Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier: DnL12TKMJXbOaKLGQCRD4O24EAiBhgg+J1FY4x/rC8k=
Subject key identifier: 1B:9E:EB:EB:02:C9:55:8E:8B:36:1D:89:1E:46:02:F4:E1:19:A8:7B
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial: 0198481BE3EDCB4BD1B4234FCBA289603CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number: 0293
Signing time: Sat 26 Jul 2025 19:00:43 +0000
Manifest this update: Sat 26 Jul 2025 19:00:43 +0000
Manifest next update: Sun 27 Jul 2025 19:00:43 +0000
Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: G5AzKpYJGrp6glagzlcfrXaM/1ijnQmVFds9bewSIvk=)
2: gylVxgv2wVCzGr0PfDa1DOljS0w.roa (hash: LJzn39XG+RijMzRlRM7pRtoqSA79D4mMA2x3jy4QHzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:e3:ed:cb:4b:d1:b4:23:4f:cb:a2:89:60:3c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Validity
Not Before: Jul 26 19:00:43 2025 GMT
Not After : Jul 27 19:00:43 2025 GMT
Subject: CN=1b9eebeb02c9558e8b361d891e4602f4e119a87b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:c0:25:39:2f:c9:5d:45:da:66:4a:9f:73:
7f:f6:09:d4:86:2b:14:8b:ce:9e:9d:c3:21:e3:f5:
23:fd:23:f0:a6:b0:6a:bd:ad:d5:aa:15:8c:9b:26:
32:f9:47:6b:c4:16:53:36:f1:24:8c:05:5b:56:e9:
59:04:59:27:f8:67:6c:db:96:da:9f:29:e8:b1:70:
c8:8e:80:03:57:34:6d:b2:9f:67:2e:bd:6e:a5:c0:
c7:ad:47:ab:d4:1d:aa:b7:2a:9e:20:19:10:70:53:
4a:6b:87:ea:8f:81:2c:78:f2:40:4c:15:a1:f1:e4:
a6:2f:d9:30:e6:07:dc:0a:eb:e5:20:57:f6:a4:75:
4c:e5:90:a1:e5:dc:73:33:fd:a3:85:e7:1d:02:2d:
c0:89:98:7b:f2:fc:f5:a2:1e:b6:46:56:1c:20:d8:
fb:c5:6f:b9:9c:05:9e:65:47:b4:ef:b1:09:5e:b2:
1e:33:2c:47:7f:80:37:db:df:f5:98:fa:ab:ab:cc:
7e:8a:6b:bc:1a:b1:32:99:92:d2:3c:7d:16:d4:7e:
01:b0:fd:63:9e:f0:56:1a:cb:c5:7e:cd:78:fc:da:
c4:89:aa:7a:d2:0d:10:3e:8a:79:ea:da:c2:64:7b:
48:57:d0:46:e9:c4:5c:86:de:ce:b4:50:39:8d:0e:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9E:EB:EB:02:C9:55:8E:8B:36:1D:89:1E:46:02:F4:E1:19:A8:7B
X509v3 Authority Key Identifier:
keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b1:ce:ac:b9:96:88:87:6b:b4:05:6f:54:a2:e5:83:4a:e0:
b4:ae:83:eb:5f:1e:ff:4d:ae:2f:bd:3d:e0:dd:eb:43:6e:36:
73:9c:9c:c2:97:32:d3:a1:59:d7:2c:ae:b0:cf:8d:ab:29:06:
ea:5a:55:cf:b8:79:0a:ec:ba:68:be:18:09:5b:bf:ae:16:73:
c0:ca:d0:1c:a1:fb:64:82:97:a6:a2:0a:25:33:d6:81:33:c5:
09:9a:b6:ce:7f:6f:f4:af:40:2e:ff:02:7b:75:92:a3:3f:e6:
51:59:0d:5d:51:19:8e:bf:4b:bd:c1:3d:6e:4c:df:8e:a1:ce:
05:20:af:49:7f:d1:a3:73:96:79:f1:b6:b7:f4:25:be:91:e1:
71:a0:6a:b9:ba:97:d6:c5:e5:e8:97:c5:19:cd:29:e7:d5:34:
26:8d:56:0f:42:5d:e9:95:db:43:96:d0:17:7d:e6:cd:bf:ae:
c8:af:98:23:61:5d:96:ed:a3:a5:95:f1:68:01:84:0b:30:67:
8c:13:76:44:9a:bc:58:12:6a:c2:9f:4e:00:90:c8:8c:ad:72:
b2:8c:a1:63:f1:f3:9d:1e:41:9e:6b:3b:36:cb:87:a4:9a:3d:
8c:9b:3b:b5:40:5d:be:19:db:66:aa:42:d2:5c:a7:e6:d5:94:
f2:a7:8f:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIG+Pty0vRtCNPy6KJYDzTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzk2N2FkMGE0NThiODI4MjllZTllMmNjZDZhZTk2MzFk
NTQyMTIwHhcNMjUwNzI2MTkwMDQzWhcNMjUwNzI3MTkwMDQzWjAzMTEwLwYDVQQD
EygxYjllZWJlYjAyYzk1NThlOGIzNjFkODkxZTQ2MDJmNGUxMTlhODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmarAJTkvyV1F2mZKn3N/9gnUhisU
i86encMh4/Uj/SPwprBqva3VqhWMmyYy+UdrxBZTNvEkjAVbVulZBFkn+Gds25ba
nynosXDIjoADVzRtsp9nLr1upcDHrUer1B2qtyqeIBkQcFNKa4fqj4EsePJATBWh
8eSmL9kw5gfcCuvlIFf2pHVM5ZCh5dxzM/2jhecdAi3AiZh78vz1oh62RlYcINj7
xW+5nAWeZUe077EJXrIeMyxHf4A329/1mPqrq8x+imu8GrEymZLSPH0W1H4BsP1j
nvBWGsvFfs14/NrEiap60g0QPop56trCZHtIV9BG6cRcht7OtFA5jQ7LfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBue6+sCyVWOizYdiR5GAvThGah7MB8GA1UdIwQY
MBaAFO45Z60KRYuCgp7p4szWrpYx1UISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQt
MmYzMjgxNmU3NzYwLzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC82NmVjNDMtMGE0OS00M2FiLWFkOWQtMmYzMjgxNmU3NzYw
LzEvN2psbnJRcEZpNEtDbnVuaXpOYXVsakhWUWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrHOrLmW
iIdrtAVvVKLlg0rgtK6D618e/02uL7094N3rQ242c5ycwpcy06FZ1yyusM+NqykG
6lpVz7h5Cuy6aL4YCVu/rhZzwMrQHKH7ZIKXpqIKJTPWgTPFCZq2zn9v9K9ALv8C
e3WSoz/mUVkNXVEZjr9LvcE9bkzfjqHOBSCvSX/Ro3OWefG2t/QlvpHhcaBqubqX
1sXl6JfFGc0p59U0Jo1WD0Jd6ZXbQ5bQF33mzb+uyK+YI2Fdlu2jpZXxaAGECzBn
jBN2RJq8WBJqwp9OAJDIjK1ysoyhY/HznR5Bnms7NsuHpJo9jJs7tUBdvhnbZqpC
0lyn5tWU8qePEw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 02:03:10 2025 by rpki-client