Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
File: 7CSoJiAgkayDGfDwbreW_YJCKw8.mft (raw, json)
Hash identifier: m5z7/v0+/r69UOrM/a08b81kC53sy/yNpRt415eoHeM=
Subject key identifier: 77:4A:16:4E:62:3B:99:BF:5A:A7:F5:6A:6B:D7:7E:F6:5C:44:63:50
Authority key identifier: EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
Certificate issuer: /CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Certificate serial: 019921B24302C8E2F990DA148D20FC53B34A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
Manifest number: 11
Signing time: Sun 07 Sep 2025 01:02:34 +0000
Manifest this update: Sun 07 Sep 2025 01:02:34 +0000
Manifest next update: Mon 08 Sep 2025 01:02:34 +0000
Files and hashes: 1: 7CSoJiAgkayDGfDwbreW_YJCKw8.crl (hash: w0da+EOPjuQ50rAdhTzVsR9XoAlLcs1m+HjkbxwlKQQ=)
2: EH144RlS9tYegrfhZ25_cqW-gBI.roa (hash: Ttw1qNIRRS2B0AROxbo5XeY9lM7BFHJCMEp5DgGhToo=)
3: VmGXZsZgI4pvH1fCkBq8qaWgLCs.roa (hash: sTPKL68aWFgc68j11xhbS7hhl1djwaAr+lQ2FflBKks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:43:02:c8:e2:f9:90:da:14:8d:20:fc:53:b3:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec24a826202091ac8319f0f06eb796fd82422b0f
Validity
Not Before: Sep 7 01:02:34 2025 GMT
Not After : Sep 8 01:02:34 2025 GMT
Subject: CN=774a164e623b99bf5aa7f56a6bd77ef65c446350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:96:19:c1:62:11:5a:47:62:e4:6e:94:59:
b7:4c:d7:17:40:65:a8:30:bf:e7:4a:29:2f:18:5f:
25:5e:01:95:02:ec:76:17:0d:4a:59:c8:70:6a:ae:
e9:11:d3:ad:36:a5:76:c3:7b:27:bf:37:7c:11:5c:
c2:e7:56:d8:dc:47:9d:aa:d7:5d:d8:1f:3e:d7:07:
43:72:2c:3a:e2:80:14:27:ed:16:72:46:31:65:9c:
66:3c:cf:1f:59:82:45:09:09:9c:fc:97:df:21:35:
69:bc:02:1b:3f:f1:41:f2:af:a7:99:7e:f2:e9:c4:
3b:40:f4:88:f4:6a:1c:d0:cb:28:d8:c3:0a:93:3b:
f9:cc:fb:0a:d8:f5:61:d9:66:b4:91:88:cb:c7:5e:
92:b7:bc:76:22:1c:e0:b8:ed:2c:b3:00:20:8b:13:
78:9d:9b:59:ce:dc:20:24:9e:61:27:37:31:95:48:
82:58:80:13:2f:08:d8:64:4b:b9:91:3f:a0:be:63:
29:43:af:24:ba:31:8f:75:1f:ce:46:81:3c:ae:bd:
8d:2c:42:7a:24:c0:59:44:f2:b9:27:a0:8a:50:94:
21:55:95:f4:1a:c0:f3:c6:59:1a:83:b2:8c:27:f3:
80:9e:71:64:4f:14:74:b7:dc:3d:64:4b:c5:f7:28:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4A:16:4E:62:3B:99:BF:5A:A7:F5:6A:6B:D7:7E:F6:5C:44:63:50
X509v3 Authority Key Identifier:
keyid:EC:24:A8:26:20:20:91:AC:83:19:F0:F0:6E:B7:96:FD:82:42:2B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7CSoJiAgkayDGfDwbreW_YJCKw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/986fe9-87cc-4d29-886e-d0ac1e048f67/1/7CSoJiAgkayDGfDwbreW_YJCKw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b2:19:c1:35:e8:4e:25:8c:26:e3:4c:fb:61:45:45:1d:f9:
56:76:b7:0b:c4:12:6c:ba:de:25:ed:5b:12:8c:a1:83:91:1e:
49:41:9c:82:51:94:c9:0d:6e:0e:7b:32:00:b0:59:f7:b2:38:
29:47:fa:fc:2d:f8:ab:10:de:1d:59:01:90:0c:a2:09:b8:51:
e7:de:93:04:44:6f:55:10:81:aa:46:d3:3f:3c:e9:70:5b:b2:
0a:82:97:56:1f:73:a8:c9:42:2c:b9:f6:be:83:66:f2:d8:63:
c8:fd:fe:94:bc:a2:4a:c6:8f:ce:cb:81:68:32:17:06:66:ec:
3b:61:81:d4:83:38:47:a4:f3:c5:5e:39:ee:c6:e7:a6:34:54:
5f:67:88:60:e4:4d:78:8e:80:b1:2c:17:fa:45:05:09:71:fc:
1c:b9:cb:06:38:6c:95:8f:3c:5e:a3:49:c6:2d:79:c1:78:47:
f1:2e:21:ee:e9:9b:4d:4f:27:f6:74:9b:41:09:79:38:da:d4:
49:d7:84:2c:60:50:fb:43:ce:4d:6d:33:d1:57:23:57:1c:d4:
f2:62:84:75:20:09:97:79:29:53:85:55:6d:ae:d8:6e:37:70:
2b:3a:74:b9:c6:cb:2c:46:a2:53:80:d2:72:21:eb:43:08:f7:
bc:fb:5a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:50 2025 by rpki-client