Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
File: t7GVtlEuyHh9maGy5OvYCIT5gLI.mft (raw, json)
Hash identifier: hcWJkokDEdrUYWMXxmhnPCzyLnadGKEFVzXm2UlDg0c=
Subject key identifier: 14:7D:24:C7:A6:7E:15:09:C1:0F:07:24:FC:15:A2:89:E5:6D:15:CA
Authority key identifier: B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
Certificate issuer: /CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Certificate serial: 0199228CB40748EA1E9EC2F5BF793B3CD533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
Manifest number: 024C
Signing time: Sun 07 Sep 2025 05:01:10 +0000
Manifest this update: Sun 07 Sep 2025 05:01:10 +0000
Manifest next update: Mon 08 Sep 2025 05:01:10 +0000
Files and hashes: 1: 5w_9JQX98jnIEcg67nkgGTJIRO0.roa (hash: UWly5Q/cVxLTnL0NxMmtD+E+9W1QFCDtSfYzLoDl3EA=)
2: t7GVtlEuyHh9maGy5OvYCIT5gLI.crl (hash: 0FCUVBQ0F6sdAGuXpGnggQ/qxkUG1jl5EVlcHy8V9qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b4:07:48:ea:1e:9e:c2:f5:bf:79:3b:3c:d5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b195b6512ec8787d99a1b2e4ebd80884f980b2
Validity
Not Before: Sep 7 05:01:10 2025 GMT
Not After : Sep 8 05:01:10 2025 GMT
Subject: CN=147d24c7a67e1509c10f0724fc15a289e56d15ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e7:3d:aa:47:fb:4a:8b:e0:ab:98:bb:f4:d5:
c0:fc:8f:cd:07:2e:ed:6f:3b:94:9e:22:38:94:ec:
91:df:d1:54:00:70:61:fe:89:b6:94:d1:7a:6e:a6:
23:73:76:3b:39:48:5c:6d:78:b7:e0:88:59:35:2c:
37:b7:5c:4c:4c:12:dd:db:ce:06:32:f4:9c:27:63:
dd:cf:24:a4:2b:b7:29:aa:01:ca:00:e5:0f:d6:14:
cd:58:0a:e5:bc:1d:04:52:5c:71:2c:86:8c:6c:11:
ce:e7:26:ff:0e:a7:9b:b8:75:ee:c2:2a:28:a6:f1:
24:30:0c:7e:25:01:62:6e:de:7a:88:94:d7:3b:2f:
c4:ad:e9:22:17:f9:f4:73:2d:09:83:0c:2e:63:91:
12:c2:ad:70:f8:26:7a:18:25:52:da:41:54:be:38:
e3:41:c0:d1:2b:04:70:70:26:9e:11:ab:9c:c6:bd:
2e:85:ea:7d:e3:ce:b4:73:59:f6:d4:28:4d:da:7e:
fe:c4:1a:99:2c:c1:04:2b:b4:a8:eb:b5:05:2b:bd:
8e:cf:06:a4:64:62:d6:d1:31:5a:12:0d:78:8d:39:
ad:24:55:99:53:f6:f7:5b:1d:20:7e:58:68:f4:a0:
8f:17:ed:22:a1:c1:7c:56:bd:5e:36:e9:16:ac:87:
8a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7D:24:C7:A6:7E:15:09:C1:0F:07:24:FC:15:A2:89:E5:6D:15:CA
X509v3 Authority Key Identifier:
keyid:B7:B1:95:B6:51:2E:C8:78:7D:99:A1:B2:E4:EB:D8:08:84:F9:80:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7GVtlEuyHh9maGy5OvYCIT5gLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/fcfd27-14c8-4844-9fff-b388110a3078/1/t7GVtlEuyHh9maGy5OvYCIT5gLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:41:98:6b:21:04:e5:dc:02:3b:5b:a6:d6:46:ce:d4:4c:15:
c2:d7:a4:33:76:46:a0:bb:e6:05:fe:47:a9:12:fc:96:e8:19:
6d:e5:a5:61:b7:fa:dc:e6:ba:11:89:cc:15:c8:51:2e:51:de:
b3:02:76:13:2c:f7:7b:81:25:e8:e3:27:c9:bb:ad:8f:84:72:
79:9f:5a:89:d6:27:72:cb:4b:b9:f1:86:95:cc:40:a1:4b:2f:
e8:63:88:26:83:39:33:13:c8:08:36:e8:94:26:d5:c3:f1:42:
7b:b4:9f:12:52:3b:d9:56:46:6b:5e:64:56:28:9a:a0:df:a8:
e0:db:85:80:6a:18:31:a6:b9:fe:53:75:78:c4:cb:31:4c:3b:
72:c0:c6:0b:dd:31:48:bb:c4:c7:ab:af:93:17:69:f2:a1:94:
98:68:e0:2f:54:69:95:65:f9:51:ee:38:d5:66:59:26:97:e2:
b8:e0:63:fc:06:d7:0e:d9:34:60:11:97:fc:c8:77:6c:5d:d8:
c8:d8:49:e7:6c:33:c4:46:00:9a:95:00:aa:40:19:ed:4d:d2:
32:d7:f0:9b:a9:4e:25:7b:94:60:70:49:27:e6:65:ea:47:63:
e7:98:90:44:94:58:34:11:4a:71:4d:67:34:a9:28:95:86:af:
9b:8d:1d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:08 2025 by rpki-client