
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
File: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft (raw, json)
Hash identifier: 5grK2X4wSnLLm+tmjp/2nIT0QcNQxTX7p+yoO9hvtt8=
Subject key identifier: 5E:7B:34:8F:2E:D6:3C:9A:3A:60:7F:70:A4:1C:06:E0:FD:6E:DB:29
Authority key identifier: ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
Certificate issuer: /CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Certificate serial: 0198534463907B532AE0CD31BA264D1CD680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
Manifest number: 0557
Signing time: Mon 28 Jul 2025 23:00:47 +0000
Manifest this update: Mon 28 Jul 2025 23:00:47 +0000
Manifest next update: Tue 29 Jul 2025 23:00:47 +0000
Files and hashes: 1: 7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl (hash: l9TIK+oNVJ9Bjx7qy5MZ1R811gQbYoAZUknG6NCoizg=)
2: V8rwHt-KBtkyfMDcY6GbBS5O3lg.roa (hash: VKRjbMp2cA/7F+gIKAoYPT0t4kmN1vcNg+P5YqdMBPI=)
3: vLkg6vsM00eiYmKWC5SDs25Gs0o.roa (hash: laQ0wIfMQs3t8Q/rYbMaQJvlRI3pM205xGMs2yoH4OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:63:90:7b:53:2a:e0:cd:31:ba:26:4d:1c:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edcc2d279130d1a1bb3ee5a3b5f3323057b3c4fd
Validity
Not Before: Jul 28 23:00:47 2025 GMT
Not After : Jul 29 23:00:47 2025 GMT
Subject: CN=5e7b348f2ed63c9a3a607f70a41c06e0fd6edb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:06:ce:28:da:ca:98:82:d2:5f:74:f1:f1:
e8:66:2d:51:52:f2:d0:46:36:b5:b8:cf:73:08:18:
9c:eb:d6:5c:fa:94:5a:e5:df:9a:80:26:1f:39:4d:
ee:93:4c:60:c9:07:1e:3b:47:58:e4:5f:b9:04:00:
f6:83:8e:76:1a:59:88:df:de:2e:76:7f:9e:c6:81:
3f:8d:32:8d:b5:cb:96:87:a7:e8:7b:ef:07:dd:21:
24:8e:7b:7a:00:0e:b0:c4:87:a0:87:71:b4:bd:af:
27:d2:ce:10:c7:5d:02:d6:94:56:a8:af:fc:55:b2:
7c:2e:12:63:a5:0e:a7:b4:98:57:07:bb:e4:06:00:
bd:c5:55:0c:bc:ad:ae:b3:7d:28:e7:b8:5a:af:08:
6e:d3:33:a7:ae:5f:21:93:c3:78:72:c7:6a:0c:8a:
51:3e:67:32:bb:d6:c2:ec:7d:9a:10:8e:97:eb:18:
8a:93:20:5a:ab:67:1a:19:e7:af:ab:d5:15:d1:4c:
45:e2:18:84:e9:6d:32:94:29:90:d1:00:26:81:77:
d4:7d:71:69:77:39:53:22:eb:67:1c:03:1b:91:b2:
bb:a2:4f:7c:fc:af:4d:57:5d:b8:79:28:d0:7e:14:
1b:7d:e5:66:dc:6f:48:19:29:ae:71:ed:e1:50:6b:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7B:34:8F:2E:D6:3C:9A:3A:60:7F:70:A4:1C:06:E0:FD:6E:DB:29
X509v3 Authority Key Identifier:
keyid:ED:CC:2D:27:91:30:D1:A1:BB:3E:E5:A3:B5:F3:32:30:57:B3:C4:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7243b8-a8f9-4520-80c1-0565f337dcbe/1/7cwtJ5Ew0aG7PuWjtfMyMFezxP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:99:22:3a:d0:ac:cf:1c:6b:59:91:a8:1d:c8:73:b7:97:d2:
02:2a:81:cc:69:f0:2c:88:5e:9e:0a:79:53:5b:59:11:e7:23:
c4:4d:4a:74:74:87:4a:39:2d:e5:b9:96:a6:47:08:bd:6c:33:
15:02:6c:c2:cf:b8:fd:c9:66:70:db:5f:00:0a:64:de:07:16:
f2:11:44:02:2e:4f:35:71:9b:dc:de:92:24:e8:d2:09:84:44:
26:6d:94:50:7a:c4:b7:ff:33:7b:a5:98:95:9a:37:e6:b6:fb:
fb:25:95:51:ee:f7:28:d7:22:b8:f1:57:54:fa:1e:9d:e1:a9:
90:88:a6:bd:84:39:f6:6e:af:9c:5d:6e:1f:62:40:38:9c:f7:
6c:24:66:5b:6c:f5:7a:ba:11:66:82:64:d5:f6:1e:80:f4:2b:
e9:2a:96:91:c8:77:0a:cf:b2:5f:99:ae:f9:e8:f3:7d:87:f9:
28:c4:13:10:24:31:e8:03:60:ff:5b:b9:24:fd:85:13:e8:55:
9f:06:06:e3:5b:8e:ee:b8:b3:2a:10:b5:21:cf:92:83:5d:b9:
da:5b:4a:d5:0b:1b:b1:74:df:0d:82:d1:77:f9:44:92:33:64:
12:2a:a4:57:90:f3:73:66:56:2d:3b:05:ca:48:c1:92:e7:94:
e7:fa:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:31:38 2025 by rpki-client