Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
File: 7jlnrQpFi4KCnunizNauljHVQhI.mft (raw, json)
Hash identifier: NdThRBlZVkyVvuVnnddfkZCyMzLkbeLP5rLVyKqc8Zo=
Subject key identifier: E5:9C:9A:09:37:64:EE:56:30:2D:40:72:9E:59:1C:2E:6B:2C:B8:C5
Authority key identifier: EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
Certificate issuer: /CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Certificate serial: 019A28C25CD0232C63A272A5649A51824069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
Manifest number: 038C
Signing time: Tue 28 Oct 2025 03:00:17 +0000
Manifest this update: Tue 28 Oct 2025 03:00:17 +0000
Manifest next update: Wed 29 Oct 2025 03:00:17 +0000
Files and hashes: 1: 7jlnrQpFi4KCnunizNauljHVQhI.crl (hash: eXBhoU931qMMTKYyG8bMeJq6aUVs/Z227dMt9E9FAmU=)
2: gylVxgv2wVCzGr0PfDa1DOljS0w.roa (hash: LJzn39XG+RijMzRlRM7pRtoqSA79D4mMA2x3jy4QHzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:5c:d0:23:2c:63:a2:72:a5:64:9a:51:82:40:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3967ad0a458b82829ee9e2ccd6ae9631d54212
Validity
Not Before: Oct 28 03:00:17 2025 GMT
Not After : Oct 29 03:00:17 2025 GMT
Subject: CN=e59c9a093764ee56302d40729e591c2e6b2cb8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:21:f4:27:f9:f0:1c:cc:90:e2:01:d1:ea:
fe:b1:c7:9a:b7:b4:bf:6e:9e:88:2a:7a:5a:6b:11:
f9:aa:34:13:a8:ac:1b:22:24:86:ee:f6:ef:7d:b4:
7f:6f:d4:0a:b1:fe:cf:d6:de:29:0f:24:95:1c:b9:
96:04:e4:17:16:74:9a:9f:f7:82:09:ec:e2:f1:88:
ca:56:26:d2:2d:b4:02:6b:8a:d2:79:6b:d6:b5:02:
06:c0:2c:2e:74:ca:7b:10:61:bb:8b:a8:21:f7:12:
5f:73:e1:45:4b:2b:85:52:74:f9:c8:1a:a7:fd:d2:
5a:07:e1:fa:49:5a:d3:9e:00:cf:f2:22:50:cd:31:
c1:c1:f9:1c:ee:c3:b1:fa:bd:1c:dc:d1:34:95:e6:
bb:e0:5b:ad:46:09:f6:7a:81:a7:65:e0:62:0c:27:
1c:ba:47:b4:34:b8:de:a9:8a:2a:09:94:4b:b4:f6:
e6:a7:ca:f7:bb:16:b2:a5:87:0f:99:19:8f:f9:20:
dd:1b:3c:99:c9:04:d0:d1:ca:3a:5b:af:c7:c9:e9:
24:30:b0:34:90:95:0d:34:90:86:2f:6f:b9:e2:a9:
bf:43:44:6e:94:f0:b4:ef:88:e0:b7:98:bc:b1:e4:
5e:5e:0d:a1:b2:02:7e:90:6e:c0:a6:60:11:b8:32:
63:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9C:9A:09:37:64:EE:56:30:2D:40:72:9E:59:1C:2E:6B:2C:B8:C5
X509v3 Authority Key Identifier:
keyid:EE:39:67:AD:0A:45:8B:82:82:9E:E9:E2:CC:D6:AE:96:31:D5:42:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jlnrQpFi4KCnunizNauljHVQhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/66ec43-0a49-43ab-ad9d-2f32816e7760/1/7jlnrQpFi4KCnunizNauljHVQhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ef:b3:03:a3:72:e6:c3:21:47:46:4f:00:59:b6:22:c6:08:
ca:48:da:1f:05:d4:84:59:8e:73:53:e6:3b:ff:1e:dd:a4:d9:
64:cc:cc:e6:f3:7b:f1:89:f4:cf:f9:ff:2a:ac:12:6e:87:57:
fe:0c:b7:d2:4e:ab:d5:92:bc:01:8a:0f:49:7e:d3:93:31:29:
08:7e:fc:cf:1e:2c:a3:dd:e9:ac:18:09:03:a6:4c:35:4a:6a:
ab:0c:1f:1f:0e:22:bf:45:85:fa:e7:e7:4d:fe:32:a3:be:d4:
ae:3f:aa:c2:d0:6f:7d:b5:1d:0c:f2:ed:f8:81:22:ca:25:fe:
5f:20:f0:4e:a2:e8:ee:36:83:01:32:3d:e9:e0:55:33:da:12:
38:70:2a:1a:01:8c:26:05:66:3c:24:60:f9:af:98:ef:27:c6:
2f:05:82:ef:20:9d:bc:2b:55:e3:70:f9:fb:48:8a:38:bc:06:
76:c6:39:ac:33:42:9c:82:ee:d9:ec:23:a1:27:2a:34:b6:1b:
17:c8:50:a3:5b:cb:27:2d:3b:dc:f5:8b:01:7a:51:a5:b8:e2:
ae:cf:21:25:ed:a0:aa:57:a5:db:18:4b:f2:9f:66:8e:0f:7e:
b8:88:ec:b7:f0:76:bf:cf:f0:30:de:fc:5a:09:27:ed:2f:19:
96:ba:a0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:12:11 2025 by rpki-client