Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier: YGxT1seWH7TyIck8FkxAW38QSDbd/YZSG7H0XwwUsIw=
Subject key identifier: 11:A8:00:7A:95:3A:A3:9B:23:26:AB:28:B8:48:10:12:D4:42:12:FE
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 0199307EB78D1EC039CEDADFAAAC355A1677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number: 1683
Signing time: Tue 09 Sep 2025 22:00:34 +0000
Manifest this update: Tue 09 Sep 2025 22:00:34 +0000
Manifest next update: Wed 10 Sep 2025 22:00:34 +0000
Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: ubIRI4EBeZcaADXcYnrt6ZFDl1DP14HTWg9AzTSrDKs=)
2: JjxG5JBV-4sLSO9ydbLM49BAtzE.roa (hash: cqElNxOa+f907x34fYoberfp0CD4VgTc1FzaMtoENtc=)
3: tkrTEHat3bSdWp0mTcT7h8ohu0E.roa (hash: 9f4QW5MnJXddCGseXoiWv8iW8ue5LxII6QEIhlpZ0fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7e:b7:8d:1e:c0:39:ce:da:df:aa:ac:35:5a:16:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Sep 9 22:00:34 2025 GMT
Not After : Sep 10 22:00:34 2025 GMT
Subject: CN=11a8007a953aa39b2326ab28b8481012d44212fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e2:c7:8d:a3:88:d7:11:a5:ca:7e:40:25:4c:
1c:10:fe:62:7b:2e:fa:a0:24:6f:88:0c:30:1e:be:
21:1d:0c:0e:8a:d8:f9:da:10:c8:12:01:ab:38:57:
15:00:17:08:80:d4:59:99:2d:2e:14:c3:1f:12:0c:
ab:b7:06:10:c4:54:3a:5c:f7:ed:43:b4:a3:f9:ca:
79:2f:72:64:95:25:8d:28:e1:e6:ca:89:0f:d8:bf:
c0:76:0d:60:b1:b5:f9:25:ac:90:7a:28:88:83:7f:
6d:40:72:4a:0f:ab:c1:a6:23:35:fb:69:6a:5d:1d:
ad:66:4c:c1:08:70:92:4f:df:6e:85:36:24:d5:a6:
56:99:1b:06:12:35:cf:c3:ab:89:71:fe:bf:0f:4d:
46:02:a5:64:7e:b3:28:20:54:de:23:f4:83:0e:2a:
98:02:b1:bf:94:15:49:05:33:b6:92:a4:1c:1c:e4:
9c:b3:d2:8e:f7:29:d3:a5:a6:ca:9d:21:a6:4c:c0:
f8:40:5c:ba:3b:25:c6:b4:47:d6:57:a8:16:ba:64:
f5:9b:b2:32:7b:95:ef:bf:c0:5b:42:26:66:9d:bc:
e3:8a:5d:53:09:07:d3:0a:0a:2a:1d:bf:e0:92:6e:
0d:47:42:f7:7e:ab:f9:1c:d2:55:3c:ee:f9:6a:cb:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A8:00:7A:95:3A:A3:9B:23:26:AB:28:B8:48:10:12:D4:42:12:FE
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:01:13:15:82:b4:ae:60:0f:03:4e:e3:8e:ba:c5:7f:47:00:
51:d9:9c:4b:71:fd:d7:2f:cc:63:a4:3f:cd:e4:94:f6:01:6a:
ba:52:1d:41:c2:98:2c:43:cb:9a:39:d3:91:13:bf:f4:ff:a0:
69:8a:77:96:94:95:df:1f:7f:b2:43:ef:14:29:20:1b:fe:bd:
72:71:8c:a6:5f:9a:70:59:14:ea:f6:e4:c2:cd:b9:30:b2:fd:
6d:51:8f:2f:be:2b:01:a5:95:7a:28:b2:43:ff:2b:99:ce:47:
5a:95:b6:8a:d3:b8:f7:c0:86:d3:a4:4e:7a:55:58:4a:8c:3f:
1b:91:6f:c4:b1:17:1b:96:4f:75:3c:55:41:7d:74:c7:51:b5:
ca:ce:f1:85:a7:f3:e1:13:1a:10:98:15:96:08:f3:54:d2:c0:
b5:2f:7f:d9:a9:a9:a7:b5:71:66:29:0a:1b:e0:45:b9:54:b2:
76:e7:9e:ca:95:15:45:64:80:df:b9:e5:95:11:68:66:5c:ea:
58:ad:e5:28:f6:24:9c:9b:0a:3d:7f:4b:53:a7:cd:41:07:1c:
01:9b:56:2d:ba:e4:26:bc:eb:28:19:fa:0e:e3:91:50:6a:e8:
db:f0:dd:46:b7:b6:a9:11:d3:63:ae:23:e4:f1:5e:ce:d8:be:
dd:80:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:42:03 2025 by rpki-client