Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
File: 7JjcJavXq2PjW2KOqsKlTZSan0Y.mft (raw, json)
Hash identifier: XzJxp6OQ4R3EJkXVIrTRgHAVhZzBUXqmIfTz1sc/rSg=
Subject key identifier: 91:41:68:0B:2F:3E:7E:B3:0A:4C:6C:9E:3F:C4:C8:83:FC:EB:21:8D
Authority key identifier: EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
Certificate issuer: /CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Certificate serial: 0198511FEDE751B2977B25F3A2602C4BB3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
Manifest number: 0989
Signing time: Mon 28 Jul 2025 13:01:43 +0000
Manifest this update: Mon 28 Jul 2025 13:01:43 +0000
Manifest next update: Tue 29 Jul 2025 13:01:43 +0000
Files and hashes: 1: 7JjcJavXq2PjW2KOqsKlTZSan0Y.crl (hash: LUAhWdb/XDeXJALbH4EX/zPkkS2ko1Dmmr05PEXmLcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:1f:ed:e7:51:b2:97:7b:25:f3:a2:60:2c:4b:b3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec98dc25abd7ab63e35b628eaac2a54d949a9f46
Validity
Not Before: Jul 28 13:01:43 2025 GMT
Not After : Jul 29 13:01:43 2025 GMT
Subject: CN=9141680b2f3e7eb30a4c6c9e3fc4c883fceb218d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:49:4f:d1:ca:a6:e0:35:be:0a:43:76:d3:4d:
09:ff:19:71:b4:6b:96:22:03:39:3c:ba:a9:a0:77:
26:3f:21:ab:b4:72:f3:ab:96:90:7c:b4:b3:57:a1:
06:71:1b:25:b4:f4:fe:09:67:26:06:32:01:00:8d:
64:fb:48:23:39:c5:f6:9f:45:b3:9a:d1:2f:cc:76:
e0:3b:d0:53:17:4e:c2:d5:a2:72:c7:bb:54:d3:b3:
9c:25:25:f2:af:49:94:bb:7d:fb:de:8d:16:64:3c:
56:ff:85:22:5d:d4:a4:05:34:75:db:5d:27:ca:ee:
02:6b:e5:cf:a9:16:ba:e9:91:2d:a2:9d:d8:a7:1b:
0f:db:e4:4e:86:82:f3:24:48:da:b3:46:3b:66:b9:
2c:c0:18:18:81:6b:c7:00:8f:ba:14:c6:bd:84:e1:
db:52:49:f6:36:ba:da:b7:80:cf:a4:59:17:ce:19:
2b:28:69:63:7e:55:15:d9:e3:46:24:c8:c9:da:ff:
b8:cc:7b:12:ad:4a:e4:44:dd:a6:94:ab:31:52:3c:
7b:62:8f:19:4b:df:0d:b3:cc:0b:46:f0:0c:62:2a:
ee:28:d5:7d:0a:ba:f1:49:0d:67:82:b9:25:84:0a:
47:b5:d3:75:f9:bf:61:0d:f8:79:49:78:68:69:c2:
f1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:41:68:0B:2F:3E:7E:B3:0A:4C:6C:9E:3F:C4:C8:83:FC:EB:21:8D
X509v3 Authority Key Identifier:
keyid:EC:98:DC:25:AB:D7:AB:63:E3:5B:62:8E:AA:C2:A5:4D:94:9A:9F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JjcJavXq2PjW2KOqsKlTZSan0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f1f62d-089d-4aea-9221-d5b3d7fccfe4/1/7JjcJavXq2PjW2KOqsKlTZSan0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:de:fc:65:9c:5b:b3:f2:59:73:c7:88:f4:ad:d7:2c:35:ad:
4c:b4:72:12:31:7e:8e:1b:ff:16:4d:b7:b8:e6:cf:b4:d5:f7:
3c:b3:2b:aa:b6:c7:61:cd:e2:fa:a2:15:9c:3c:79:5b:9b:1a:
94:ea:2b:cc:2b:98:dd:21:82:d5:c5:35:80:49:a6:43:ee:61:
31:21:a4:3a:76:56:d6:3a:f1:16:ba:d6:93:74:e8:3c:8d:b7:
8b:08:47:41:a4:66:d6:95:d6:95:c9:3c:c8:73:65:25:b3:63:
7e:69:ad:87:33:95:94:77:fa:ef:4d:67:de:f7:8f:2e:ba:a8:
10:55:96:e9:7a:d9:a6:c4:19:e0:0e:46:1c:f8:f2:95:47:39:
af:a4:29:7d:f3:dc:cf:a3:78:93:9e:59:b4:ab:09:07:13:7d:
e2:8e:f2:c0:20:b0:0d:6b:40:06:32:59:e8:ae:9f:59:5b:70:
ee:be:33:c9:2e:80:0d:4e:af:12:66:1e:43:72:0e:5e:a2:10:
13:27:fd:d1:36:24:de:fe:31:ff:35:7c:b4:62:85:b1:8a:e5:
42:ed:33:be:ba:85:ae:cd:19:c4:4f:ee:c5:9d:0e:e3:08:5d:
aa:78:54:76:ca:24:1a:c3:95:65:54:df:d1:31:e2:6a:10:c0:
c0:f9:55:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 20:17:54 2025 by rpki-client