Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File: 7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier: A3xQ8oOOvSPbOFrs4Yne1A7OZZviTJWrBExHsUoyYUA=
Subject key identifier: 8F:C6:A1:E0:4D:9E:58:69:F1:AA:47:19:83:87:D3:67:0E:EC:1D:44
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer: /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial: 019846D218CFBF5AE23E0F8E5F231012BC27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number: 160A
Signing time: Sat 26 Jul 2025 13:00:30 +0000
Manifest this update: Sat 26 Jul 2025 13:00:30 +0000
Manifest next update: Sun 27 Jul 2025 13:00:30 +0000
Files and hashes: 1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: ZgdtBUml5GeJr0OoLVjljmK8YgVW7V1i9VNZ2xWovAY=)
2: JjxG5JBV-4sLSO9ydbLM49BAtzE.roa (hash: cqElNxOa+f907x34fYoberfp0CD4VgTc1FzaMtoENtc=)
3: tkrTEHat3bSdWp0mTcT7h8ohu0E.roa (hash: 9f4QW5MnJXddCGseXoiWv8iW8ue5LxII6QEIhlpZ0fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:18:cf:bf:5a:e2:3e:0f:8e:5f:23:10:12:bc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Validity
Not Before: Jul 26 13:00:30 2025 GMT
Not After : Jul 27 13:00:30 2025 GMT
Subject: CN=8fc6a1e04d9e5869f1aa47198387d3670eec1d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b4:71:af:8d:4f:ca:38:67:af:db:6a:8f:2c:
da:57:c9:b2:63:8f:70:2b:80:d3:31:e8:ac:eb:62:
73:00:2b:67:25:0d:e0:e9:cd:bf:83:09:1e:fb:a1:
ca:48:25:81:c5:db:c9:3b:10:9f:a8:66:1c:bf:2a:
c6:06:a4:85:15:f3:ae:0d:a9:22:2d:5e:bb:08:2b:
cf:bf:7e:97:b2:1d:db:cb:f7:c3:a7:4a:38:50:f6:
a9:8d:b1:0e:db:d5:be:8a:69:5e:ce:8f:ca:a6:14:
34:27:63:9a:d5:32:01:39:ee:7d:b4:9a:b7:8d:52:
3f:92:27:09:25:32:80:be:aa:d4:8b:b0:ca:b5:eb:
0e:81:e9:17:23:33:9e:f9:a5:98:64:c5:5b:9d:b8:
b9:a7:7a:8a:a6:08:f9:1e:3d:3a:a8:3c:81:56:ef:
66:eb:20:b3:c4:51:3b:74:c4:a2:69:60:0a:9c:02:
4d:13:a8:d6:28:1c:2c:b3:a6:83:03:90:34:38:96:
69:13:c2:ad:7b:2a:99:67:ff:85:84:d5:2c:91:c6:
e0:75:fe:13:c4:40:3d:ab:1d:52:b8:37:23:4e:d0:
93:5f:0f:ca:80:e7:2e:c3:e3:9a:84:98:cd:2a:59:
37:cf:1c:ee:98:05:8a:5f:4d:ca:34:72:3f:f5:52:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C6:A1:E0:4D:9E:58:69:F1:AA:47:19:83:87:D3:67:0E:EC:1D:44
X509v3 Authority Key Identifier:
keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a0:ae:43:37:34:d4:dd:55:d0:02:a3:6c:69:87:69:49:d6:
b9:84:60:0b:d0:74:95:29:dd:f2:3d:b4:4b:49:bd:1a:fa:58:
1e:9a:e0:26:44:67:bb:84:59:cc:fc:80:fc:86:12:39:2f:a2:
06:c3:67:45:c8:28:43:e1:9b:82:12:b2:81:18:cb:75:fe:86:
4c:cb:cc:cb:ec:a6:85:e1:67:90:02:02:01:74:fd:a8:ea:e7:
b0:eb:7f:50:3b:ac:37:3b:25:63:8b:b0:c9:7d:65:0b:08:69:
45:db:ea:66:ef:f1:0f:ec:42:06:b8:0c:30:4f:c6:4f:3d:b3:
a3:3a:25:41:42:3b:ee:e3:cb:d8:d4:ae:be:ff:c9:71:fe:fd:
3f:aa:34:00:00:d0:df:4e:cd:23:00:00:de:42:74:0f:f3:40:
f0:f1:a9:c7:f3:4b:30:27:22:0e:a4:a1:75:c0:96:b4:33:fc:
16:4b:49:7f:bc:2d:69:c2:7e:a8:25:18:d6:22:ed:ef:3e:cb:
96:dd:fc:fb:23:cf:95:fe:5c:14:fe:40:a4:e5:b7:ef:69:ab:
a7:d9:95:6e:5d:d7:78:ed:f5:17:3d:15:64:9c:7c:5a:d3:7d:
74:bd:64:ca:56:2b:dc:c9:64:6c:86:23:5a:dd:2a:aa:1a:53:
d6:3b:bb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:09:34 2025 by rpki-client