Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
File: 7jcJhfg_QTMBEcNQzWseHurVJqo.mft (raw, json)
Hash identifier: Z8yL/wFA8Xq1sW8NFAUwGFzKcfzFUN92qLxSMsZKHzU=
Subject key identifier: 2B:7D:E0:81:4F:5F:BC:B7:BC:17:45:F7:95:C5:8F:62:F2:0E:5F:02
Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
Certificate issuer: /CN=ee370985f83f41330111c350cd6b1e1eead526aa
Certificate serial: 0198469B2C7EF761C97336BD7FBAD003F24A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
Manifest number: 1605
Signing time: Sat 26 Jul 2025 12:00:31 +0000
Manifest this update: Sat 26 Jul 2025 12:00:31 +0000
Manifest next update: Sun 27 Jul 2025 12:00:31 +0000
Files and hashes: 1: 7jcJhfg_QTMBEcNQzWseHurVJqo.crl (hash: MBSGWCpHnc7TWNDkYNkPr9RbnVrH9O0Q4fqMPgYJyPI=)
2: YMiovkkM1pTRsj2s2pWWavdNH3M.roa (hash: d26rfkrfXfTKQZRjWJD5TAVJi3E84OTuQPo2eEaVnMI=)
3: cXrx1ROqbRYTJpBaY9JfsPVk3Ow.roa (hash: e0I94SNdLBs+vaXUAirpLtLE8FeKHQEH/NhmFQRxO+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9b:2c:7e:f7:61:c9:73:36:bd:7f:ba:d0:03:f2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa
Validity
Not Before: Jul 26 12:00:31 2025 GMT
Not After : Jul 27 12:00:31 2025 GMT
Subject: CN=2b7de0814f5fbcb7bc1745f795c58f62f20e5f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:10:05:c2:02:38:58:c1:d9:eb:2a:55:1d:
d9:a7:f6:69:85:9c:62:d2:aa:f0:6a:fe:43:d3:cc:
45:e3:e3:28:91:78:45:82:01:27:1d:17:a0:11:f1:
e7:0e:af:6c:b5:60:74:3e:db:76:85:88:ac:37:b4:
29:a4:b3:28:fd:d1:60:67:5b:85:f5:5e:80:05:5b:
c3:af:d4:21:be:51:a4:9c:1e:16:5e:82:a7:34:e4:
1a:ea:22:d2:7e:10:a5:05:cd:cd:45:00:96:eb:ee:
f0:18:ec:3d:c2:1c:99:ef:45:3e:f8:4d:f6:b6:87:
c0:cc:93:b2:24:67:33:82:8a:8b:b4:46:c3:1c:34:
c0:8d:9e:cc:54:8a:c0:2d:30:b0:6a:3a:a3:6e:5b:
36:e9:d5:7f:91:33:c6:ad:39:0b:3c:c1:13:fc:b6:
ea:68:3b:e2:92:10:09:88:22:a0:1d:d6:af:1f:c2:
eb:5f:51:e0:ab:26:4f:3e:0b:50:a0:19:ed:67:fc:
3b:15:76:80:24:5d:02:43:26:1a:b7:41:22:3c:c6:
19:50:9f:66:bc:a4:3b:f1:f8:56:48:de:00:66:5b:
69:28:5c:ab:55:70:d3:16:fd:e3:c6:a9:55:b1:92:
0d:f0:8b:b2:a0:9e:90:fc:82:2d:5c:e8:8b:8e:ca:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7D:E0:81:4F:5F:BC:B7:BC:17:45:F7:95:C5:8F:62:F2:0E:5F:02
X509v3 Authority Key Identifier:
keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d1:5e:72:96:de:be:db:5e:85:03:6a:c6:d4:18:99:4d:c1:
25:10:e0:ba:10:60:65:51:cc:8b:be:f5:b1:17:14:90:fb:3b:
b1:99:d0:2a:31:cb:f5:d2:76:86:2f:96:ff:9c:7b:36:7f:12:
5c:c1:40:de:e3:fe:fd:64:ab:4b:28:3b:06:11:b0:6a:67:27:
6e:32:88:9b:6e:44:f0:77:1a:fc:89:da:dd:aa:a7:3a:f0:b2:
b2:dd:f1:c8:62:ac:9e:de:aa:05:66:25:29:a1:6f:14:ed:fb:
57:60:1f:c7:ab:71:8b:e2:56:eb:27:af:96:13:ad:8c:fc:81:
bc:06:22:82:9c:9b:d8:37:3a:4b:cc:3e:f9:45:08:0c:31:da:
f6:24:89:8e:31:d5:92:d8:76:ba:a4:b1:9d:e2:c5:3e:d4:ef:
ce:50:b3:43:2e:04:33:c9:c7:0e:5a:d6:97:4a:a8:41:d0:01:
e2:49:23:73:12:bc:d5:83:50:f3:aa:7b:de:64:3b:06:bb:32:
21:cd:06:d1:d8:4f:36:fa:8f:b3:24:1e:36:00:14:0b:9f:60:
1b:fa:8b:fd:a4:83:ae:09:65:a2:59:4a:2c:63:88:35:f5:49:
01:58:80:6b:b3:ec:27:d1:e2:81:dd:05:72:cb:af:79:c1:71:
38:36:b0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:59:22 2025 by rpki-client