Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
File: 7512O0ngJKe2oZ6vffuYkRqclMg.mft (raw, json)
Hash identifier: p+FwxREKcn5ioY/Dzoj2MRFnRAyNGdnNrVIb3gzwwDs=
Subject key identifier: 22:32:D2:67:EC:E5:23:75:E5:9B:67:CB:C8:04:1A:F7:85:76:89:17
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial: 01982891AA0BCF73897BE7C41B43D04B739F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
Manifest number: 15FA
Signing time: Sun 20 Jul 2025 16:01:31 +0000
Manifest this update: Sun 20 Jul 2025 16:01:31 +0000
Manifest next update: Mon 21 Jul 2025 16:01:31 +0000
Files and hashes: 1: 7512O0ngJKe2oZ6vffuYkRqclMg.crl (hash: MGXT4Tpttu0prfrEITk4qa/c2MwfGqZiQ86gNPj80Qg=)
2: LSx9OlKUNiN9N5Lzmn4mpgYUaYM.roa (hash: SRtMriKTJRyDfQ60LOh5mHm3HAzdoYJatQZ33jFO0KY=)
3: Yzpl7dcbDV1oc45l6H78VWlDWek.roa (hash: rLWJRRPMzAUWRBDLzYpnEF8zI53ESvU9cKsYN1kvko0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:91:aa:0b:cf:73:89:7b:e7:c4:1b:43:d0:4b:73:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Validity
Not Before: Jul 20 16:01:31 2025 GMT
Not After : Jul 21 16:01:31 2025 GMT
Subject: CN=2232d267ece52375e59b67cbc8041af785768917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ed:14:34:db:04:5f:4e:83:80:05:a2:f9:e8:
9f:d2:91:78:76:d9:f0:a5:6e:65:55:7a:8a:c3:1f:
c0:e7:75:6a:9a:88:1f:bf:69:c4:cc:87:15:52:f1:
5d:cc:c2:16:78:74:79:7f:3c:d2:f8:ee:d2:55:c5:
b7:7d:e9:5d:27:f4:d6:36:ed:15:46:23:99:60:6f:
db:83:7b:82:1b:78:00:b5:8e:8e:92:6b:d1:54:0d:
70:79:d1:14:99:bd:ff:40:20:dd:96:29:93:f6:f1:
69:03:c7:5f:ca:b7:8a:de:9b:f1:4e:c7:bf:cc:14:
30:69:f4:fe:47:69:fb:d2:25:e1:51:d6:1b:c4:a6:
1a:f4:82:1e:fe:ec:fb:84:a5:d7:80:81:bf:86:e1:
92:c9:21:e5:9e:ea:ed:ea:b0:ba:d4:4d:a7:7a:93:
df:04:81:c7:11:9d:e6:d3:18:89:f8:be:cd:0c:0f:
f6:25:8b:81:14:f5:12:a1:26:7d:b5:3d:4d:df:aa:
b5:6b:dd:a5:9b:8b:d9:8c:1f:39:ed:a8:06:fa:2a:
49:1a:5a:49:9e:44:c6:74:90:b1:43:ae:79:72:bc:
72:53:9e:38:38:f8:34:79:32:d1:81:fa:ef:fe:3f:
03:ca:f5:d1:19:25:d6:e9:a7:2d:58:55:0c:57:40:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:32:D2:67:EC:E5:23:75:E5:9B:67:CB:C8:04:1A:F7:85:76:89:17
X509v3 Authority Key Identifier:
keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8c:16:dd:3d:73:5b:fa:a8:72:dc:1f:b8:40:95:85:f7:56:
9b:aa:aa:80:60:3a:f3:31:95:47:dd:b5:6c:49:52:81:2e:9f:
13:da:88:5d:38:13:e2:af:3a:36:40:0e:b3:1f:96:74:58:16:
79:d6:53:32:99:4d:97:f8:ef:27:39:be:bb:85:9a:87:fd:48:
95:12:7d:83:f5:90:45:ac:fe:21:d1:0b:69:ce:32:c5:be:67:
6e:e1:40:82:21:7c:92:ae:e6:4e:74:71:75:fc:a8:ad:ec:3c:
5e:35:8c:96:39:a1:51:59:5c:5b:06:9c:79:94:81:08:9c:42:
42:c1:35:6e:41:db:1b:5a:f0:e2:b3:b4:ce:2a:0e:29:ee:ae:
b1:f7:fe:a2:ec:84:17:ff:df:d9:32:64:e1:0d:93:1b:0c:3f:
d1:c8:75:d4:21:65:df:10:0a:00:15:4e:8e:0f:8c:97:d5:71:
d0:9a:45:f0:a0:99:73:c5:ef:a3:fb:bc:2f:fe:07:7e:d7:50:
0b:37:8a:0a:8e:c3:36:56:f6:6e:66:53:5e:2e:e6:c0:32:c0:
7a:37:9a:ad:89:d4:29:00:b3:78:4c:62:8f:e4:b5:11:21:38:
6f:eb:48:13:15:09:65:08:3c:e1:ba:09:bf:cc:77:b5:f1:79:
d3:51:06:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 20:13:39 2025 by rpki-client