Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
File: en7OlN5d9qGjTJjsZtPZaOWymyE.mft (raw, json)
Hash identifier: t2WjxgXXinuJBPiqnhrVKhhUZTJT9emsB8gpOcFeYCI=
Subject key identifier: BC:6D:39:47:46:8C:72:45:E1:F0:9B:8C:C8:60:FE:90:3A:B1:81:E3
Authority key identifier: 7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
Certificate issuer: /CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Certificate serial: 0198537B62BD3D340A1E8860165ED568CE20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
Manifest number: 0CE7
Signing time: Tue 29 Jul 2025 00:00:51 +0000
Manifest this update: Tue 29 Jul 2025 00:00:51 +0000
Manifest next update: Wed 30 Jul 2025 00:00:51 +0000
Files and hashes: 1: NdVYKLIGP2QzOZX__MqzIgHzXXA.roa (hash: JpTAajbqtuyws0Zyn29UdijI9/GnNDr8LpptWtQUD6A=)
2: en7OlN5d9qGjTJjsZtPZaOWymyE.crl (hash: Ksfo06ko3zaJ7icihA81UDJMmRSYzm8OiDap4SspOjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:62:bd:3d:34:0a:1e:88:60:16:5e:d5:68:ce:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a7ece94de5df6a1a34c98ec66d3d968e5b29b21
Validity
Not Before: Jul 29 00:00:51 2025 GMT
Not After : Jul 30 00:00:51 2025 GMT
Subject: CN=bc6d3947468c7245e1f09b8cc860fe903ab181e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:91:30:e3:7e:39:4e:e5:eb:a9:fa:4e:f6:
df:97:67:92:19:5d:0b:f1:bd:df:fa:c9:ae:28:fc:
ea:30:d2:f0:51:f1:ab:bd:7e:02:20:20:a8:49:40:
c7:a3:60:0b:47:38:40:2d:c8:7c:dc:30:d6:ab:20:
ab:17:90:55:0a:31:41:78:30:f4:2c:2e:ae:56:11:
81:da:24:ce:c2:5c:e7:3c:4b:fa:75:95:23:2a:80:
47:51:ae:b7:69:7b:d2:c6:2c:be:46:2b:4f:9a:90:
21:bf:40:f1:2c:48:5b:ea:18:a8:92:3d:4a:b0:5b:
9e:83:40:c4:dc:ef:34:00:43:f9:22:f7:a4:78:c5:
1d:2d:c1:8b:ab:d4:3e:7c:83:98:1c:d7:e2:e1:15:
39:be:46:17:d4:51:49:68:a6:48:2f:5c:b6:c0:4b:
8c:57:67:ff:a8:97:36:c1:25:56:85:d3:01:6c:c7:
3d:f7:a6:7f:c5:c9:15:6e:12:87:18:69:07:1c:c8:
32:2c:91:d8:0e:87:ed:a8:4f:16:0c:72:04:35:10:
8f:c8:14:64:59:2d:59:46:3b:45:64:ff:1b:62:91:
31:b7:88:ea:d8:bc:13:b7:b4:63:6a:d6:fc:22:d4:
ca:08:0d:42:54:79:a0:57:a8:93:f6:b4:da:55:6c:
b9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6D:39:47:46:8C:72:45:E1:F0:9B:8C:C8:60:FE:90:3A:B1:81:E3
X509v3 Authority Key Identifier:
keyid:7A:7E:CE:94:DE:5D:F6:A1:A3:4C:98:EC:66:D3:D9:68:E5:B2:9B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/en7OlN5d9qGjTJjsZtPZaOWymyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/bf4e88-0058-4df8-999a-fae5fe900cbd/1/en7OlN5d9qGjTJjsZtPZaOWymyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6d:2a:46:b6:b2:0a:a1:ad:1b:7b:5f:bc:57:e5:f6:9b:a7:
23:35:ab:51:fa:e3:07:5c:81:95:e1:bc:e3:3e:56:c3:df:d7:
8f:8e:ea:3a:aa:df:d6:51:2f:24:70:e4:ca:27:cb:b2:95:e1:
fb:dd:64:9d:09:08:82:fd:16:ba:fd:25:a8:bd:d3:2a:c9:c5:
b5:3e:ad:62:42:6f:e7:4c:9c:31:aa:8f:db:ee:26:7e:34:b2:
17:b8:5c:f5:55:b5:72:5e:ce:cc:9e:9b:64:eb:f4:a8:92:da:
e0:69:67:f1:2c:09:40:d4:dc:71:b6:5b:29:1a:b1:65:5c:d5:
46:c6:95:fa:6a:49:c2:d4:b3:a6:38:47:04:61:c3:86:b0:d3:
25:ab:27:17:26:1a:fc:db:ea:de:75:ad:2b:26:6e:e5:31:c6:
93:e7:5d:c0:10:9e:17:fe:28:13:a8:48:2e:39:fd:28:58:ef:
a8:12:21:d5:1c:fe:ad:8d:2a:04:db:88:ad:14:e5:4e:72:04:
a4:30:17:79:6d:03:37:8e:6f:0f:b4:3b:28:ee:f1:b0:f9:e1:
96:92:f0:b6:9c:92:36:36:47:f8:39:51:33:01:5a:db:09:ce:
0a:97:39:d2:de:8b:15:8e:05:f9:97:34:65:f3:56:45:2a:87:
3e:f4:34:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:45:13 2025 by rpki-client