Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: bQ9xlMjLEoU2WiFj0YtXcIyT4bjZArQPTMAiYC4YOj8=
Subject key identifier: ED:30:B9:F2:EF:10:45:1E:89:A3:6F:68:62:56:6A:FF:EB:0D:10:40
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 01984AAF04B31F0EA7A30FCBB473593B2499
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 07:00:40 +0000
Manifest this update: Sun 27 Jul 2025 07:00:40 +0000
Manifest next update: Mon 28 Jul 2025 07:00:40 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: 2bNvX4nRwP8Wx4fOkhNd6r9j5nPwIGSAl6Tcj/sXBf0=)
2: MOwk6-gNTotPX4medNv9DwpG-nY.roa (hash: 6Jb3ucO6IvrIBpfG+RtQ1ACJyD7qIWwk6gOaPXaKjcU=)
3: YTaACXpx54gDy9xvy1Yl2SVGqRU.roa (hash: LQglYAbCThbY5IKAki5TmwIb5w2DJ6WRR1u7/db90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:af:04:b3:1f:0e:a7:a3:0f:cb:b4:73:59:3b:24:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Jul 27 07:00:40 2025 GMT
Not After : Jul 28 07:00:40 2025 GMT
Subject: CN=ed30b9f2ef10451e89a36f6862566affeb0d1040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:b5:47:41:4f:6c:79:1a:c6:5a:fe:1f:28:
d8:33:79:36:6b:86:51:5c:46:83:3f:1c:b4:36:6b:
3d:af:11:7c:4f:bc:08:c2:10:b2:45:aa:b9:42:83:
49:77:59:ea:f6:68:81:a9:71:f7:92:89:4a:28:67:
3b:63:98:eb:d4:74:ac:23:4a:41:99:c4:a4:28:bd:
50:98:67:af:cd:ed:6f:cb:e3:5a:f3:0e:bc:9d:ba:
af:54:51:fd:ee:60:2c:35:5c:4a:53:44:e3:a7:21:
c8:56:9f:28:d3:94:0c:5f:66:56:e5:e5:14:3c:a5:
5d:e2:e7:c6:0a:23:4b:3f:f1:38:fa:0e:83:35:6b:
61:62:a1:39:ea:1b:d6:04:2d:a1:68:93:76:e3:4f:
8d:9f:2c:f9:a0:3a:69:c3:bf:92:e6:26:d2:18:c6:
ab:ab:69:fd:17:19:24:ab:40:ee:16:2f:e4:18:38:
49:db:a9:e6:f9:ea:ce:91:cc:73:b5:fb:6d:86:49:
2c:7d:e6:01:9a:d4:fa:2a:c5:6e:08:11:c1:1c:62:
9e:98:2c:ae:4b:cf:fd:df:c1:c9:63:1e:79:19:5a:
bb:a5:03:21:de:c0:5c:fc:5e:09:dd:56:d3:c7:c1:
12:85:04:8a:1f:98:ab:dc:13:3e:c5:05:93:4f:98:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:30:B9:F2:EF:10:45:1E:89:A3:6F:68:62:56:6A:FF:EB:0D:10:40
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fe:8c:a7:8d:34:06:5c:84:dc:56:0b:70:91:ef:9f:05:3c:
94:c1:2e:43:07:a8:f4:6d:e4:0d:80:03:d0:a0:f9:f2:bb:39:
c7:ef:94:0a:ad:c0:c0:0a:d4:1e:2f:51:41:e4:b3:4e:80:d4:
6b:9d:e3:ba:dc:90:12:6e:56:54:b7:ab:78:41:95:8f:a3:63:
8a:67:6a:80:dd:df:70:a9:e8:c2:dc:43:a5:25:4a:51:cf:d8:
47:47:b1:84:82:c5:28:ad:7c:c1:5e:f1:e5:4b:6f:c5:ee:a4:
6d:1e:bc:f5:8a:3b:ab:00:34:da:a5:02:9a:b7:f4:5e:8e:f8:
69:3d:f2:4a:08:70:ae:67:af:86:e0:0d:6c:b9:5f:01:d3:7d:
1c:c5:65:db:00:69:0b:7d:ff:41:7f:e4:24:f0:c4:82:6b:56:
5e:a2:ae:73:6a:5a:86:6c:28:69:e4:da:6a:eb:36:b8:ea:7c:
32:17:b3:88:28:d3:c0:a0:90:e9:32:f2:e6:33:fb:5a:9e:2e:
81:9c:40:35:97:fc:69:ac:13:2d:1b:bc:92:3f:13:32:3d:0f:
f4:62:41:8b:42:f1:6a:09:37:21:6d:49:3a:44:a3:1f:d3:71:
6f:37:97:69:7a:c8:dd:49:2c:7f:83:a3:71:10:5d:63:96:78:
d1:4b:98:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:37:09 2025 by rpki-client