Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: ftlff51smViBIt5EU4CZ6/WxF71sSxLP6jMjssSwMik=
Subject key identifier: 46:62:89:9B:D0:E1:FC:F0:C4:34:A5:69:C4:0B:C7:A4:4A:C4:7C:09
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 01983DCEEA38737E9D8216DB94DD027888BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 1400
Signing time: Thu 24 Jul 2025 19:00:27 +0000
Manifest this update: Thu 24 Jul 2025 19:00:27 +0000
Manifest next update: Fri 25 Jul 2025 19:00:27 +0000
Files and hashes: 1: 1zFu0RzpnnoDGJMwnKjinpXmRCA.roa (hash: ZQd8IBEmMebks+ONJAcNs9poavTsD9w6+Xw3hhWxaQ0=)
2: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: LASe+qq+uVcuTl5yk7GhnD5gfKCylQn8ZnoGKb4Gf4M=)
3: HKJIsIJ7TQKVpo395xcD-UrLDIc.roa (hash: 5l8r3D44ewEJc+IhuEtnOq2QaEWlAtDCOHCZ14bO5AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:ce:ea:38:73:7e:9d:82:16:db:94:dd:02:78:88:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Jul 24 19:00:27 2025 GMT
Not After : Jul 25 19:00:27 2025 GMT
Subject: CN=4662899bd0e1fcf0c434a569c40bc7a44ac47c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ec:22:3a:dd:7c:a0:23:b7:0c:33:c5:31:51:
b0:ad:f6:3f:77:19:8a:50:f4:cd:24:c8:d1:1b:32:
65:d9:5a:05:74:91:a8:44:01:8d:d6:e8:28:94:c4:
2c:5c:5a:f5:51:72:28:5e:fd:9b:d8:19:18:89:a8:
9a:50:02:7d:c4:5f:e7:f8:b9:e7:8e:25:65:dd:89:
18:2b:30:fc:7a:32:90:35:6c:96:e2:b3:49:95:7b:
26:ee:5d:b8:23:ea:04:d7:fd:2d:d2:c7:7a:d9:10:
50:ef:d2:bd:29:72:21:0d:a0:46:ff:85:91:4c:96:
6c:90:e8:26:51:70:1e:d5:10:42:cf:fe:8d:99:5a:
ce:7b:7b:75:75:65:2e:96:96:be:b7:39:f9:04:e5:
98:31:7c:72:8f:1d:fc:34:ea:9a:f6:fd:3a:7e:9c:
df:01:2a:9d:e7:89:c2:d9:2e:0a:71:9e:2a:0b:10:
6f:9d:2c:22:99:52:31:73:43:6d:27:79:be:88:07:
75:61:27:f9:f3:83:33:bd:a3:33:74:f0:f6:58:65:
f1:85:02:ad:6d:81:8f:1c:c8:24:40:86:d3:79:3f:
44:b7:48:a4:0a:b8:b0:c5:0f:ff:37:55:cf:29:94:
e4:a6:0d:08:65:fb:da:f6:c6:ef:da:b5:98:8a:3d:
b6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:62:89:9B:D0:E1:FC:F0:C4:34:A5:69:C4:0B:C7:A4:4A:C4:7C:09
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7d:b0:83:fb:64:a9:26:91:bb:bf:77:a6:c2:54:7c:89:4c:
72:fb:82:96:15:7a:26:8f:79:ca:7a:4a:28:ea:e0:ee:ac:fb:
5c:cb:04:54:cd:ba:cd:20:a5:49:c6:87:f6:02:40:8c:c8:fd:
db:d4:2f:39:ad:0a:e7:20:cb:5b:85:01:ee:b6:da:85:3d:a3:
ca:8b:ef:76:ff:9a:dd:02:07:7e:a5:eb:da:0c:a1:2a:53:52:
66:b5:50:e4:29:82:5e:03:38:0c:e3:17:5a:78:65:ef:e9:66:
1f:92:c9:42:1c:33:64:e3:7d:7e:0d:ce:a3:ca:cc:3c:05:ea:
87:cd:bb:48:d7:65:6b:54:f9:cf:96:1f:91:c7:4a:c2:e7:e7:
1a:32:10:ea:ce:07:cd:ed:8b:2e:de:f5:e4:3e:91:8c:d8:56:
86:67:70:6e:4e:6b:ec:92:32:96:23:d9:84:11:0c:7f:23:6f:
6b:73:71:c4:a1:5b:4b:dc:1a:d0:52:0d:25:1b:b7:f1:da:26:
45:5e:05:f0:43:77:6a:be:8e:c7:9c:6d:09:03:2e:31:6c:6f:
45:5e:ee:15:29:e0:d5:3e:66:29:64:5f:6c:e7:80:f7:cb:6c:
3b:83:b6:3c:de:07:23:11:a8:1b:de:56:52:02:11:d1:04:bf:
70:62:49:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 22:59:40 2025 by rpki-client