Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: ftVAYRZXgGDO2TkrLhDYGdbdjp6QC5Gq8KAd1Zxnt3E=
Subject key identifier: EC:DA:3A:CF:21:AF:84:E6:07:08:76:8E:FF:44:A5:EE:B4:AD:F2:5B
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 01992F6C1B875064009AA245D8411EE91E23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 167B
Signing time: Tue 09 Sep 2025 17:00:37 +0000
Manifest this update: Tue 09 Sep 2025 17:00:37 +0000
Manifest next update: Wed 10 Sep 2025 17:00:37 +0000
Files and hashes: 1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: DIz5jSQGz5T8PtIJbXM7r6mS9UMqnJFH/ygPFFZfWlw=)
2: QmonITNns_8Q9qn9QpgL_m0jbZY.roa (hash: lePHGLh8RQcKhBsHHefYW0245CnYH1iaj+dz5PW9vD0=)
3: d24ICbco0VbAsWx0dcNaky51E1k.roa (hash: d1k6XX+Y5B2DmgHQo92ou+wFZc56ndYpjjXsKkYwekM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 17:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:6c:1b:87:50:64:00:9a:a2:45:d8:41:1e:e9:1e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Sep 9 17:00:37 2025 GMT
Not After : Sep 10 17:00:37 2025 GMT
Subject: CN=ecda3acf21af84e60708768eff44a5eeb4adf25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:0e:ab:32:1c:22:77:94:04:47:6d:4d:57:
6a:4a:a9:dc:22:c6:9b:2c:2c:03:6e:37:ef:1a:58:
23:c4:88:c4:72:86:94:a5:bd:05:03:54:c1:99:e5:
74:90:47:5f:e4:38:76:0a:21:6a:7e:9b:75:7f:2b:
f6:6a:15:f0:40:5f:e4:f9:07:b6:71:e0:46:ec:b0:
05:f6:04:36:2d:74:bf:4b:ef:98:8c:53:1c:f1:d4:
f9:50:9d:a4:9a:62:21:28:23:0c:c6:20:1b:93:d5:
aa:b7:00:a8:78:df:cc:97:4b:a8:51:75:33:d0:05:
10:90:b7:cc:3f:c8:72:64:15:33:ab:12:87:78:34:
eb:72:0e:10:e0:0e:ab:3e:dd:a1:7f:fb:84:b6:66:
18:70:74:b3:3b:1d:a7:08:35:4b:9e:d3:b4:40:90:
73:fa:76:7c:18:af:ee:d9:5d:84:eb:97:d0:8a:7a:
b1:9d:04:0f:91:42:02:26:9c:5d:98:ca:6a:3b:fc:
aa:da:f0:13:e2:92:53:06:ee:09:2f:e5:76:bf:6c:
c7:e5:c3:29:00:2c:f0:f0:27:0c:19:54:22:87:1b:
c8:7e:6e:28:b1:f8:7e:07:4f:d5:d4:3f:ce:84:65:
79:e1:c5:3f:b5:af:e1:e2:7a:c4:da:1c:76:69:38:
dc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DA:3A:CF:21:AF:84:E6:07:08:76:8E:FF:44:A5:EE:B4:AD:F2:5B
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7a:8d:7c:7d:67:49:27:b1:57:0e:94:31:a4:ed:ba:46:82:
38:6c:40:7f:91:e0:d2:2c:28:88:f6:90:3f:ba:d9:99:59:53:
60:4f:d1:ab:bd:51:17:d8:6f:ec:3c:d4:d0:da:77:ae:8e:67:
58:8c:3b:31:65:2f:f0:60:f6:7f:1a:59:45:09:56:2f:55:13:
fe:04:ac:9c:b9:06:f3:6d:77:fe:7e:7c:82:f8:4b:ba:d6:b3:
5c:96:48:ab:bd:1d:77:4c:48:7e:09:f8:99:05:ee:b8:b8:f7:
a0:f7:01:d0:f0:94:a3:74:00:eb:57:5b:20:81:78:fd:2c:64:
0f:ba:8b:e9:2f:0c:30:74:d5:df:18:ef:f1:9e:78:cf:c7:55:
94:1a:fd:bd:18:fc:26:11:2e:60:e0:4b:79:19:58:bf:85:eb:
c5:7b:e7:3a:0c:93:08:2e:05:47:67:e5:a6:1d:d5:53:7c:ad:
96:1b:56:2a:d4:02:51:6e:f8:df:17:a7:10:23:05:cb:a5:cf:
cd:76:a8:28:3b:16:7d:d7:d4:22:98:5f:47:eb:63:df:9e:dc:
ad:a4:3a:13:2f:33:39:a3:90:8b:31:d4:19:a7:ad:76:ca:f5:
f8:dd:c8:33:7d:61:c1:a5:d0:bb:59:a2:af:32:3a:82:1b:36:
0d:41:bb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 22:16:46 2025 by rpki-client