Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
File: 7yxcS2HXivmYzOm3w1e8_PQYGkw.mft (raw, json)
Hash identifier: 0jMV3+r7uTmk9azziHoi4uSeU9mQVmEkeoJwB+KzrvA=
Subject key identifier: 3F:30:B3:C9:AD:40:A7:89:6F:6E:C5:B7:56:B3:DE:DC:75:D0:5F:3B
Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Certificate serial: 019916F5C65966EA0E1C28F5243AB5F11A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
Manifest number: 0E40
Signing time: Thu 04 Sep 2025 23:00:29 +0000
Manifest this update: Thu 04 Sep 2025 23:00:29 +0000
Manifest next update: Fri 05 Sep 2025 23:00:29 +0000
Files and hashes: 1: 7yxcS2HXivmYzOm3w1e8_PQYGkw.crl (hash: Pkq3VpForgersA+5yo7/lEuGyvClF9K6gede8uV75A8=)
2: LW4-Oe35V5eJKzg68ztfFqGhSFg.roa (hash: D73s/rG3IJUbtI4RHRwuGNv/eWQmd3ddtUaorKL1EVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f5:c6:59:66:ea:0e:1c:28:f5:24:3a:b5:f1:1a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c
Validity
Not Before: Sep 4 23:00:29 2025 GMT
Not After : Sep 5 23:00:29 2025 GMT
Subject: CN=3f30b3c9ad40a7896f6ec5b756b3dedc75d05f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:a6:b6:58:03:cc:04:7a:76:dc:04:c4:e1:
aa:af:2c:a8:48:86:1f:c1:ca:a7:d0:c0:88:7e:94:
c2:09:a0:f8:86:af:6f:5d:e9:13:80:95:f6:d5:31:
82:2a:22:46:1a:32:a6:8f:d8:99:38:9d:01:af:56:
18:45:2e:33:61:35:8e:c5:e5:47:fa:80:54:81:96:
88:b6:8f:0a:19:26:14:f9:99:ca:06:26:15:b4:b0:
62:00:b2:16:d6:7b:ec:96:81:35:4f:46:09:f6:14:
af:76:71:80:c7:41:ff:50:cf:3d:88:5a:9b:2a:a2:
85:d4:3d:f8:a8:1c:e9:f7:cf:81:f5:d1:94:4c:ce:
63:38:f7:27:2c:31:04:06:8e:c6:0f:b1:72:e4:cc:
4c:b0:b9:f9:96:fc:84:d4:57:a9:ed:0c:ae:44:35:
97:a7:ad:98:51:11:b2:f3:19:f6:71:1d:95:a3:f1:
18:aa:3b:28:43:07:93:a0:56:7a:76:bb:a5:e4:e5:
3b:a5:84:ac:d7:5d:bc:92:cd:94:e3:33:94:c9:83:
6f:e0:9e:43:db:ab:74:3e:da:dd:8d:86:82:4e:fe:
f1:62:75:eb:9d:d3:3e:31:22:7e:47:7f:77:f0:7a:
15:86:69:ed:0b:83:dd:e6:95:5e:49:ef:e0:b2:77:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:30:B3:C9:AD:40:A7:89:6F:6E:C5:B7:56:B3:DE:DC:75:D0:5F:3B
X509v3 Authority Key Identifier:
keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:68:01:77:fa:84:09:fe:1e:ba:f7:b7:13:5c:8d:ce:07:1a:
53:42:f6:2a:8e:f9:51:1f:de:91:ea:f8:05:4e:82:ca:da:6e:
8b:78:cf:1c:99:5a:c0:8e:b0:9a:37:91:f3:81:db:0b:66:8d:
07:85:fa:30:2e:48:4f:a1:27:fa:a4:74:c5:e8:d0:8c:ad:2b:
c7:32:b3:da:20:5f:d2:00:30:4d:9f:0d:b2:b3:f9:86:a6:f1:
f4:18:79:1a:c5:54:3e:98:a4:cd:bf:89:37:47:bd:7d:27:1b:
54:d1:77:12:dc:3e:e4:7b:73:f7:95:70:20:62:59:f6:08:2b:
22:c1:c5:1e:47:6c:71:21:a3:be:30:de:ba:42:e5:02:00:d0:
1a:2e:82:3f:a4:90:57:c9:79:0f:2d:a1:24:29:98:8c:89:4a:
43:7a:a9:d7:c1:30:40:de:2c:f2:45:35:a5:ce:fd:3f:19:36:
a8:70:a1:3e:e8:1f:ba:20:67:9a:46:cb:21:43:ef:df:b3:3b:
6c:0f:80:9b:34:54:fb:7e:28:d9:78:a2:8c:b6:3d:ef:c6:b5:
66:a4:46:f4:12:44:56:f2:11:f4:db:7b:60:42:22:c7:24:87:
15:70:45:89:e8:53:17:8b:ea:19:ad:c9:1e:01:62:4e:5f:39:
37:b1:3b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:21 2025 by rpki-client