Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
File: 7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft (raw, json)
Hash identifier: RO0TaJI+DqWBvrcxak+BxyIyV8e8hp9nrHx0hY+/L/E=
Subject key identifier: B7:EF:C2:9B:83:EC:33:9E:E2:2C:AD:74:B4:84:3C:4B:00:D2:A5:64
Authority key identifier: ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F
Certificate issuer: /CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
Certificate serial: 019856EB48E573998A32452B71A50F8D8259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
Manifest number: 0441
Signing time: Tue 29 Jul 2025 16:01:56 +0000
Manifest this update: Tue 29 Jul 2025 16:01:56 +0000
Manifest next update: Wed 30 Jul 2025 16:01:56 +0000
Files and hashes: 1: 7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl (hash: 7RkInlTpJ5YJ0mqGNrLn6Zmlsn36QrIkWUIUiNbvhVA=)
2: tv6tClbvL3fe6dvTJo3FM5f_h3Y.roa (hash: A+tnxsTWmCeZid4USiunoHsPUSXZ+9POOmWlZ50vqKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:56:eb:48:e5:73:99:8a:32:45:2b:71:a5:0f:8d:82:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed772c2fa23be6fa8e28aea4a715d5ac31f0cc9f
Validity
Not Before: Jul 29 16:01:56 2025 GMT
Not After : Jul 30 16:01:56 2025 GMT
Subject: CN=b7efc29b83ec339ee22cad74b4843c4b00d2a564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:b2:fb:7e:60:60:d5:62:78:db:2e:ec:bb:
57:3a:45:0b:17:ff:06:6c:b0:3f:10:3d:e9:47:5d:
90:1e:23:03:64:29:1d:a8:77:f1:0b:45:83:3e:55:
67:04:dd:ac:ca:01:ed:b6:4b:a5:21:8d:9f:22:9c:
d8:bc:19:db:28:f1:ef:5d:4a:46:24:d6:4e:c2:8b:
18:cf:85:1c:0f:c5:99:cc:c5:2e:81:08:ba:15:6b:
6c:b4:b8:b4:b2:81:34:9d:ae:aa:c5:85:6b:d4:a6:
d2:23:80:31:c1:93:04:1b:e0:fd:8d:a0:c3:95:6c:
e4:49:b0:11:81:30:db:b9:37:7a:d7:cc:bc:ed:a3:
20:d6:69:fb:44:26:b6:82:9c:f6:3f:34:2a:9c:32:
f2:7e:39:ef:14:e4:57:dd:d2:3d:10:f2:69:3f:a3:
4a:9d:bd:1b:cf:e5:cb:50:14:8d:8a:86:38:c7:6a:
7e:a3:08:da:f6:0b:99:c5:8f:b8:c5:c4:8a:a7:56:
ff:9d:dd:3f:f3:91:7c:69:57:00:c7:fb:7b:be:8f:
b1:07:93:ae:4f:98:1f:5a:93:67:ad:7a:70:2c:87:
f8:99:fe:17:c1:22:1d:90:aa:9e:b6:b2:b4:03:20:
b0:44:92:7c:62:3c:31:16:f8:69:d4:bc:61:07:db:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EF:C2:9B:83:EC:33:9E:E2:2C:AD:74:B4:84:3C:4B:00:D2:A5:64
X509v3 Authority Key Identifier:
keyid:ED:77:2C:2F:A2:3B:E6:FA:8E:28:AE:A4:A7:15:D5:AC:31:F0:CC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XcsL6I75vqOKK6kpxXVrDHwzJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/790648-dd90-44eb-9a8f-8fa09874113e/1/7XcsL6I75vqOKK6kpxXVrDHwzJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:43:4b:d5:32:52:e0:58:b4:56:07:f8:be:f3:f2:59:0d:37:
97:5e:7f:8d:b0:c2:99:1c:b9:99:68:92:b2:b2:e5:81:77:98:
c2:20:13:10:25:4f:2e:e7:d6:2f:8e:9d:b9:d7:fa:97:5b:37:
f3:99:fe:36:e8:42:47:8b:84:38:e1:85:52:80:8d:be:b3:bb:
54:10:6e:60:09:46:a8:90:bc:bd:d1:fd:9e:ba:26:a6:a4:21:
a6:a8:62:79:71:02:15:1a:79:f6:18:30:5d:af:15:79:05:05:
4c:b3:ff:9e:cb:57:bb:e2:33:a7:03:ea:c3:65:9e:a3:ae:1f:
c9:c3:07:9c:8e:09:c8:f3:78:cb:fd:10:e1:a8:52:24:db:a2:
8e:60:e2:9c:db:b4:82:55:2f:64:27:ce:b7:16:f2:fd:97:a4:
04:cd:f3:e2:3f:aa:bc:eb:4c:6a:9e:33:c6:b7:4e:9b:9d:df:
18:a3:5c:22:b8:b6:55:80:a7:ee:6f:0b:51:b7:51:4b:25:f0:
bc:f6:8e:37:c4:5f:cb:61:20:39:fe:c4:45:a5:4a:cd:10:e1:
c9:b4:e0:a2:e6:c1:8b:38:eb:b1:84:3e:f8:fc:fc:8a:8b:0b:
fb:c9:30:f1:b0:aa:c3:a0:5b:6d:7f:d4:de:77:1e:6e:da:34:
ad:bd:f5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:24:55 2025 by rpki-client