Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
File: 7jcJhfg_QTMBEcNQzWseHurVJqo.mft (raw, json)
Hash identifier: qoCqQugqplWcILDS/ZMqKXxNIp5w3PjovDJu+Y6BZto=
Subject key identifier: EA:73:FA:9A:70:2C:47:3A:E7:19:E4:0E:A2:A1:AE:2D:2E:AE:34:8C
Authority key identifier: EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
Certificate issuer: /CN=ee370985f83f41330111c350cd6b1e1eead526aa
Certificate serial: 01993425279E05239F9FDDA1EBC26B849C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
Manifest number: 1680
Signing time: Wed 10 Sep 2025 15:01:14 +0000
Manifest this update: Wed 10 Sep 2025 15:01:14 +0000
Manifest next update: Thu 11 Sep 2025 15:01:14 +0000
Files and hashes: 1: 7jcJhfg_QTMBEcNQzWseHurVJqo.crl (hash: FSNlK4CwypCm/8dacBEsq4xSIBLfOj4ENrTT4Drr+Y4=)
2: YMiovkkM1pTRsj2s2pWWavdNH3M.roa (hash: d26rfkrfXfTKQZRjWJD5TAVJi3E84OTuQPo2eEaVnMI=)
3: cXrx1ROqbRYTJpBaY9JfsPVk3Ow.roa (hash: e0I94SNdLBs+vaXUAirpLtLE8FeKHQEH/NhmFQRxO+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:25:27:9e:05:23:9f:9f:dd:a1:eb:c2:6b:84:9c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee370985f83f41330111c350cd6b1e1eead526aa
Validity
Not Before: Sep 10 15:01:14 2025 GMT
Not After : Sep 11 15:01:14 2025 GMT
Subject: CN=ea73fa9a702c473ae719e40ea2a1ae2d2eae348c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:f3:35:3a:66:eb:12:ce:5c:96:e6:30:47:
4b:9c:af:e4:ca:a1:a7:d3:c0:dd:8a:d3:43:1e:a7:
b3:39:f7:4a:5c:79:84:d0:7e:08:44:39:36:75:9a:
4d:80:2e:ef:b9:a5:1b:84:95:92:71:c5:89:b8:f4:
81:bc:d0:68:55:15:d2:ed:95:a1:6e:97:59:92:11:
15:56:da:5b:34:e1:36:fe:41:75:55:b0:c1:a3:4f:
08:ff:6a:bd:10:e5:23:48:96:4e:85:60:5d:26:0a:
6e:51:ac:76:d6:5b:6f:eb:b5:f0:0c:54:bb:fc:7c:
1c:aa:93:e2:9b:b5:9a:86:51:91:d6:69:b6:f8:f4:
6b:68:b5:b9:90:e6:47:d2:64:4a:17:f4:e9:61:52:
14:3a:c2:a3:bc:f3:1b:9c:74:29:36:19:1c:73:2e:
c7:a3:02:d6:bd:92:94:ce:c0:86:71:2e:55:83:55:
77:23:03:d6:aa:52:2d:9b:37:c9:a3:f9:94:dd:b9:
6a:64:c0:71:e4:ff:42:ef:2d:5b:7b:1a:26:3e:4d:
d8:a9:3d:be:2f:92:a5:4d:77:71:18:4b:15:8b:a3:
9a:3d:61:2d:fc:2b:e3:9e:65:62:0b:e0:d2:ac:fc:
06:d5:fc:bc:bd:c8:30:73:1b:a1:18:cc:43:ef:85:
43:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:73:FA:9A:70:2C:47:3A:E7:19:E4:0E:A2:A1:AE:2D:2E:AE:34:8C
X509v3 Authority Key Identifier:
keyid:EE:37:09:85:F8:3F:41:33:01:11:C3:50:CD:6B:1E:1E:EA:D5:26:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jcJhfg_QTMBEcNQzWseHurVJqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2744d0-41a0-4434-b690-3244546f8cbf/1/7jcJhfg_QTMBEcNQzWseHurVJqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e2:05:ff:96:a6:52:05:93:03:91:9c:3c:5e:d6:1c:33:a4:
b0:48:53:76:76:40:a1:36:d2:ab:88:c6:ea:71:c1:61:5d:66:
82:50:c3:52:71:3a:d7:82:53:8d:be:0c:09:71:7a:7b:1b:20:
73:08:25:49:5f:ed:cb:ea:f7:d5:94:09:45:17:3c:89:64:72:
21:38:3b:ef:70:3f:a3:9a:cd:05:31:97:b9:32:39:4a:11:84:
76:1d:05:ef:9f:97:14:40:79:40:a2:85:b1:06:a3:bc:c4:69:
aa:d5:05:72:5b:d4:e6:ce:c9:44:97:44:13:0d:61:67:c7:f3:
60:31:55:0f:ab:a6:91:f1:f5:93:c1:f8:70:04:e0:6b:ec:9a:
fa:c5:f3:a0:0b:b7:b0:3e:8e:a5:ef:f4:0f:4d:6d:e8:cc:71:
a7:63:98:33:7a:52:b2:84:08:a4:26:a9:e1:0a:74:d9:d0:0a:
e9:ae:9a:9e:96:4f:54:e0:c7:48:26:58:7e:a9:88:96:7d:a6:
52:a8:b2:fa:e9:a8:1a:6c:ab:1c:b2:17:2c:14:d6:9f:d1:be:
1e:6f:d9:be:e5:17:b0:99:ec:14:4d:7a:ae:e5:c4:b4:34:3c:
5a:c7:b7:52:40:b1:e6:ef:fc:ad:cb:ba:a2:1f:f1:6a:4d:10:
e5:48:b8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:22:29 2025 by rpki-client