5e:70:0f:7d:41:40:4c:bc:6a:aa:52:
29:48:d5:92:71:7b:69:d2:e0:34:73:55:13:74:a7:
15:ec:6c:99:d1:45:e0:12:bf:48:48:3a:22:ba:5a:
b3:de:d4:2e:17:ce:03:33:6b:55:31:de:c5:45:5a:
a7:71:2a:dd:3c:2c:cf:3b:3e:36:64:74:57:95:2f:
71:2d:d7:47:d7:82:e8:28:5c:4b:8f:85:e4:c1:f5:
92:0d:89:0f:1b:21:4b:e0:33:36:94:2f:5f:7c:97:
bf:21:db:cc:4c:89:5a:88:7e:c1:02:56:9f:62:19:
13:c3:b4:5e:6e:5d:fc:c0:39:fd:f6:05:1d:51:cf:
c6:5f:bb:b3:48:a4:c0:95:f6:c3:34:78:22:46:54:
4c:26:fc:8c:8a:f0:4d:28:41:50:08:fd:eb:bb:88:
3a:de:c4:5e:95:d0:7c:1f:cd:8a:58:6a:83:5e:90:
16:f9:d6:8f:80:22:bb:70:31:69:f0:d7:72:4c:04:
16:c8:14:f5:f2:05:77:2f:d7:1f:be:95:0a:7e:bf:
bb:71:b5:39:5a:24:4c:43:bd:e8:d3:4b:96:19:76:
3d:7b:7a:30:df:81:42:32:3b:95:ad:3e:6d:4f:6a:
46:82:08:3c:88:a0:af:d8:c4:5e:8b:af:f0:66:32:
bc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:81:C6:7C:EC:1A:55:92:A2:C0:66:EB:43:7A:A4:B0:91:D7:6E:38
X509v3 Authority Key Identifier:
keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:ed:1e:bd:0b:fb:69:f8:6f:92:5d:35:a2:a5:bb:76:96:5e:
87:04:de:0a:c0:59:d7:fa:9f:f7:33:5d:54:04:51:96:d5:46:
8b:89:4b:04:17:ed:16:27:1b:25:f3:17:67:2e:01:88:21:70:
75:0b:f3:f8:6e:38:b5:56:45:36:55:90:a8:29:e6:90:cb:1f:
62:89:10:b1:1d:ec:f3:b7:c5:34:31:a5:6a:17:77:2d:3d:a9:
e5:9a:89:14:e8:b1:53:05:ad:b5:71:ed:df:df:ff:d1:de:58:
b3:4e:cc:df:e3:d4:20:7b:8c:f7:68:9a:ff:40:c9:48:f9:9a:
31:e1:fa:e3:22:a8:d7:d9:a1:20:35:af:fa:be:3c:5f:26:fa:
14:46:4c:6c:65:c6:25:c4:cd:55:be:cb:73:62:02:55:f4:e2:
e0:fd:73:db:a1:f8:80:89:3a:b8:b9:04:2d:8e:a2:2c:6c:fb:
56:ba:54:b5:cf:33:cb:dd:31:9c:e5:d4:8e:00:24:1d:28:8e:
de:99:27:19:0f:a3:63:35:cb:55:8a:3a:e2:12:70:42:20:66:
ec:c0:3c:45:5e:b9:29:bc:4b:be:30:82:8e:0a:a7:dd:e0:fa:
1c:76:00:dd:1e:05:c1:d1:45:dc:12:29:61:86:90:47:87:06:
0d:f7:78:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:43:36 2025 by rpki-client