Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier: Op6JzN+w4RkXaDcuAN7rCZ0Furibgb+xhsM5f9SLCIM=
Subject key identifier: D5:3B:21:A4:B7:39:FE:F7:A9:EF:AE:45:62:3A:69:23:24:03:76:5A
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer: /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial: 019A0BCB478EF14D8043452A199508FD0B31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number: 0E58
Signing time: Wed 22 Oct 2025 12:01:02 +0000
Manifest this update: Wed 22 Oct 2025 12:01:02 +0000
Manifest next update: Thu 23 Oct 2025 12:01:02 +0000
Files and hashes: 1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: +ra6CFmzK/kMdSBH9qajTUg0WX0VnFDNXbMkNPEjg8k=)
2: VXStklzuRlpg_R8nfz573Xq7Noo.roa (hash: IbT51sa2OOKxE/XOPtTGvEY7Cw0dCovzg7t9jfSRhHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:cb:47:8e:f1:4d:80:43:45:2a:19:95:08:fd:0b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Validity
Not Before: Oct 22 12:01:02 2025 GMT
Not After : Oct 23 12:01:02 2025 GMT
Subject: CN=d53b21a4b739fef7a9efae45623a69232403765a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:14:18:e8:36:5f:e0:bf:35:9a:57:13:2b:
05:45:29:79:3e:fb:ea:3b:00:80:6d:fc:a2:19:74:
43:9d:46:b6:f3:89:ed:39:3a:50:13:58:ac:6e:30:
ff:b9:91:6a:9f:68:16:d3:a7:b4:94:c9:08:25:97:
61:10:97:6c:cb:8e:4e:66:75:ad:e2:98:cd:47:97:
e3:a1:bd:0a:83:59:85:8c:b7:2c:52:15:d4:86:a4:
5a:aa:d5:ed:f7:46:15:c9:c9:d8:8b:15:78:64:b9:
21:32:2b:87:09:f5:64:96:f1:94:e7:85:9f:7a:7f:
1b:27:44:1e:5e:e2:4c:4a:8e:55:85:74:75:b4:49:
26:9c:1f:b7:94:e3:fc:be:3e:fd:48:22:f4:78:9a:
2d:03:dc:1c:db:e7:62:fd:9d:e5:bf:af:da:c2:66:
43:37:14:2c:85:89:02:ec:10:ab:6c:7b:7d:a9:0c:
4b:0a:23:42:af:46:93:89:08:85:b4:60:74:34:0f:
57:56:b5:8e:71:98:d4:48:e8:91:bb:60:af:2b:d5:
34:02:d9:64:d4:73:ec:08:ec:09:da:2a:35:de:25:
d3:e1:db:60:02:87:fe:b5:ca:08:2c:4e:7c:d2:b4:
a8:1f:52:6e:de:1d:b7:4b:c0:d7:0b:d5:bf:1c:5e:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3B:21:A4:B7:39:FE:F7:A9:EF:AE:45:62:3A:69:23:24:03:76:5A
X509v3 Authority Key Identifier:
keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f3:66:e3:f2:2d:f6:05:5f:13:87:1f:7c:93:dd:99:1a:32:
cf:93:bb:41:13:96:3b:a6:4d:f1:62:a3:7b:9f:f7:88:8a:45:
22:4e:91:af:74:69:9f:50:c0:9e:e7:54:37:43:10:35:41:0b:
99:e3:11:18:80:38:39:92:f7:67:8f:52:f5:24:06:e9:08:83:
2c:77:df:87:79:8c:79:0f:e5:67:7e:1a:24:77:d3:b6:89:3b:
1c:69:e1:19:fe:ad:ce:5c:a8:b5:de:4c:1c:ff:eb:89:ec:fb:
4f:87:e3:fc:a0:5e:ef:5e:f1:af:fb:47:e5:ee:5b:58:2e:2b:
5e:1a:b0:7d:2c:b6:a4:02:e0:7d:52:1a:87:fd:04:d1:76:66:
93:80:49:18:78:ff:18:a6:a1:77:dc:f9:ff:fc:89:d9:b9:63:
14:f1:ed:64:a4:45:8a:17:98:a6:cc:c1:82:e4:66:fa:45:45:
d4:d3:e3:3a:f6:47:30:e3:9a:d3:6e:89:96:57:b0:e5:4f:a7:
41:e7:47:e4:0c:09:c1:9c:62:e7:68:93:b6:f5:59:90:18:1a:
c0:2c:68:5f:6b:35:7e:d6:6d:16:7e:f7:ed:18:6d:c8:3b:00:
a3:54:c2:c2:6b:86:a1:ba:b0:6c:8d:ea:72:a3:58:95:84:91:
59:c9:1a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:06:59 2025 by rpki-client