Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
File: 7d1hus9lTmZdkSp23o9jtQBMfkg.mft (raw, json)
Hash identifier: O5810TOfAOAi8O5d0qlWbKSTPnhs/5pptMtIPRi96wA=
Subject key identifier: 0D:F6:C5:65:FB:6D:21:22:6A:46:C1:82:5B:2C:0E:51:7F:14:40:00
Authority key identifier: ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
Certificate issuer: /CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Certificate serial: 0198466428746A2E25EAE6475E579F009A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 11:00:25 +0000
Manifest this update: Sat 26 Jul 2025 11:00:25 +0000
Manifest next update: Sun 27 Jul 2025 11:00:25 +0000
Files and hashes: 1: 36Bb65z44MAsVTDbQRVeDeDmufQ.roa (hash: uPSc0dWD/LjqPKmpNOCLQpNBH6/TFH+CbImLmGpMPVg=)
2: 7d1hus9lTmZdkSp23o9jtQBMfkg.crl (hash: gScSRXoSNbAGhUkoGSeKsggWpgeZb5Own4KB+DYLcWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:28:74:6a:2e:25:ea:e6:47:5e:57:9f:00:9a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eddd61bacf654e665d912a76de8f63b5004c7e48
Validity
Not Before: Jul 26 11:00:25 2025 GMT
Not After : Jul 27 11:00:25 2025 GMT
Subject: CN=0df6c565fb6d21226a46c1825b2c0e517f144000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:10:2e:a4:2e:8b:17:3c:e2:fa:60:2b:e6:
48:25:74:f1:ac:1d:f8:05:c5:49:8d:77:e4:1d:58:
d0:91:86:83:b6:09:19:60:9f:4a:fc:ba:83:84:0a:
ab:dd:6c:93:a9:3f:66:76:48:36:7e:82:4a:b4:24:
a3:e2:f5:6e:58:cf:7e:66:45:3f:78:60:11:f9:5a:
d0:ac:be:f9:75:52:8f:17:a7:b6:df:29:ce:a3:8c:
87:c8:03:01:ec:25:47:b0:99:26:12:82:8e:cc:a7:
fc:9e:8a:d8:0c:8f:4c:02:1a:c3:e1:2d:51:1f:1c:
6b:e1:02:45:b8:1e:9f:b9:58:61:2b:ed:6e:75:9f:
a4:ba:ca:2d:0c:d9:5c:ec:d7:dd:b0:dd:48:11:01:
3a:3b:e1:3f:e5:2b:55:22:5a:ab:0c:8c:aa:0f:63:
e1:bc:65:98:2d:b4:df:07:9b:99:aa:36:d9:e5:08:
eb:68:85:8d:3e:2b:ce:8f:81:3f:53:e7:04:f7:40:
ae:57:e8:15:97:ff:d5:30:fc:c5:80:5c:a5:29:21:
14:2c:25:e2:5d:a1:d1:73:60:b8:95:ec:fb:2d:03:
93:e2:12:d2:63:8e:84:b8:b9:a4:96:3e:bd:a1:15:
76:26:ca:df:a9:eb:1c:e4:20:8d:0f:52:54:c4:67:
44:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F6:C5:65:FB:6D:21:22:6A:46:C1:82:5B:2C:0E:51:7F:14:40:00
X509v3 Authority Key Identifier:
keyid:ED:DD:61:BA:CF:65:4E:66:5D:91:2A:76:DE:8F:63:B5:00:4C:7E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d1hus9lTmZdkSp23o9jtQBMfkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/045a38-e0ba-487f-b461-7266afc98dba/1/7d1hus9lTmZdkSp23o9jtQBMfkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:45:a2:75:60:00:8c:c9:11:60:cc:9b:10:2d:dc:de:80:49:
3d:45:92:b9:3f:0f:ae:ad:8c:e5:9f:94:84:2d:30:4d:32:dc:
df:51:d2:38:e7:fd:fa:27:5f:65:04:53:ad:3a:d1:68:ee:56:
ce:12:de:b7:29:c8:5d:fd:bb:d6:61:79:60:d1:d9:b7:9d:ee:
39:e5:f8:10:9e:44:56:11:55:60:9e:07:22:aa:36:a2:fe:3e:
23:1b:d9:a4:1c:b4:2b:7c:2b:11:bf:8a:93:7c:1e:c1:8a:16:
b0:e3:a2:1f:e5:ef:c8:c2:62:8a:36:6e:a6:e0:d6:88:29:e9:
be:0f:51:ae:d3:3b:e2:8e:ff:55:af:43:2e:92:a0:d2:54:da:
b2:39:5c:50:81:90:3e:46:dc:a7:46:3d:1d:a1:fc:ef:29:1b:
7d:91:cf:a9:04:9b:78:9c:a4:c5:fd:88:75:44:81:55:77:a5:
75:67:36:07:fb:d5:99:26:90:82:e3:37:c5:ae:9a:ea:90:58:
73:ef:e0:1c:eb:31:ed:ab:e5:a1:ca:bb:7e:59:23:24:2e:89:
94:7c:8e:51:a3:c4:ab:15:04:08:40:66:3f:b9:09:cc:a7:b5:
6b:21:66:80:8a:d3:c9:47:8f:6b:c9:98:3d:40:44:c9:26:55:
71:db:60:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:34:23 2025 by rpki-client