Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
File: rx7uIsUBU2MRinHSapRj3JN0uig.mft (raw, json)
Hash identifier: 0aAn+vfXMbqnH5ydGhL7T2dZZGY5NOjhD/AKAgVmn+0=
Subject key identifier: 72:B4:72:D6:E2:9B:8D:6A:9B:D5:98:78:7C:8D:98:05:E0:D2:DE:A2
Authority key identifier: AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
Certificate issuer: /CN=af1eee22c5015363118a71d26a9463dc9374ba28
Certificate serial: 01984B53AFE2E429171EC86D314239CDB5FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
Manifest number: 09B8
Signing time: Sun 27 Jul 2025 10:00:32 +0000
Manifest this update: Sun 27 Jul 2025 10:00:32 +0000
Manifest next update: Mon 28 Jul 2025 10:00:32 +0000
Files and hashes: 1: rx7uIsUBU2MRinHSapRj3JN0uig.crl (hash: /ZoNCVg4xiFQ33BVP+/y1U0Gs2bnPK/iU4XAd63dPW8=)
2: vtzVAFS2sSXFMY4pT9LQwpwKXN8.roa (hash: IK29JkUi3ofZEZGY2PidWdMxcE655gfnkWlaKv3tisg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:af:e2:e4:29:17:1e:c8:6d:31:42:39:cd:b5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1eee22c5015363118a71d26a9463dc9374ba28
Validity
Not Before: Jul 27 10:00:32 2025 GMT
Not After : Jul 28 10:00:32 2025 GMT
Subject: CN=72b472d6e29b8d6a9bd598787c8d9805e0d2dea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4b:34:6f:66:1f:27:59:b7:3d:fe:38:b4:1a:
59:01:b3:bb:1b:08:11:9a:d6:e0:97:35:83:58:4a:
88:f1:36:d8:77:04:7d:ae:24:d3:ae:66:7c:59:b6:
43:f5:75:fe:7c:96:08:1c:97:c7:1c:6f:a4:ab:2e:
ea:41:33:91:e2:76:23:da:d9:46:a3:55:a8:23:27:
90:91:03:11:d9:1a:2f:cb:9c:ed:ac:9a:3e:11:04:
e7:d3:8d:54:55:cd:c7:02:0a:da:92:f9:b0:6b:97:
f6:4e:a7:17:82:a4:2f:49:cd:7a:cd:eb:c3:76:33:
bb:93:b5:91:bd:4d:75:f1:5f:39:b0:fb:a2:19:67:
fd:de:50:bc:42:06:ff:5e:1e:89:8e:bf:bd:e2:a7:
72:13:21:69:2e:81:0e:a2:2e:f8:22:c9:09:28:12:
84:63:30:06:17:5f:92:96:54:e3:cf:69:02:5e:b3:
96:ab:59:ce:1e:d7:ee:92:f2:ed:ea:dd:6e:07:a5:
d8:4b:5b:5b:36:9c:80:a1:b3:94:6c:b7:19:1e:95:
5d:7b:b3:41:8d:c1:51:bf:5c:19:e1:c8:97:5f:34:
89:f2:d4:25:1d:01:28:e4:8a:62:3c:30:36:1d:03:
d3:f3:da:c1:da:ef:3d:8b:e7:d5:ae:de:d3:97:62:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B4:72:D6:E2:9B:8D:6A:9B:D5:98:78:7C:8D:98:05:E0:D2:DE:A2
X509v3 Authority Key Identifier:
keyid:AF:1E:EE:22:C5:01:53:63:11:8A:71:D2:6A:94:63:DC:93:74:BA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rx7uIsUBU2MRinHSapRj3JN0uig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/fdc2f4-2222-4f1b-a5e5-b2178ef2f82f/1/rx7uIsUBU2MRinHSapRj3JN0uig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:dd:83:29:1b:49:e2:38:d1:9c:ff:8c:63:d3:78:d3:ad:3b:
d5:ba:1d:20:4c:75:d2:c3:9f:55:42:35:d1:59:7a:63:ec:06:
c5:17:3a:b5:49:29:ab:ca:26:f1:da:94:e7:75:12:12:b4:18:
83:e7:c1:88:86:90:79:79:0c:14:dc:87:8c:d8:49:e4:a3:79:
db:e1:82:70:8d:5d:5d:98:57:17:19:30:89:dc:a4:e4:e0:11:
07:2d:34:d5:80:fa:94:c7:88:31:2e:7d:9e:7b:2e:52:7a:c3:
6e:02:24:f2:9d:d0:ce:56:80:1c:ca:95:96:4b:a0:c9:60:4b:
5c:63:56:c5:21:83:14:07:38:98:e1:7a:64:96:6f:63:39:47:
0a:86:f8:cb:47:4e:3c:04:14:8c:62:65:7f:13:66:c6:ac:09:
28:3c:51:92:1b:4b:d7:f5:08:fa:f3:ab:09:d6:34:08:f4:62:
3b:c4:02:19:06:d8:b7:d0:f1:41:ff:7c:4a:a8:cc:5a:8d:b4:
9c:15:0a:d7:a0:94:ae:c9:b2:f7:b7:be:87:b5:ac:22:00:25:
49:a8:54:6a:30:23:54:6d:dd:ec:fa:e4:5c:22:ef:5d:76:0a:
18:29:d3:83:4b:fc:1b:0b:63:a8:53:5a:6e:63:33:d3:d0:3c:
7c:00:9e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:36 2025 by rpki-client