
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
File: 7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft (raw, json)
Hash identifier: sbbxTm6Na3SBYi8MRZgKzs00YFYcfehhY91hsDHAa1s=
Subject key identifier: 06:A5:A2:9A:7A:6B:6A:EF:AE:FA:CF:23:95:5F:6C:7E:54:F2:B5:A7
Authority key identifier: EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA
Certificate issuer: /CN=ec917c0afda449ecc0429c046df50fbc959b4eea
Certificate serial: 019922C37BDFD1247D3F88484D679498AC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
Manifest number: 15EC
Signing time: Sun 07 Sep 2025 06:01:00 +0000
Manifest this update: Sun 07 Sep 2025 06:01:00 +0000
Manifest next update: Mon 08 Sep 2025 06:01:00 +0000
Files and hashes: 1: 7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl (hash: dAh9S2SsIg2dTmnHL20hbMV4EG4nCxlQcnLRm0CgUYA=)
2: YeFUZsaHfHTPpiu7f2dFmo68C7E.roa (hash: VFJqwzLzDH7CjnLQbhz/bJw/ANPrHjYMaDgoQuDyxDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:7b:df:d1:24:7d:3f:88:48:4d:67:94:98:ac:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec917c0afda449ecc0429c046df50fbc959b4eea
Validity
Not Before: Sep 7 06:01:00 2025 GMT
Not After : Sep 8 06:01:00 2025 GMT
Subject: CN=06a5a29a7a6b6aefaefacf23955f6c7e54f2b5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:c0:94:51:20:d8:37:d9:26:88:9f:33:3b:
d6:de:1e:02:23:a6:1f:fd:73:ce:4e:3e:d7:0a:17:
6f:28:8b:25:9f:6a:e3:2d:c9:c6:ea:88:dd:3a:5e:
dd:4a:82:17:7a:9c:e9:59:ad:b6:3e:57:e6:0f:04:
1d:67:f4:fa:ec:17:67:d2:ca:61:c7:c1:ea:dd:b8:
b5:d3:ce:13:04:92:b3:4f:7b:92:7f:bb:d4:e7:b6:
48:05:40:ab:a5:e4:60:fc:58:b6:10:9c:f3:16:c7:
66:0a:74:86:5d:26:30:c1:94:a1:e6:d8:d2:b9:d6:
fc:d2:5f:3b:b8:a3:9a:eb:20:99:e1:79:d7:63:39:
6b:92:b1:fb:59:16:c4:0e:6b:02:4c:93:79:ec:9a:
c8:90:73:80:91:97:80:3b:32:fd:bc:81:48:0b:6a:
a2:fc:a3:7c:49:4b:bf:ba:95:a5:3f:e6:b7:1f:66:
3d:c1:11:a1:20:28:83:f5:c5:e5:50:58:4f:45:15:
4d:94:6d:98:cd:3f:ff:b3:77:3f:71:07:f3:58:d5:
5e:80:82:cf:77:41:3e:c4:b3:93:c2:80:be:8a:f4:
89:ff:a3:dd:75:4f:7e:75:13:18:86:a7:17:49:86:
50:65:e8:27:9d:80:cc:db:13:29:eb:89:20:fd:bf:
6c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A5:A2:9A:7A:6B:6A:EF:AE:FA:CF:23:95:5F:6C:7E:54:F2:B5:A7
X509v3 Authority Key Identifier:
keyid:EC:91:7C:0A:FD:A4:49:EC:C0:42:9C:04:6D:F5:0F:BC:95:9B:4E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JF8Cv2kSezAQpwEbfUPvJWbTuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/c88a8f-7be0-4e40-9ce6-d252a574ae8d/1/7JF8Cv2kSezAQpwEbfUPvJWbTuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e2:a4:f3:4d:d1:bb:82:0c:bc:fe:5b:69:d8:6a:ee:1c:82:
87:2b:c5:bf:e4:fa:e1:3a:ed:7a:3c:5b:05:c2:8a:b9:f5:db:
99:a0:82:40:90:8f:5a:ca:53:cb:22:d5:26:b1:ec:47:12:06:
2a:22:c6:61:e5:1c:f1:b8:11:1b:a7:da:79:bf:dd:b3:d7:78:
0a:97:b1:b4:ef:b7:7f:0d:5c:9a:45:8b:87:09:37:53:ce:48:
b1:21:f7:6d:a7:d7:f5:02:d0:82:b9:74:e9:5d:e6:0e:b8:96:
82:71:dc:be:c5:23:f8:a9:16:8a:3f:e9:9d:7a:06:c2:78:0f:
c3:26:a4:62:9e:16:37:68:56:0f:f3:e4:c1:75:c0:5d:9a:45:
13:c3:69:21:28:1f:b0:f1:1c:69:3d:77:15:a4:fd:69:9f:81:
68:c7:09:bb:8f:6f:cc:33:18:0e:0f:6d:c1:8b:b6:36:a8:55:
a5:1f:88:b1:e7:4b:8d:50:48:fc:2c:3f:db:d9:1e:57:f6:a4:
9d:7e:ee:11:4b:56:bf:2a:7a:6f:25:d4:3c:a4:63:71:a0:c5:
ff:81:b5:0a:f5:fa:52:6c:b4:e4:a7:3e:04:83:2d:2d:db:cb:
f3:30:52:86:cb:56:05:22:80:fc:57:24:c0:06:58:a6:94:fd:
ee:f9:1b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:37 2025 by rpki-client