Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
File: 07SieHIiWX8W0e5MQ1voaQ8QM9k.mft (raw, json)
Hash identifier: LaIx41FlBA+IHASAXbd0gMYytkpKZDT4+/JXyL7gLYY=
Subject key identifier: A2:53:DE:27:8A:A5:96:6B:DF:8F:96:6D:10:4D:81:B7:A0:57:55:75
Authority key identifier: D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
Certificate issuer: /CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Certificate serial: 019922FAA8B2FEDDD3DB455573977C0ED8C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
Manifest number: 061C
Signing time: Sun 07 Sep 2025 07:01:16 +0000
Manifest this update: Sun 07 Sep 2025 07:01:16 +0000
Manifest next update: Mon 08 Sep 2025 07:01:16 +0000
Files and hashes: 1: 07SieHIiWX8W0e5MQ1voaQ8QM9k.crl (hash: +gVxTh6yioDpicckAq/0kFgn5B+xe9mU6Lvmu3iEIX0=)
2: _CsObP4Ze3uU9K2w6CdOR8S59eQ.roa (hash: 1vz8OL2ZT6+f1AOzld1JihOzraesTCmal5gPezTDoY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:a8:b2:fe:dd:d3:db:45:55:73:97:7c:0e:d8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Validity
Not Before: Sep 7 07:01:16 2025 GMT
Not After : Sep 8 07:01:16 2025 GMT
Subject: CN=a253de278aa5966bdf8f966d104d81b7a0575575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:e8:d6:70:0f:fb:5c:9e:cc:1e:8b:f7:c1:
7d:43:98:7b:33:18:64:45:ab:fa:98:18:53:0a:26:
6f:c3:16:18:79:bb:03:47:3c:60:dc:dc:c9:fd:08:
49:ea:70:04:99:46:15:2c:54:cc:6f:b8:15:68:a4:
2a:51:ef:b7:ff:2f:26:27:b8:b0:90:41:4d:b8:34:
8c:0b:cd:d9:c9:b1:a7:7f:79:74:f7:c3:48:9f:c8:
40:8a:27:b1:28:05:d5:c6:c8:2b:cf:ff:72:98:f2:
7c:65:cd:5d:ae:b8:df:39:3f:91:c4:9d:13:a4:f2:
92:ed:f5:ab:17:10:46:f7:3a:d0:d9:c0:c8:04:f2:
41:d3:cc:dc:3c:5b:00:95:73:7f:c0:d4:da:08:44:
41:83:6f:a0:26:f1:d9:0c:53:96:0f:ca:21:86:32:
80:43:75:28:3e:52:3e:68:a1:29:9d:ce:90:bd:f9:
e6:b5:6e:2e:60:48:94:31:72:06:c4:b1:41:14:b8:
5e:68:85:b7:9d:51:01:e2:db:7f:07:a1:7e:26:60:
32:f5:cd:a9:f4:75:ad:70:a2:30:46:7e:b5:d7:9e:
00:51:54:aa:21:63:73:47:34:ef:44:98:1c:68:81:
95:ee:d8:5f:ec:c1:ae:75:c3:b4:7f:33:92:97:66:
97:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:53:DE:27:8A:A5:96:6B:DF:8F:96:6D:10:4D:81:B7:A0:57:55:75
X509v3 Authority Key Identifier:
keyid:D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:22:9d:a0:c6:2a:b0:7f:c2:30:61:20:38:f8:13:c7:6e:1e:
fa:63:e1:ed:6e:a3:28:de:23:93:0b:47:9d:a7:19:fe:e8:0c:
d9:4a:78:09:f0:0b:cf:6c:7d:f7:b2:5a:5b:fc:51:73:34:fe:
ce:5d:ce:04:52:78:7a:22:1b:5a:7a:4f:8e:77:b0:16:09:89:
4b:fe:db:10:ef:75:81:99:2e:d1:db:88:5e:79:44:08:08:31:
6a:9b:0e:96:b8:94:eb:fc:9c:45:a7:da:60:83:b5:47:4b:f1:
07:44:df:d7:43:a5:dd:c1:b8:47:ce:06:fa:63:7a:71:f7:d6:
b0:73:99:c7:87:39:c1:42:39:96:02:69:2d:ac:a2:7d:11:69:
20:b7:e0:ae:de:75:91:c0:5e:a8:57:3f:f4:93:7c:c8:46:27:
dd:3b:e6:c9:a4:30:2f:25:c2:63:9b:7c:f3:9e:f4:ff:2d:10:
57:03:35:77:a0:a5:d2:86:f3:70:7c:7d:25:30:52:65:6a:80:
38:33:7e:16:1a:e9:fc:db:37:76:76:0d:b1:b3:cb:53:15:fe:
4d:e5:32:fb:ca:aa:7b:12:3a:b7:59:bf:79:c1:c6:e6:a6:70:
a5:ad:df:6d:ab:26:b5:88:c4:47:c7:f1:19:bd:d9:13:66:d8:
7d:c1:31:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:45 2025 by rpki-client