Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier: HqPYISbMAciTndNViWjgDb5voxijWsGugsUiSTFmrOQ=
Subject key identifier: AA:C5:AC:8D:71:47:1D:99:B2:1A:9E:69:08:88:32:F2:1E:FD:A6:B5
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 019836C1A0011EAB829794FB706D876A33ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number: 0FE8
Signing time: Wed 23 Jul 2025 10:08:35 +0000
Manifest this update: Wed 23 Jul 2025 10:08:35 +0000
Manifest next update: Thu 24 Jul 2025 10:08:35 +0000
Files and hashes: 1: OalAb_NOtnnw1Uf7t2E7JPJ6VoY.roa (hash: /2DSINFIyLLAuWT+NSN2AERglHoq5WMezjiuaEAGBLc=)
2: UMwJfotBVzQ9ei8MWZTF-MMyZ9s.roa (hash: 7E8VN4G/FyL9Hwi63NY6rXsJXVoge0Qr5gQg0WbzGjo=)
3: YLlE5pxTdS6tg_rMJZiHRJCBtz0.roa (hash: Bw/ViWsgEqyxUU4QLJ0NfAmaEK6jP82CD1tF0xNBYgI=)
4: i0UQOeJ6YNtAxZECZiMmxjiaF3I.roa (hash: Tq5saoxoAZ2SR0wF+u5fAsszTDxNlUp7BPSS54+/SOc=)
5: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: rWCPNf0Qt+6rPe3r0SE1SNykhEhenCLIaBwzIHySFqM=)
6: pvwfGfIGO0NkgGvmujHM737V_EY.roa (hash: 8/XbrvFS8MorMNpio1PdeXOcDn2Zh23ItADh06c9qJQ=)
7: qOY7wbeKs3nIQqhImhSE17lPdCk.roa (hash: jaqajIIr+ngeFDOwuzVR6399SRRk8jyurbScXxLtxAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 10:08:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:c1:a0:01:1e:ab:82:97:94:fb:70:6d:87:6a:33:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Jul 23 10:08:35 2025 GMT
Not After : Jul 24 10:08:35 2025 GMT
Subject: CN=aac5ac8d71471d99b21a9e69088832f21efda6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:f8:7f:7e:18:48:ca:2e:16:aa:67:89:9f:
55:64:25:11:ec:f6:e7:fc:79:fe:da:85:63:a6:0a:
18:6b:18:3e:84:f1:41:41:c2:a3:b4:aa:a3:63:81:
16:f5:24:d8:cf:94:f4:6e:06:53:7d:1d:d6:55:a7:
b6:d1:cf:ef:5d:14:8c:27:1f:7e:f8:f1:0e:a0:6a:
3f:6a:69:49:a5:a8:ba:bb:22:5b:67:43:89:67:85:
fe:52:2e:30:91:3c:bf:32:e7:26:6e:5c:75:b8:a8:
cb:91:2b:62:50:cb:d7:37:c8:57:e0:c9:91:a8:1a:
c2:d6:a5:79:11:43:3b:4a:9d:01:98:7f:2e:2d:d2:
ed:7f:93:72:c2:1d:78:22:8e:f6:9a:e1:c3:65:a2:
c6:7c:cb:fc:08:10:6e:a1:03:84:06:8c:aa:fd:c7:
f1:c9:2e:b0:9a:71:2a:1f:1a:38:c4:d8:d7:22:c3:
cf:d2:94:89:ef:d2:8c:2b:14:b0:4a:62:db:2b:3c:
4c:3a:b3:6c:fa:2d:56:c1:a5:1e:ca:e2:ae:fa:ef:
22:d4:6f:59:ad:cf:e8:a2:2f:da:6a:bb:78:44:e8:
c2:b8:a6:d7:9f:41:9c:21:d8:5a:84:ab:7e:e3:78:
98:79:25:d8:86:9d:13:d1:22:20:03:af:04:55:cb:
bf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C5:AC:8D:71:47:1D:99:B2:1A:9E:69:08:88:32:F2:1E:FD:A6:B5
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3b:56:fa:89:69:f8:ac:5e:a2:48:4c:e0:73:9f:99:d6:b5:
22:8d:c2:bc:bf:3f:9a:e1:8c:f7:23:02:7d:b5:38:5a:aa:8c:
2f:e2:74:11:70:23:98:39:5a:c4:28:f8:ec:4d:46:b8:7b:a7:
80:cc:49:a8:ef:fe:95:3d:c3:1a:52:d8:ee:0a:9b:d5:3a:8b:
d5:96:10:7e:35:c9:53:84:03:e9:8b:64:9d:39:8e:76:e9:e1:
38:10:8d:da:1a:9c:9c:2c:e6:98:c6:5f:b2:38:ce:e4:c1:fd:
04:3c:52:67:d0:4e:c5:c3:4d:2a:93:6c:7e:98:b6:c7:c3:26:
49:85:cf:4b:63:3f:22:bb:a9:34:ea:bc:54:7a:ba:51:ca:6e:
be:d4:2b:b0:16:eb:8c:70:5e:5e:8d:0c:7b:bf:e3:3e:6a:b0:
44:fc:81:cf:fc:09:68:77:c0:5c:80:e3:96:51:13:41:b9:a0:
90:b1:23:0d:d5:38:96:72:58:a6:07:7b:22:41:10:73:23:c6:
62:8d:59:64:1e:8f:b2:74:14:e7:11:33:da:49:e9:56:f3:0f:
9c:96:19:b3:c8:00:35:c1:e7:c4:3b:a5:e4:96:a2:f7:a7:41:
5a:7b:3d:2f:a4:e0:d3:7b:30:74:d1:fe:e1:32:5c:f4:3d:62:
84:cf:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:21:33 2025 by rpki-client