Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
File: 7s8_de-DBrbFk6QjzaGYa9496Ug.mft (raw, json)
Hash identifier: kJCQvTCgMaAxqCuAurxlLUD5aWLaMp3Au4w0WSm+1jo=
Subject key identifier: 58:37:E0:D5:2F:06:58:3F:2D:F4:82:86:1E:AD:AE:A9:6F:DF:A8:BA
Authority key identifier: EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
Certificate issuer: /CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Certificate serial: 019922551C12D8CF3584D945C188C48BA689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 04:00:26 +0000
Manifest this update: Sun 07 Sep 2025 04:00:26 +0000
Manifest next update: Mon 08 Sep 2025 04:00:26 +0000
Files and hashes: 1: 7s8_de-DBrbFk6QjzaGYa9496Ug.crl (hash: SA/VS9JAhC+HYIg54FYj+rzJlxdtzrSiPD/9qlp/7I4=)
2: EGlVEH0t1gc2k3CbZYwnROsYmlo.roa (hash: QuNd2zucwGufr5KDRuyXtcoNqdw2w2ni9eYQfrLXoy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:1c:12:d8:cf:35:84:d9:45:c1:88:c4:8b:a6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf3f75ef8306b6c593a423cda1986bde3de948
Validity
Not Before: Sep 7 04:00:26 2025 GMT
Not After : Sep 8 04:00:26 2025 GMT
Subject: CN=5837e0d52f06583f2df482861eadaea96fdfa8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:03:ff:b4:cb:d1:2b:8c:98:f3:d2:d3:59:56:
03:73:6e:f1:0a:4f:e1:19:c1:1e:29:b5:03:eb:73:
7c:e0:60:00:fd:d3:3f:8a:6a:7a:89:cd:4a:4c:bb:
d4:48:e8:5e:1d:70:05:81:d7:7a:50:f0:2a:c2:8d:
01:7d:c8:04:4b:eb:1d:34:ee:9a:bd:df:36:f7:46:
8c:08:19:de:20:b1:92:eb:ee:54:20:be:f9:1c:7d:
d6:2f:e3:9d:4d:74:11:01:2f:44:44:2b:0c:00:30:
37:29:c4:56:e7:34:d4:99:63:22:2c:19:ca:ae:59:
19:14:8d:94:24:15:da:b5:8e:df:ef:fd:9d:ab:d5:
67:6c:62:88:4c:14:44:9b:01:9b:5f:62:64:53:c5:
d7:87:55:49:98:45:65:bc:9e:7a:e9:7a:a0:19:31:
56:64:3c:bf:86:c5:c6:67:3b:d8:e0:84:1b:48:3d:
34:c9:03:bb:28:ed:99:2d:2e:15:ce:ae:09:49:99:
bb:05:d7:05:d3:96:64:ed:65:91:41:a6:fb:3a:c6:
61:4e:40:62:78:f7:5c:85:2e:6f:f3:a4:35:09:23:
97:f8:31:5d:9a:45:d4:5f:45:14:d1:46:30:21:4a:
8f:0c:dc:5b:d5:bc:b9:87:13:5b:4a:bf:99:3e:b1:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:37:E0:D5:2F:06:58:3F:2D:F4:82:86:1E:AD:AE:A9:6F:DF:A8:BA
X509v3 Authority Key Identifier:
keyid:EE:CF:3F:75:EF:83:06:B6:C5:93:A4:23:CD:A1:98:6B:DE:3D:E9:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7s8_de-DBrbFk6QjzaGYa9496Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/5df16b-bc66-40dd-a731-35b56ccca849/1/7s8_de-DBrbFk6QjzaGYa9496Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e5:7a:b8:98:b4:d4:32:3c:cc:0c:bf:a6:19:6b:26:ff:63:
eb:fc:c2:0f:fe:8b:9e:23:ed:a7:f3:08:34:6c:9e:77:58:42:
38:6d:a4:2b:c6:48:aa:8f:77:b7:2c:53:67:85:e5:9d:3d:9e:
30:fe:41:61:c4:c1:34:f4:a0:a1:fa:d6:5f:81:a6:e1:d9:7c:
97:f6:6d:03:32:ea:27:66:19:be:20:14:a7:c1:1e:4c:cc:1c:
95:e4:f5:fb:91:53:ff:cf:01:fe:65:16:11:af:d6:c5:7f:e4:
8d:42:ff:e3:d3:c1:15:96:73:de:2d:61:85:63:ee:62:3e:d1:
a0:c4:65:fe:73:5a:b2:19:00:2e:07:41:10:26:b8:b5:8a:ab:
ed:18:42:32:d3:5c:5d:ac:a6:e7:23:48:93:ae:36:a3:16:66:
cc:72:94:1b:cb:f9:0d:17:26:19:2e:4f:f4:65:31:1a:14:6f:
1f:90:19:57:c9:7a:82:00:e2:6f:a3:ec:48:9a:97:cf:e5:06:
4f:79:98:1f:28:9c:14:98:c0:51:1a:50:c5:43:bf:83:0b:75:
aa:a4:89:2f:1b:05:be:e7:33:fe:d4:28:20:90:5a:a3:39:d4:
4e:ce:47:b9:f3:55:b4:60:0e:9c:fb:c1:fe:2c:6d:65:1e:45:
f1:15:02:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:37:49 2025 by rpki-client