Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
File: 7w7IG5xlO440BQj_hI2wZuNncrA.mft (raw, json)
Hash identifier: XEH+MSXy3gP0pTv4H0yOiZIifi2sOPMcRJLYRt8bLiE=
Subject key identifier: 12:9C:52:FC:9F:A6:BD:20:92:18:45:E6:FC:76:86:AF:6A:32:A2:68
Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Certificate serial: 01992D7E2BFFA1715E7F5C654FE60375F724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
Manifest number: 06A8
Signing time: Tue 09 Sep 2025 08:01:07 +0000
Manifest this update: Tue 09 Sep 2025 08:01:07 +0000
Manifest next update: Wed 10 Sep 2025 08:01:07 +0000
Files and hashes: 1: 7w7IG5xlO440BQj_hI2wZuNncrA.crl (hash: 85Z3BbipbneEpy4mAR4Xk1G8h0RBW5Zd7ef0YnR0pCI=)
2: _JZCaLt9Be62ENSNemRuRzThRaM.roa (hash: URuN9NpiQl5cKKOQiReY1w86ew5C0wnGONnwQYzQctk=)
3: fT9EDZcB-n7jKd_0sXTlTpOCVoU.roa (hash: ErzOKvcft9LuwLT6n685AHi6g3MUyqRhRkHGEZcgw3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:7e:2b:ff:a1:71:5e:7f:5c:65:4f:e6:03:75:f7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0
Validity
Not Before: Sep 9 08:01:07 2025 GMT
Not After : Sep 10 08:01:07 2025 GMT
Subject: CN=129c52fc9fa6bd20921845e6fc7686af6a32a268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dc:98:1a:b0:5b:8a:c3:6e:ea:0d:85:69:5e:
91:e1:db:91:99:e4:80:19:00:bb:79:db:73:c8:52:
20:be:d8:5b:70:d8:10:7e:2f:e2:ab:1a:32:60:93:
ce:fb:f9:6d:2a:3e:58:51:f2:90:b9:22:8a:3d:de:
12:b3:04:af:9f:7e:e7:bd:6c:f6:83:c0:fd:6f:07:
53:67:b1:60:29:22:47:c1:c7:40:94:22:49:41:99:
7d:58:80:98:52:a3:67:8e:13:88:a9:af:d1:a5:f5:
1e:38:6c:2d:61:3f:f0:3b:5b:25:e3:ad:4d:e7:2e:
4e:ad:37:ce:67:e7:4f:ec:83:a6:64:04:50:f3:8d:
26:b3:89:a2:77:7f:fc:49:96:52:d0:73:ac:03:04:
9f:48:05:c8:54:c7:16:10:3f:34:ff:87:38:36:07:
6c:e0:34:aa:2a:f6:ec:95:8e:9b:46:75:4b:82:4e:
3d:8f:df:a3:53:7e:0a:f6:5c:e4:1a:2b:98:6e:a9:
66:43:aa:b2:70:60:5f:ba:98:bf:fa:3b:4b:da:cf:
63:4b:41:89:f9:f6:65:d7:ba:15:2c:de:eb:1c:61:
ae:f7:e8:94:80:83:42:38:cb:68:e0:03:c3:df:93:
36:67:ba:59:86:09:21:2e:a2:af:c3:5c:bd:b1:3c:
20:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9C:52:FC:9F:A6:BD:20:92:18:45:E6:FC:76:86:AF:6A:32:A2:68
X509v3 Authority Key Identifier:
keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e7:c0:a5:8a:b5:80:0b:a0:d4:af:c3:78:f5:46:fd:68:d0:
61:0a:7f:53:70:ca:b3:a7:9b:01:c2:1e:ac:11:07:4c:2a:ee:
e8:80:01:b3:4c:8d:8a:79:f4:30:5d:59:27:07:26:8d:ea:a2:
fb:52:44:92:eb:93:50:06:82:15:75:51:66:e2:d0:ec:3b:6f:
f5:f9:6c:20:77:03:c0:a2:a6:5a:b9:9c:5b:de:60:bb:e9:6e:
0e:06:5f:9a:43:e9:4b:52:ef:ed:ad:29:b1:11:a5:69:55:f4:
03:bf:00:b2:43:ed:00:fa:c0:50:c4:84:0a:5a:02:07:cc:bb:
41:7d:e4:a7:36:18:23:a2:73:38:d6:ef:a5:a4:3a:bd:8e:ed:
9a:9d:f5:16:44:52:3f:10:46:ef:a5:1b:2b:04:05:51:61:5b:
9b:96:c6:ad:de:01:f8:5f:1e:17:e0:3a:00:2c:43:de:7c:e7:
10:d3:e6:3c:d7:65:50:ee:03:86:95:a1:bd:c8:3b:d5:e6:3f:
c4:af:11:a8:e5:8b:da:0e:05:ee:8b:20:7c:83:bd:73:02:9f:
d2:ac:cd:b1:5e:ef:49:e0:d0:fd:7c:62:9f:09:5b:d7:a7:80:
f8:6b:6b:df:d0:4d:ad:e7:d8:d4:12:f7:24:30:8d:05:21:7f:
c7:e8:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:41:03 2025 by rpki-client