Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
File: ex9VfuJjyzWaGeos1_oOjJE563Y.mft (raw, json)
Hash identifier: qAJlaNTIw/UwU/w/C16MKncfiujycJIc4bbawzV9p/4=
Subject key identifier: 90:3C:99:92:75:85:19:30:BA:23:36:75:02:5A:9D:E1:46:11:A1:94
Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
Certificate issuer: /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Certificate serial: 019855328DE23E39F58A04AD69E930C14547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
Manifest number: 160D
Signing time: Tue 29 Jul 2025 08:00:33 +0000
Manifest this update: Tue 29 Jul 2025 08:00:33 +0000
Manifest next update: Wed 30 Jul 2025 08:00:33 +0000
Files and hashes: 1: 6Sxszx8NiFM_JbWUMjBDeEvUps8.roa (hash: 8MVKcBrtv6jJ845AEcn3hP00h2PQrFrI39BtX0LnXv4=)
2: Ha78yg7qqGZ0v8W1DWmHUAWoLSA.roa (hash: mO1w4kIt1AKbmRPhw4OwRAWPyk0O9BdOZhhOqd4nLR0=)
3: ex9VfuJjyzWaGeos1_oOjJE563Y.crl (hash: sOrhKRU0A1a8H7K3/VZ4YGQiGJTm8tO3CWs5CG0t3AQ=)
4: xVoWPteOkysGzMqfxgi3XvQDa0c.roa (hash: y5AR4qkIxHvuU7VtfK3TX7mIOGmTaWSa06ypi+bML3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:32:8d:e2:3e:39:f5:8a:04:ad:69:e9:30:c1:45:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Validity
Not Before: Jul 29 08:00:33 2025 GMT
Not After : Jul 30 08:00:33 2025 GMT
Subject: CN=903c999275851930ba233675025a9de14611a194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:6e:03:4b:a3:5b:f0:ea:b5:f0:08:93:a5:ce:
f4:b5:11:0f:1f:3f:8e:4a:e9:39:69:b2:4b:e2:cb:
e3:99:96:1c:63:89:5f:aa:2a:43:d1:f8:5d:8d:7f:
dc:86:65:c2:7d:f6:65:9c:17:88:7f:bf:07:99:87:
e4:3f:f5:fa:3a:f6:95:91:88:c9:64:99:c2:36:29:
e7:7a:ca:e1:5f:54:aa:e0:71:d8:f2:1c:51:a6:3b:
56:c1:78:29:d7:07:b1:8b:4c:ef:9b:da:cc:c4:2d:
ec:94:e3:3c:98:16:5a:bc:a7:e9:01:17:b5:62:dd:
fc:89:2c:d3:e3:04:9b:51:fe:24:5f:31:7d:ef:b9:
0e:1a:4d:60:17:1c:37:e0:f4:d5:fd:b8:8e:3f:c6:
8d:c8:44:76:47:83:8a:e4:1c:0c:87:50:84:1e:3d:
60:55:78:9a:06:02:02:57:ad:44:79:ab:e3:66:49:
3e:4d:d3:b2:ea:90:50:62:fb:14:c9:44:49:e0:ee:
dc:60:ef:53:ca:f6:b9:a5:39:20:31:f4:d1:f2:db:
08:07:a1:61:57:b5:95:5a:89:50:e8:11:27:0d:2f:
17:f6:29:fe:19:3c:9d:7d:2e:3b:75:7c:b6:70:91:
e3:a3:18:eb:4f:2a:ec:2d:65:62:f8:1c:b6:77:bd:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3C:99:92:75:85:19:30:BA:23:36:75:02:5A:9D:E1:46:11:A1:94
X509v3 Authority Key Identifier:
keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:05:c7:ca:15:18:6b:fd:18:df:2d:3c:66:ac:8e:cf:f3:7d:
4f:28:ca:5c:6c:5e:f0:00:17:d1:e5:ae:f9:d5:aa:58:24:09:
54:93:cd:34:0e:db:91:87:b0:81:85:48:df:8e:13:d5:e9:45:
ce:0c:57:b2:7d:75:49:1e:90:3a:8c:03:15:91:d1:1c:f6:90:
62:b1:47:ad:1a:a6:c4:56:66:d1:8f:e0:f3:f2:e6:9c:a0:b8:
70:39:d8:a4:24:8b:56:68:2b:73:8f:03:19:b2:75:3b:6f:19:
87:37:12:f5:2b:a7:4f:a3:25:e9:4e:d8:77:de:f9:e5:cc:fc:
fc:e3:e9:b0:73:ee:25:69:16:a3:c0:d8:5f:2c:41:fc:ad:ed:
41:85:67:de:1d:7d:a8:7c:41:10:01:81:ca:cc:eb:50:86:13:
69:0e:a5:86:1c:07:4d:f0:0b:28:9e:d5:5b:0a:13:87:b2:e0:
c1:b1:81:44:3a:df:46:53:e5:06:31:b8:a8:52:49:c0:c1:99:
60:55:ef:51:32:e9:b8:61:33:be:6b:aa:90:ec:b3:e9:d9:7f:
e5:20:1b:99:4f:2c:a2:1e:a6:f7:7f:9e:0d:c5:d4:5b:6e:a8:
57:77:8a:31:fa:c6:d0:f2:a7:74:3b:12:34:02:70:6a:c3:3f:
f8:17:9d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:38:36 2025 by rpki-client