Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier: tLtzB/sb4AqVEPD5MFy4GgZIYIstOEBxMS0gDBF/3t0=
Subject key identifier: 29:B9:D3:B5:7B:84:31:F5:88:A6:B6:05:0C:48:D6:DD:BA:28:EC:FA
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 0198541FF0FBB88929E604DDE03116F007E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number: 160F
Signing time: Tue 29 Jul 2025 03:00:36 +0000
Manifest this update: Tue 29 Jul 2025 03:00:36 +0000
Manifest next update: Wed 30 Jul 2025 03:00:36 +0000
Files and hashes: 1: 4x6rjkazNCLflUWUlsTwU4cxca8.roa (hash: ow7cUKut6886qX9EXf4fCgAMPFDIEd+yoCgqSPSsnlI=)
2: 7h9PVYRfpJWQVe6p_fUNqkMIVJM.roa (hash: 0F7e9cMMXcDHwo+/3DX5egozFHFiaYZUkpRfNYs9hic=)
3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: 157tv0BF2DQObaXLwMDSXrk6Fqg95oodXXgNGxpGSd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:1f:f0:fb:b8:89:29:e6:04:dd:e0:31:16:f0:07:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Jul 29 03:00:36 2025 GMT
Not After : Jul 30 03:00:36 2025 GMT
Subject: CN=29b9d3b57b8431f588a6b6050c48d6ddba28ecfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:72:7e:d7:bc:fb:99:bf:6d:af:47:f2:f7:
cc:e7:87:bb:11:71:05:5b:5f:74:ad:c5:2d:06:6c:
35:5a:6a:f6:10:ab:00:7e:90:8f:5e:c6:4f:d2:0e:
28:bb:4d:6c:80:40:a5:32:40:b0:96:49:ea:8b:a1:
15:3f:cf:a5:6f:a4:34:01:fb:5e:7e:b5:84:87:0b:
4f:5e:6f:cd:2f:df:a7:e5:cb:3a:24:63:3b:e8:61:
b0:17:48:a8:48:92:18:ee:44:bf:4a:c6:4b:92:24:
fa:97:93:20:fd:09:ef:49:dc:98:3d:61:c1:0e:4f:
31:4a:45:a8:ad:9a:bf:a7:5d:77:2c:15:ed:75:21:
ac:a8:7f:9c:d5:3a:36:0a:58:2b:ad:42:57:45:3a:
9d:18:5f:5e:01:1b:50:c9:94:90:39:9c:a2:91:ea:
1f:76:cc:c8:30:88:9e:3a:90:98:ce:91:f1:da:9d:
d9:88:2d:bc:d4:9b:a9:96:49:ca:3b:e4:9a:97:9a:
bc:a6:fd:45:8f:ae:17:a5:50:91:0a:f0:aa:91:aa:
df:b1:27:08:8a:38:2f:cd:cd:68:05:d7:97:bc:93:
06:96:c0:54:dd:26:54:fc:16:c5:02:4c:6c:fb:54:
81:a5:8b:6f:cd:ef:92:ff:3d:95:20:80:4d:16:e8:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B9:D3:B5:7B:84:31:F5:88:A6:B6:05:0C:48:D6:DD:BA:28:EC:FA
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:36:2c:5a:61:62:96:41:59:d2:8c:79:47:52:67:b6:11:c9:
9c:69:3c:42:0a:c4:a4:77:74:f3:41:61:f9:e0:c3:8c:15:ab:
26:24:b4:5c:05:b1:42:2b:ba:e2:0a:27:2d:ef:d8:00:50:d4:
45:ce:45:56:30:f0:9b:6d:49:7d:6f:b4:20:4b:57:07:59:58:
43:94:ff:7f:81:93:73:76:8e:99:20:27:84:94:03:3a:d5:52:
8d:ca:db:09:9b:f3:c3:27:d9:17:5d:e1:aa:c2:7f:19:db:dd:
b7:68:cf:0a:90:5c:48:b7:09:39:61:d9:07:72:55:74:38:97:
d9:2d:0a:7c:c4:27:cf:2f:f2:3d:88:48:12:2e:df:36:af:24:
a1:6a:37:16:29:66:bc:25:67:cc:8a:03:ac:a4:dc:a0:be:b6:
7f:e8:3f:9b:e4:73:5a:51:d4:ea:92:26:44:f1:20:6d:fc:12:
d2:64:4a:cb:84:37:83:a8:bf:21:dc:1d:5a:a7:e5:02:dd:78:
53:0c:d4:79:f3:a4:5b:e0:8d:21:01:2b:8b:86:e3:03:d2:0c:
f5:7c:2a:ed:6d:da:84:06:b9:a3:e1:46:91:fb:06:29:e0:fb:
d3:30:0a:20:d3:36:61:3b:dd:16:5e:22:bd:9e:cb:52:16:48:
c1:f4:6c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:14:47 2025 by rpki-client