Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
File: 7rtMC0r2FchaPNze1LfrtmYxG0g.mft (raw, json)
Hash identifier: OlvSVcpdTW8XFAKFNQ9r1c4C3LSP/K363sJLJP66JYw=
Subject key identifier: C0:4D:AB:EA:F9:CE:22:FA:34:A0:2D:CF:38:73:CD:0B:A3:EF:13:8C
Authority key identifier: EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
Certificate issuer: /CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Certificate serial: 0199228C72F94E907FE57EA118FD321E5A1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
Manifest number: 1605
Signing time: Sun 07 Sep 2025 05:00:53 +0000
Manifest this update: Sun 07 Sep 2025 05:00:53 +0000
Manifest next update: Mon 08 Sep 2025 05:00:53 +0000
Files and hashes: 1: 7rtMC0r2FchaPNze1LfrtmYxG0g.crl (hash: rIhtyU1aE5ZYXBqJO+u7p+SsJVxaRHwpwK0j/C0JCpk=)
2: M845Ruk9WEAHqWqH-UFvn2XtdEI.roa (hash: 9d5WTncP2804xxZsRBfSA7+CL58Ibq4eGoAP961Gtgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:72:f9:4e:90:7f:e5:7e:a1:18:fd:32:1e:5a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebb4c0b4af615c85a3cdcded4b7ebb666311b48
Validity
Not Before: Sep 7 05:00:53 2025 GMT
Not After : Sep 8 05:00:53 2025 GMT
Subject: CN=c04dabeaf9ce22fa34a02dcf3873cd0ba3ef138c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:a2:4f:97:c9:c6:6c:0b:fe:35:fd:12:b9:
d5:7b:6a:e0:2c:3e:8b:55:f8:a3:25:68:dd:5d:a2:
8d:cd:9b:67:dc:5c:4a:24:88:76:d4:1f:44:da:c2:
5a:a3:b2:43:07:04:85:27:61:ba:f3:b4:cf:34:a5:
8d:8a:c9:a5:3d:35:23:42:ba:fe:c0:30:d1:1b:bb:
ff:62:6a:65:b6:30:52:fd:53:f8:b3:72:d3:fa:3a:
ea:5d:85:46:e2:bf:92:a6:69:91:bd:87:a0:30:88:
69:d1:e8:7c:67:64:88:78:10:74:a3:2c:e4:79:e5:
98:b8:ba:42:05:38:41:9b:f9:e8:e5:e9:46:3b:36:
cb:08:ab:a4:c8:56:c8:f4:83:a1:b5:1d:df:2b:10:
bf:31:a4:8d:8c:86:44:a9:a9:91:10:a5:4d:e9:13:
1e:b2:63:68:62:fe:11:15:b1:79:cb:85:d3:c5:06:
9f:a2:f1:40:7a:79:f9:92:8b:f5:5b:3a:5e:dd:29:
3c:b9:00:f8:7c:15:c7:57:32:4a:35:3a:43:ff:a1:
75:89:c2:55:c5:2f:48:a0:76:57:8d:6f:e6:72:23:
66:f6:a3:9d:e4:61:56:4d:8d:e0:fc:f0:e4:7b:dd:
0f:b3:87:54:99:b8:db:57:81:b3:00:93:d1:9c:67:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4D:AB:EA:F9:CE:22:FA:34:A0:2D:CF:38:73:CD:0B:A3:EF:13:8C
X509v3 Authority Key Identifier:
keyid:EE:BB:4C:0B:4A:F6:15:C8:5A:3C:DC:DE:D4:B7:EB:B6:66:31:1B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rtMC0r2FchaPNze1LfrtmYxG0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ed1b84-b8c5-4766-882d-18e84e747d22/1/7rtMC0r2FchaPNze1LfrtmYxG0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:bb:99:d2:e8:85:4b:d3:e7:4f:77:04:31:63:a8:b4:87:3f:
1a:6e:0e:60:2f:62:e1:cd:e1:9a:4f:46:0e:31:e6:05:4e:05:
03:08:ca:01:37:61:05:ad:8c:ad:e8:07:87:4a:21:77:a2:c7:
d7:aa:21:ea:4d:97:65:67:86:94:71:c3:98:9f:75:ac:60:eb:
58:e3:ab:ae:f5:67:04:f5:8b:74:e4:de:4e:63:34:26:df:61:
2a:87:a4:f1:04:98:2a:fb:03:73:d4:7b:31:16:56:0c:c1:0d:
b6:14:f2:1c:2d:aa:da:26:d8:41:a4:e1:da:02:b9:46:e1:5d:
ce:35:7b:f0:02:33:07:2c:21:32:04:36:14:78:25:22:4a:1c:
96:4c:ca:9f:05:a1:19:14:56:e4:b5:f0:3e:bd:d1:8a:f6:1d:
24:6e:32:77:27:2e:df:97:d9:cc:17:58:ae:40:bf:7f:d2:7b:
dd:3a:67:95:4c:6b:33:aa:ff:cd:4a:cc:88:84:d9:a0:60:4a:
4c:af:e1:02:26:44:88:2c:f6:df:9e:de:0e:79:43:2b:44:ff:
b4:b0:57:7a:3b:3e:99:a8:db:fe:50:8f:f1:12:7f:bb:60:43:
75:7f:fb:18:3d:e8:8e:17:30:bd:cd:88:e9:3d:07:20:ea:06:
e9:7d:2e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:49 2025 by rpki-client