Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
File: p_0_iTNdz4KGZrKPrYrpk71EiHg.mft (raw, json)
Hash identifier: QAyufYi45ObAvKbfgj0ku3wBwwOq8uu1VTWFm2mCUEk=
Subject key identifier: 9E:86:AC:94:BD:03:61:98:11:EC:7D:DE:9F:25:98:8E:DB:78:5A:D0
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Certificate issuer: /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial: 01984407D98F903A02F599EEEC9BB5639396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
Manifest number: 0D88
Signing time: Sat 26 Jul 2025 00:00:21 +0000
Manifest this update: Sat 26 Jul 2025 00:00:21 +0000
Manifest next update: Sun 27 Jul 2025 00:00:21 +0000
Files and hashes: 1: 3DUEt-aAns-v1SVe6cG9Jeqaah4.roa (hash: 80+E6/cb26cmgMWADgR9cowpvlm1kb/qW3Qt9g0U5L8=)
2: Ap5URXBO93O7jJtjlLZVH2pw48c.roa (hash: p0iYaq767KbYvMNrK5KRomzTD5nBTVSwaVmB+7Atf7Y=)
3: JEudm5eaXMbpcorZfF2mGZr0koE.roa (hash: XbkPUoxJZnY0l62UTU5OlIMUIwc1e7/u/vIUsrvTLYY=)
4: gJZeDk4rmX44E5axtXtFWO80NO0.roa (hash: pUiSGUoY8i4KMd2N+BSEOVvNbEKEOnmR+nGAVe0LW6E=)
5: lejfRms_8jcNpkPTbPyQIBJyGvk.roa (hash: tyCtAQGeo8obwJOw9cT2nm1EzzLsrcw7uVb2b4sZkgw=)
6: p_0_iTNdz4KGZrKPrYrpk71EiHg.crl (hash: X+cwUH+67clZ33O29r0TKJx3aIT8ZAs/LvIhEtKMd8I=)
7: saa_0VvgXSNx1kkjSqyVEbVnkCY.roa (hash: v+RU7IsAtr1sKZAICZ44u+iiQ3vM7YjRtrxROuRMlCQ=)
8: x0T3yvJpLXpG0yBkBOlH0qchh3U.roa (hash: Lt2tpn0tH6x5Kf9HXc8LFADRTohAK1wE2pgpgUDlEXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:07:d9:8f:90:3a:02:f5:99:ee:ec:9b:b5:63:93:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Validity
Not Before: Jul 26 00:00:21 2025 GMT
Not After : Jul 27 00:00:21 2025 GMT
Subject: CN=9e86ac94bd03619811ec7dde9f25988edb785ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:f9:c2:f4:48:c6:81:98:6e:0c:29:6a:93:
06:21:7d:6e:43:53:a9:ca:8f:9a:70:d7:32:e6:e4:
f7:fb:2f:d9:98:db:4c:49:ff:d6:5f:ff:a0:e4:88:
f4:13:36:dc:b5:97:ea:f1:64:2a:24:48:79:4c:c6:
ec:27:fd:32:d7:8d:14:33:73:db:10:01:2b:ae:1f:
4b:eb:8d:48:52:40:29:cc:d2:a0:9d:50:04:d0:20:
5a:08:d3:8a:49:0a:85:7b:6f:54:b7:37:8f:1e:34:
b2:10:66:19:d2:f0:83:7c:c3:f9:f0:46:41:4a:26:
b3:19:6a:3c:0e:2f:ae:ab:c8:0f:a5:e9:5a:bc:73:
7f:a4:14:65:2f:87:28:a1:e2:04:34:7a:5c:00:ae:
d2:b1:30:7d:e5:6d:86:72:db:92:a1:06:b9:d7:34:
db:92:a5:dd:f7:bb:1f:f0:d4:68:27:fc:05:bb:dc:
cb:0a:1c:bf:72:3c:75:6c:13:11:39:c9:e7:f7:8c:
5a:0d:65:26:f8:4f:e2:95:76:e3:24:d8:09:53:c2:
0f:6b:cc:6b:5b:e1:e6:48:3f:db:4b:36:c0:7c:f6:
ff:be:7b:a7:40:8d:a2:a4:be:24:16:0a:fa:01:82:
e2:55:e7:9b:69:11:4d:a0:19:59:66:79:81:c7:a7:
3c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:86:AC:94:BD:03:61:98:11:EC:7D:DE:9F:25:98:8E:DB:78:5A:D0
X509v3 Authority Key Identifier:
keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:92:e8:4a:49:09:74:c7:e7:e7:22:28:96:c2:65:55:80:db:
e8:76:76:8a:72:33:0e:4a:ce:18:68:6c:00:61:3a:05:53:41:
a2:f1:28:9c:79:c4:0b:b3:cb:49:4a:0d:bf:ad:34:57:eb:9d:
3e:5b:17:00:22:8c:ff:f6:21:a4:7c:05:0d:0f:d2:97:7c:00:
a8:b4:96:a6:d0:b5:de:3e:eb:e0:9d:6f:64:9e:a2:0d:45:8a:
f6:15:10:93:16:3a:92:9d:22:c2:5b:bb:3c:62:cb:f2:17:93:
6e:59:de:88:a8:8b:f7:6a:43:b5:cb:d1:89:7d:d6:49:b7:3e:
5f:f0:f3:2e:10:0f:30:d0:9b:08:69:53:45:56:7d:d9:2c:24:
fc:8d:49:ad:c4:db:70:af:e0:c6:24:1a:c7:be:ff:4d:45:c8:
ab:6d:c3:3a:29:8e:54:c3:17:5e:7c:25:c4:c5:1f:36:3a:0a:
da:4e:30:4d:ca:80:bd:1c:1b:d0:cd:5e:09:32:98:77:9f:6d:
3f:f6:bf:6d:a3:cb:c1:b2:1c:a7:48:d0:91:f3:ac:30:8a:ab:
53:16:f8:b6:1d:41:37:dd:97:82:1e:73:a7:8d:24:ae:95:ae:
2e:ce:63:17:3f:11:e0:d1:d1:b6:17:33:f1:97:60:a7:00:e5:
9b:51:5e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:47:01 2025 by rpki-client