Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
File: i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft (raw, json)
Hash identifier: wGJpFVRfc+GyUJh6t8spF/xlryIRYW0x2TjIJNDN56k=
Subject key identifier: 2A:F7:9D:50:5D:A7:AB:B0:6B:0D:A5:E9:CF:EC:B0:A7:BB:58:1E:1E
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 01984A418B08C9728345F0805ABF18C76B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
Manifest number: 160F
Signing time: Sun 27 Jul 2025 05:01:06 +0000
Manifest this update: Sun 27 Jul 2025 05:01:06 +0000
Manifest next update: Mon 28 Jul 2025 05:01:06 +0000
Files and hashes: 1: Z9hqFRirUe4P1_J6cnVrlFkJUwM.roa (hash: 1rB513D+oaDkVMZd5WQl+V38WfLdjvRgbt7ShIhiM3k=)
2: eldr0Gd72QMDJnfB5g3XkvXB5MA.roa (hash: TtEGiXJhnS9J3b71Jc1YsSME+mGa0e8iTuBkAI+Nugs=)
3: i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl (hash: k8pwjdAjNAChwPQ/ZTKKfJLPQ9s0NgnaQWCWiJkobMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:8b:08:c9:72:83:45:f0:80:5a:bf:18:c7:6b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Jul 27 05:01:06 2025 GMT
Not After : Jul 28 05:01:06 2025 GMT
Subject: CN=2af79d505da7abb06b0da5e9cfecb0a7bb581e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c8:1b:bb:f2:fc:75:6c:56:2d:6d:5b:fb:a0:
02:d1:88:48:20:e6:62:ac:4a:18:87:b4:e3:76:e0:
70:2f:cb:9f:78:18:a8:39:56:12:05:be:cd:96:7c:
e2:73:ba:4b:3e:58:ef:3f:c8:95:e6:30:b9:be:b5:
2d:4c:94:35:d1:f4:d7:44:c2:fb:cb:1b:cd:6a:af:
36:a8:c4:a8:04:68:53:8b:a8:03:72:55:0c:ab:18:
b5:d8:5f:6a:9c:f9:2e:0f:ca:62:7d:33:a9:9e:a6:
ae:cf:0c:ef:01:c3:37:90:ce:52:91:cb:f8:4d:8f:
bf:87:02:b5:07:22:68:ef:2e:0e:e1:25:ad:b2:c9:
1e:02:a6:50:9c:ff:65:c6:39:42:d4:e4:de:ab:c7:
77:13:4b:20:f4:22:ad:fe:19:d1:be:e3:ab:53:13:
42:7b:3a:36:70:6c:90:68:b6:9d:db:74:7b:67:40:
b5:a3:4f:50:73:ab:83:36:5c:23:cb:99:a7:72:97:
99:12:56:28:8c:79:08:b7:29:fa:a9:d7:24:7e:fe:
f2:07:d6:89:b2:01:01:35:c9:89:45:b8:d8:b9:77:
b2:34:06:95:2b:d9:02:c0:0d:08:dd:fb:fc:e0:e1:
5c:a5:66:40:b6:e7:e0:25:9d:d3:99:f6:be:f8:80:
91:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F7:9D:50:5D:A7:AB:B0:6B:0D:A5:E9:CF:EC:B0:A7:BB:58:1E:1E
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9e:22:24:43:d8:f7:b9:03:a4:b0:99:b9:49:3b:d2:d2:63:
18:aa:22:22:29:1e:09:5a:c4:4c:51:be:6a:22:ca:50:fc:16:
75:18:cc:9e:6d:05:f1:f8:e4:0b:31:05:f3:90:65:00:61:54:
5b:26:e9:fe:62:c7:29:a0:34:51:6e:71:a4:70:82:da:85:b2:
60:75:08:42:97:7a:3f:1b:04:8b:78:e3:c5:a1:d5:92:e7:6f:
2a:74:be:d7:c6:54:81:8f:af:6d:f1:18:48:e7:78:46:43:52:
18:09:75:c5:ac:e8:86:d3:1b:14:bb:28:bd:26:4f:9e:96:d4:
8d:35:2f:70:10:0c:0a:f7:bb:cc:ff:d6:8a:7b:1c:71:47:67:
9f:b6:08:0f:98:9d:cb:e4:22:dd:fb:2d:d1:59:0e:65:ff:ff:
3b:d0:32:13:3b:57:03:0e:0a:ae:a8:cb:b3:ca:e9:17:c2:60:
a2:e5:34:f1:4d:ad:ba:47:b7:75:6a:bc:c8:c1:2e:14:ab:6f:
da:01:fc:1a:c3:f7:34:ae:ba:21:d9:43:4a:39:a1:44:5a:e8:
26:7d:45:fb:08:cf:8a:2c:51:df:d5:7b:5a:f1:68:e3:92:c4:
08:f6:24:ca:db:02:1e:30:7a:b2:da:5b:1a:ae:bb:27:44:1b:
8d:66:e5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:16:14 2025 by rpki-client