Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
File: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft (raw, json)
Hash identifier: iQIAs02/w0br1Jif2FpYJD1SLGYPHbCtvVRzPP5iV6k=
Subject key identifier: A0:FD:0C:27:EB:67:99:14:0A:0D:0D:DC:A7:5A:22:6A:6F:17:A6:D4
Authority key identifier: 7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
Certificate issuer: /CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Certificate serial: 019849D377FD22AF9ADB30F573B80B079D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
Manifest number: 0436
Signing time: Sun 27 Jul 2025 03:00:52 +0000
Manifest this update: Sun 27 Jul 2025 03:00:52 +0000
Manifest next update: Mon 28 Jul 2025 03:00:52 +0000
Files and hashes: 1: OxZ_SQFVJ8uzPWSjGADnIMI-uGA.roa (hash: cxXlIHKPRbElTrIxapfIyNaAYnC9ppfTzQIGpRQ/AhY=)
2: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl (hash: gQil/7UD4QlZobnnIdDaQP3WZT0Dr/IXLqY8gRf8UeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:77:fd:22:af:9a:db:30:f5:73:b8:0b:07:9d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Validity
Not Before: Jul 27 03:00:52 2025 GMT
Not After : Jul 28 03:00:52 2025 GMT
Subject: CN=a0fd0c27eb6799140a0d0ddca75a226a6f17a6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:16:16:60:d8:6c:b7:23:1a:1d:d9:de:9e:
cd:31:1a:f1:a4:50:49:16:66:71:95:cb:21:52:80:
8a:df:ae:08:b0:8a:eb:9a:ec:a6:6c:a8:d8:37:a0:
2d:d0:0b:76:94:8d:d9:f8:2e:68:fd:51:da:0b:78:
be:5e:f4:b5:22:89:ae:2b:f7:d1:a3:2d:fd:94:bf:
b7:10:05:26:f1:aa:bf:c1:d7:ba:69:06:32:89:8e:
46:ba:64:f8:b4:a3:53:eb:b1:15:d4:66:94:3c:26:
e9:37:d8:26:e7:64:15:5a:64:7f:97:a3:0a:e9:73:
6f:a7:b9:2b:93:0f:d3:8f:25:18:06:c3:fa:ec:4a:
c0:fc:a7:b4:bc:1b:fc:f2:fa:6e:79:58:0a:ca:95:
11:a8:75:f6:f0:ed:59:d7:3c:b6:df:b8:60:ec:b6:
49:5a:e4:e2:92:df:9c:f0:0b:78:91:95:44:96:40:
39:01:ba:8f:d5:7d:52:87:ab:34:42:e2:a6:62:4b:
c6:a5:3b:7b:20:af:00:d5:97:e0:73:7f:d6:f8:5e:
00:b9:bd:d2:e7:1a:e5:c4:0d:d9:45:48:bc:09:35:
86:52:3e:81:49:cb:a6:82:75:ef:4d:c8:6e:37:0b:
d1:23:ec:13:d5:5c:72:d3:8c:45:45:4f:6d:4a:69:
c0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FD:0C:27:EB:67:99:14:0A:0D:0D:DC:A7:5A:22:6A:6F:17:A6:D4
X509v3 Authority Key Identifier:
keyid:7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:16:36:d6:93:70:80:19:cf:37:1d:e9:2d:39:02:0a:ec:b5:
4a:8b:4c:a4:bf:d4:95:46:46:b1:a8:de:46:c5:bd:77:7c:b2:
c1:a6:fa:25:d8:4f:5e:8d:2d:63:64:bf:33:d1:ea:0b:c3:52:
69:8e:01:5a:81:42:a4:5c:31:5e:14:07:40:1f:c0:80:eb:cc:
55:ed:ff:66:fe:c2:bf:84:7b:91:b4:a7:69:a3:50:8d:44:20:
46:39:ab:97:b7:86:60:a8:af:c4:d6:3b:f3:41:96:1e:27:c4:
f9:ff:3e:16:79:17:ba:35:7a:e3:79:7d:94:e2:b4:7b:0f:0b:
4f:16:99:9a:5f:55:d9:aa:4a:e0:b0:62:6d:0e:dd:25:d9:e3:
2b:60:47:80:b3:07:9f:e8:2a:d2:30:d1:ce:ea:40:e9:0b:cb:
1b:24:4b:7c:d3:a6:86:1a:ed:d6:d7:8f:f5:fc:82:90:31:31:
9f:1f:02:fe:8b:c9:d9:0a:1f:90:d8:82:48:d2:d9:20:d4:cf:
c2:2f:a8:2a:07:e1:ad:db:53:44:d5:fd:da:63:bd:7c:ef:ae:
9c:83:82:9a:79:d5:0f:20:39:20:63:12:77:75:d4:37:10:c8:
9d:82:32:a9:d5:09:01:45:be:28:87:6f:af:e4:52:de:db:1c:
63:9e:58:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:54:42 2025 by rpki-client