Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: Ctma61hnB+d/4qm7kY+/a51G6LxojIFFLGDg91JY7s8=
Subject key identifier: 97:DC:3A:C6:BD:61:55:6C:E3:5D:CF:F9:D6:B9:03:67:9A:99:54:29
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 01984776900EDAAD02BA429BA0674E2CBEC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 16:00:09 +0000
Manifest this update: Sat 26 Jul 2025 16:00:09 +0000
Manifest next update: Sun 27 Jul 2025 16:00:09 +0000
Files and hashes: 1: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: 8vTE8VWWVTIp2wJjSuWQNK+0oei+5U4zrRZXLSvZ6Pg=)
2: fwhTjjRIhEdJ6uOffHkJ9IbiBcc.roa (hash: uAg9kNvS0wjEdBKrNfsh4Pl1caTWWUTWPoPoJJEyRFk=)
3: tmBvyCU9dS1RGbck9AhZ77ixbZ4.roa (hash: LYRTheb+KiohViLX8r9l59ZvW37F3uyl1qPERmyYOaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:90:0e:da:ad:02:ba:42:9b:a0:67:4e:2c:be:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Jul 26 16:00:09 2025 GMT
Not After : Jul 27 16:00:09 2025 GMT
Subject: CN=97dc3ac6bd61556ce35dcff9d6b903679a995429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:f0:a3:f5:1a:cd:dd:83:57:5e:61:84:22:
6d:f2:11:4a:c1:5b:a6:58:52:07:91:6e:7b:a6:b7:
fe:fd:20:60:32:0b:91:f6:49:be:61:94:9b:eb:61:
f3:7a:15:27:f9:f3:67:65:16:3c:7a:54:70:93:75:
db:e6:c2:49:69:a7:14:75:e0:a3:84:0e:34:db:00:
52:53:cd:45:8b:20:a1:71:c8:de:21:d8:59:d0:83:
d0:53:f0:61:13:06:10:be:36:d9:7b:42:08:ed:9a:
5b:34:db:98:bb:70:de:8e:a1:10:98:51:12:42:a6:
aa:7d:c9:8b:51:5e:74:84:e4:03:9f:11:a9:06:7c:
a6:29:e0:cc:5a:ec:b8:71:55:70:1e:0a:c1:a0:4f:
5b:09:1a:75:85:06:5e:ce:b1:90:f4:1a:41:22:bb:
e8:4c:7f:56:dc:aa:2a:66:2a:c6:7b:60:ab:b9:26:
83:cf:cb:7c:fd:45:ad:25:a9:b4:fb:e9:6e:d1:e1:
73:8a:ae:00:47:4d:47:dc:be:15:cb:a0:f8:4b:40:
85:00:24:27:d8:b8:ab:8a:21:7a:b6:d9:72:18:45:
53:ac:09:09:3c:91:ee:fb:5e:8a:09:93:32:f6:93:
67:4e:75:3f:4b:8c:75:dc:12:72:0d:25:74:ee:ca:
10:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DC:3A:C6:BD:61:55:6C:E3:5D:CF:F9:D6:B9:03:67:9A:99:54:29
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0e:a4:22:7a:b9:76:67:27:a9:74:91:8d:3b:c9:eb:66:c4:
b7:e8:c3:f0:4f:5b:cb:1c:ee:4d:a8:da:fa:36:da:2a:e9:66:
4e:b3:39:c2:cc:f9:ed:64:99:b1:88:d4:e4:7f:f9:c7:9c:c6:
6b:c8:41:09:df:0a:c4:4b:84:dd:2e:2c:c2:bb:54:1b:67:2e:
48:20:c8:86:06:07:53:21:1b:ef:f9:92:56:d6:bb:ea:88:c5:
82:91:53:69:d6:41:43:50:4a:97:f6:7e:36:36:4a:26:dc:fd:
30:41:8b:03:4e:bb:47:d2:89:f3:61:9b:0c:f0:91:9b:35:c2:
be:d1:f0:bf:b1:4c:ba:eb:72:b5:a1:83:24:a1:be:48:ef:58:
b1:9f:8e:24:96:0f:7e:0d:47:df:e5:b8:e3:41:ac:f0:8b:85:
59:c6:e3:c9:5d:be:89:99:7d:39:db:9d:2a:32:39:b9:d9:0b:
2e:74:7b:ca:50:6b:34:e4:e8:fa:f2:0a:b1:4f:ab:ae:f2:e2:
23:43:ec:95:a9:b0:ca:e4:b4:4b:50:d5:7d:86:76:0c:f3:de:
aa:61:2c:3d:71:9c:31:50:51:fd:3d:d1:bf:81:60:18:fb:5e:
75:a8:41:33:4e:91:91:a1:53:7f:c6:5e:80:da:17:f5:7d:21:
78:ca:34:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:49:51 2025 by rpki-client