
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
File: fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft (raw, json)
Hash identifier: aRyYeUcJYE569FK9pHsLATBxX2lfJtE5hG98IZQJIV8=
Subject key identifier: 97:BB:00:1B:17:7F:2B:B7:F6:C8:19:9C:4E:1E:05:CA:EA:BD:94:4E
Authority key identifier: 7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
Certificate issuer: /CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Certificate serial: 019921B125CDC386387EB42A3D5614519C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
Manifest number: 1166
Signing time: Sun 07 Sep 2025 01:01:21 +0000
Manifest this update: Sun 07 Sep 2025 01:01:21 +0000
Manifest next update: Mon 08 Sep 2025 01:01:21 +0000
Files and hashes: 1: fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl (hash: qdiErJ7AcoKbHhhnkrSkv7PiCzqim8czYIBELJ1O6iw=)
2: j5qbmBs0_BfbwDwd52YtHtTdhQg.roa (hash: LA1lDjQr1OL9kDtbpIDDn8ilyEOxmrMJjPxRdvdaCKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:25:cd:c3:86:38:7e:b4:2a:3d:56:14:51:9c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8ee4af2fc1c4ec1b1767e3d3f260732edf9169
Validity
Not Before: Sep 7 01:01:21 2025 GMT
Not After : Sep 8 01:01:21 2025 GMT
Subject: CN=97bb001b177f2bb7f6c8199c4e1e05caeabd944e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6b:04:84:28:dd:8c:e2:18:cc:fc:47:c3:7a:
b7:0a:07:ed:40:55:c4:d0:52:d3:ed:9c:9e:9c:f4:
e3:5e:d6:c3:c9:c9:c9:8d:67:f0:a9:47:41:b3:ae:
f5:b1:3c:c4:c9:83:a8:31:63:6d:79:82:83:2b:8a:
09:3d:7b:74:00:3b:f8:24:1d:c6:d0:2a:3a:ae:d2:
4a:ca:44:ee:91:32:c5:36:b7:90:66:54:0b:ec:e8:
38:04:68:0c:39:82:82:cf:6a:50:5b:fd:ce:02:d2:
6f:74:80:18:ad:b2:9c:40:0e:75:02:12:aa:f6:eb:
b2:34:ba:d7:5f:6c:11:be:8f:7c:3a:d5:fe:6e:d4:
4a:6d:8f:27:34:e4:c5:e9:f8:40:54:ea:89:71:15:
5f:04:b3:26:dd:7a:32:87:79:a7:17:b0:57:6b:23:
f3:37:0d:3d:f1:83:c0:08:36:c8:86:2e:59:40:5d:
05:91:ca:21:5b:f7:b9:f0:2c:17:29:77:7d:bd:e8:
81:8d:63:9e:90:34:75:eb:09:b3:82:6f:24:26:dd:
0b:c7:cd:dc:7d:f6:6b:3c:69:5d:3d:4b:da:e3:73:
a4:41:7d:22:42:12:46:27:1f:19:f5:53:9e:b5:42:
ca:da:14:c9:9b:5a:b4:62:48:c2:47:72:8c:39:07:
c5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BB:00:1B:17:7F:2B:B7:F6:C8:19:9C:4E:1E:05:CA:EA:BD:94:4E
X509v3 Authority Key Identifier:
keyid:7C:8E:E4:AF:2F:C1:C4:EC:1B:17:67:E3:D3:F2:60:73:2E:DF:91:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI7kry_BxOwbF2fj0_Jgcy7fkWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a9e0bd-ac85-4e2e-8f22-83c2157bdac0/1/fI7kry_BxOwbF2fj0_Jgcy7fkWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:2f:99:da:ec:07:81:52:94:a7:d1:83:e5:34:c6:16:a2:6a:
1e:dd:9e:ba:3d:3e:4f:3b:e3:67:42:23:02:ff:4f:3b:57:fd:
d1:32:bb:1d:c6:44:bf:0a:80:ab:25:66:cb:63:ea:d0:c8:a4:
86:e9:26:0c:e9:ef:89:18:c6:65:31:6f:3e:8f:19:35:b9:28:
80:82:94:aa:cd:4c:13:9e:30:aa:86:dc:79:98:d6:20:6d:a9:
ec:7d:ae:ae:07:34:d9:b1:ae:18:9e:0f:1c:1b:ae:bd:f8:69:
1a:c5:7b:44:fd:bb:11:21:be:ad:27:c9:c0:73:ee:72:6b:03:
e3:86:c8:59:af:82:52:ca:28:c5:e0:8a:e1:d6:d7:b9:49:0d:
ce:6f:c1:48:5b:9a:9e:f1:5d:ff:95:fd:07:57:4b:8f:85:2d:
27:f2:72:48:64:05:a4:57:4d:32:68:f0:6e:6d:29:94:d5:3e:
66:4d:bb:7c:69:55:2d:92:02:7a:d3:13:fd:f0:51:0a:32:4d:
da:b4:6f:9c:cc:97:5a:a0:04:dc:7a:98:38:33:73:57:50:1d:
1c:70:1e:8a:2d:7f:12:ea:4b:d1:53:ff:cd:e2:7e:8c:a5:3e:
84:4d:5d:8a:f8:e1:aa:98:86:27:90:08:78:86:d5:53:c9:53:
f2:66:0c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:24 2025 by rpki-client