Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: qG/RPlMr4IB/wOH4DeJCboRSh+cvI+ifp464YcR5Dgo=
Subject key identifier: E3:B8:AB:80:5C:E4:9F:F5:84:8C:C9:15:C5:49:7A:8F:F6:97:35:0C
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 01992D46F0EAEE2809D51FA2C560243A37FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 147C
Signing time: Tue 09 Sep 2025 07:00:47 +0000
Manifest this update: Tue 09 Sep 2025 07:00:47 +0000
Manifest next update: Wed 10 Sep 2025 07:00:47 +0000
Files and hashes: 1: 1zFu0RzpnnoDGJMwnKjinpXmRCA.roa (hash: ZQd8IBEmMebks+ONJAcNs9poavTsD9w6+Xw3hhWxaQ0=)
2: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: etN/V/oywq8OS3/y4qW4bEDwIitTergt/jVIb4ik4gI=)
3: HKJIsIJ7TQKVpo395xcD-UrLDIc.roa (hash: 5l8r3D44ewEJc+IhuEtnOq2QaEWlAtDCOHCZ14bO5AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:46:f0:ea:ee:28:09:d5:1f:a2:c5:60:24:3a:37:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Sep 9 07:00:47 2025 GMT
Not After : Sep 10 07:00:47 2025 GMT
Subject: CN=e3b8ab805ce49ff5848cc915c5497a8ff697350c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:94:cd:28:e8:b8:d1:64:8c:6b:db:2f:2a:
97:b6:eb:eb:a4:62:94:f3:28:2a:e2:12:e6:34:49:
62:08:a0:21:30:9f:5f:b9:c7:de:63:78:13:05:76:
a3:b7:bc:6b:c6:4e:a9:7d:a3:71:e9:60:ec:57:e4:
54:21:af:60:fe:98:32:af:b9:ba:c9:a0:c7:9d:37:
94:33:d9:37:c9:43:e2:90:38:c9:66:91:bc:77:3b:
01:f5:33:af:d8:b4:30:4a:9e:74:bd:0f:6f:e1:dc:
75:4d:03:38:bf:15:5a:90:bf:ea:d2:82:9b:a9:60:
f3:dd:78:fd:dd:dc:6c:f4:c7:9f:85:3c:c9:73:c8:
87:8b:69:07:f3:74:c8:80:e1:22:d2:bc:bf:73:fa:
81:e9:21:34:46:1e:80:7b:2d:9c:9a:49:8e:d7:d0:
d0:15:fe:39:55:86:4d:b0:b4:0c:c7:91:ef:48:9d:
f2:70:c5:80:d4:3a:32:f5:be:56:a6:4a:34:b5:69:
88:12:68:42:c3:00:11:e4:20:bf:ff:d7:4d:7b:5a:
13:78:3c:02:12:5c:9d:db:01:15:b5:c8:fd:8d:80:
12:1d:21:a1:01:d3:00:c6:12:87:17:7b:17:af:ed:
a4:ef:e9:c0:59:a9:d1:d4:29:f8:a9:88:69:98:87:
d0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B8:AB:80:5C:E4:9F:F5:84:8C:C9:15:C5:49:7A:8F:F6:97:35:0C
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:df:cd:c0:aa:e4:bd:54:11:a0:1d:16:2b:e3:b9:d2:49:11:
b1:40:8f:f7:8f:64:83:81:57:35:2e:25:b5:b6:35:09:b0:95:
30:2a:82:50:f6:4e:f7:0e:82:3d:1a:aa:22:ca:6c:99:48:6e:
0f:94:13:88:cb:b5:3b:55:0e:86:74:9c:81:87:fe:99:e0:82:
5a:4e:11:bd:30:2e:04:4e:bc:79:27:58:0c:35:f3:9d:ca:0d:
21:21:d0:54:30:8f:73:30:e2:09:cb:36:83:c8:f1:a6:e4:28:
25:c1:44:07:a7:26:27:3e:f7:d2:87:33:3a:4f:e1:32:78:92:
12:9a:07:e1:08:07:9a:6d:cb:da:df:ce:4d:59:3a:21:20:0d:
80:aa:a9:52:ce:90:20:d7:26:df:9c:f3:8c:79:47:c7:b1:f6:
be:20:f6:a5:9a:4e:9f:fa:59:d7:c0:ab:aa:aa:55:b5:b8:6a:
68:4d:03:35:d6:81:f1:2b:76:ba:07:f2:7f:06:3e:03:9f:0c:
8e:7d:a1:a4:e1:42:a5:8e:e9:18:68:cc:b8:60:c3:6a:04:27:
d8:32:33:2f:75:7d:69:a7:72:88:5c:f8:d7:b2:39:47:ae:24:
17:d1:c5:88:99:d2:1b:45:16:c6:b3:94:52:43:85:30:87:73:
94:fa:fa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:44:19 2025 by rpki-client