Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
File: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft (raw, json)
Hash identifier: GNu6maQAlcikNlgSTdw5k6yXcSpgt33rG/IOETFcvSQ=
Subject key identifier: E4:48:8B:48:4A:ED:CC:B6:71:72:03:8E:8A:FB:F4:FE:18:20:B8:A5
Authority key identifier: ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
Certificate issuer: /CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Certificate serial: 0198530DA9DD8DAC36CD7AC682941EB7174C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
Manifest number: 1609
Signing time: Mon 28 Jul 2025 22:01:01 +0000
Manifest this update: Mon 28 Jul 2025 22:01:01 +0000
Manifest next update: Tue 29 Jul 2025 22:01:01 +0000
Files and hashes: 1: 3pE7ngeyN1HHpk0KHj4fUNdQvUM.roa (hash: mNG9h0i2ooRim+EzKgj5oXfWKRS+vfBHN7OSNoR8nx0=)
2: 7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl (hash: 0QILqmAM9y5wKC5xSKYy1YgwR1KIIeSXyopfB+5EBR4=)
3: NtkJ9XnrruhKtg-qQfEiGBcXIF8.roa (hash: Jv+k94qXBgLa6tQsUzrVhcRNbmkihG2wPv1tzN8y6Bk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:a9:dd:8d:ac:36:cd:7a:c6:82:94:1e:b7:17:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed95533ef47fd94b8c554df3d228eedcd4ca0384
Validity
Not Before: Jul 28 22:01:01 2025 GMT
Not After : Jul 29 22:01:01 2025 GMT
Subject: CN=e4488b484aedccb67172038e8afbf4fe1820b8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:c4:cb:d6:47:6e:60:3c:b6:78:6d:8f:a1:
2f:bb:15:c4:70:d8:64:fa:5a:42:8c:f1:9f:0b:ea:
8c:6d:f7:89:3a:55:cc:02:5f:5c:2d:ea:45:0f:f3:
77:b3:f5:54:b0:66:9c:e7:02:fd:ad:fd:ee:99:c1:
5e:b0:6b:f8:37:d8:ea:d5:de:5c:a8:19:5e:4f:b3:
a6:68:54:2c:6d:92:6d:63:5a:e6:53:db:9f:26:22:
b3:3e:ee:73:c4:aa:bb:73:23:f5:8b:95:07:f0:5b:
b4:a6:7e:aa:9c:cc:50:02:7c:5d:5d:8a:3f:fc:e3:
26:b8:ef:d9:ca:3e:74:2c:b8:f1:4f:7c:1c:0b:d4:
ac:ba:99:62:53:6b:34:b2:06:cc:52:8e:3c:15:8c:
50:6f:86:9b:b1:2f:e0:4f:24:1e:53:de:b8:71:74:
26:67:cf:c2:dc:dc:40:b4:25:cc:1e:b0:c4:e9:c5:
6f:32:a4:7b:8e:16:0e:cc:83:8f:c0:5f:48:47:b7:
80:d4:68:a7:9c:26:84:5e:6c:68:c7:61:e5:c8:a1:
b3:e7:71:d6:e1:44:5d:be:63:2c:c9:56:1a:26:e7:
6d:cb:db:eb:c4:06:21:91:98:ba:bd:7d:ec:fe:bc:
77:8e:a3:73:71:ec:75:18:f5:d5:e8:f0:46:27:c6:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:48:8B:48:4A:ED:CC:B6:71:72:03:8E:8A:FB:F4:FE:18:20:B8:A5
X509v3 Authority Key Identifier:
keyid:ED:95:53:3E:F4:7F:D9:4B:8C:55:4D:F3:D2:28:EE:DC:D4:CA:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7a0423-9a95-42c1-81e5-14da79d6c3aa/1/7ZVTPvR_2UuMVU3z0iju3NTKA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a5:47:fc:fc:f3:ae:d1:61:9c:2a:ff:28:5d:81:8c:f0:f5:
42:28:fb:51:15:18:9e:09:14:d6:9d:39:fa:4a:c4:85:42:29:
2b:b4:6a:4e:f9:8e:d7:63:93:76:06:65:1a:09:4d:43:27:24:
9b:ac:02:5a:71:bd:0a:ca:aa:38:31:21:03:93:27:17:be:46:
ec:21:4f:08:56:c3:1d:9f:d9:fe:4e:46:c6:60:20:17:03:7a:
15:d0:4c:0f:7a:f1:22:d8:eb:be:41:53:92:cc:b1:e0:85:65:
02:68:ef:ba:37:f3:61:14:dd:51:f0:0b:c2:cd:6e:71:e6:d8:
d5:8d:c4:40:eb:66:5a:9c:57:1f:e0:9e:f6:11:1b:fa:ce:02:
47:33:0a:b4:38:80:dc:6c:50:e7:32:1b:c6:53:3b:f6:11:7d:
6b:e1:18:44:6e:29:61:57:b4:8d:e2:6e:5c:6b:ff:b5:68:b4:
03:e4:ec:78:5e:c4:fc:c3:3d:bd:b8:14:cc:d4:d9:fb:a2:2d:
a3:eb:15:e6:59:7d:f7:b9:79:00:76:66:bb:1f:59:13:3b:5d:
42:25:c0:2c:59:3f:98:a9:8f:cf:72:b8:c2:09:db:82:56:a1:
4b:a8:b3:32:78:c3:50:a3:e3:cf:30:55:b3:31:92:0a:f8:d8:
b1:40:f7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:48:44 2025 by rpki-client