Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
File: 7GXTFEC_ddJcYG95FcI2ymFEZKI.mft (raw, json)
Hash identifier: A3JTS33/YFQ/c+AuMfTfqJJIMntdADzMzoXZCXm6Jkw=
Subject key identifier: E1:42:1F:29:B9:61:ED:78:F3:AF:29:AE:91:1D:07:E1:44:CF:54:5D
Authority key identifier: EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
Certificate issuer: /CN=ec65d31440bf75d25c606f7915c236ca614464a2
Certificate serial: 01984964F2949EFE38853A11D69750FF964D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:00:09 +0000
Manifest this update: Sun 27 Jul 2025 01:00:09 +0000
Manifest next update: Mon 28 Jul 2025 01:00:09 +0000
Files and hashes: 1: 0LHXRZXlT4Z5tzVCD5n3wMEK_5I.roa (hash: I8mxC60DkZg+/Z8S1/Ta7eOakDYR4IDLK8C2wNx5/L4=)
2: 6fX3AcGq-C5YFIqBi50as54EhPA.roa (hash: 1KbqHGJ44yLkRFe9MKFCx+SDk5i4hgNCAcTBDnuKRDc=)
3: 7GXTFEC_ddJcYG95FcI2ymFEZKI.crl (hash: yfjopaZNG4FBZ0RAUsIRIzKpRqElEcYDuA5er7RwBDo=)
4: EGu7n5ptipM5eNOhCckU54k5DkQ.roa (hash: T5q/E4P5U9BLCmb7DxjfaSe8vQrSmm6xkzEcVmgP2NA=)
5: PJ3rrJoRRyeXmoPdL7qN8QsvEpA.roa (hash: GLnfA8SK+T7VmaJvhK7gTu86DZRC9gqxwVMFgNBn2ek=)
6: RxZdH8tJj14wo9lUz6xXNXqBRwA.roa (hash: 5ZzEhibv41QuiqdnfKIE7PgA9XlisOrBTAH+e4R62Ys=)
7: V20vcYbyilDSQD-Jtx8d2qJDtnY.roa (hash: 2USt4pmFmNQvxtA5b7+ZLT1hKFltQnZghx27ehbthpQ=)
8: nHLGbM1FaGgG8wvdxg9Y5XPBlQw.roa (hash: EnIVps1oa/43pm3iNHQ84rjsTR4sIc4UNGGhICjrp8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:64:f2:94:9e:fe:38:85:3a:11:d6:97:50:ff:96:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec65d31440bf75d25c606f7915c236ca614464a2
Validity
Not Before: Jul 27 01:00:09 2025 GMT
Not After : Jul 28 01:00:09 2025 GMT
Subject: CN=e1421f29b961ed78f3af29ae911d07e144cf545d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:60:b4:0c:3d:25:62:48:de:81:be:f8:ea:
b7:85:ea:06:de:eb:a4:fe:1e:f1:25:76:8e:36:c9:
83:92:e7:d2:3b:8d:29:e1:a0:64:25:b1:4a:1b:f9:
ac:ad:ec:c3:b6:b3:02:f1:a3:0f:34:f0:66:9c:9e:
78:10:47:43:ea:c7:61:84:7e:12:a8:b7:3e:51:2e:
50:0d:1d:55:07:f0:22:e2:ab:05:80:da:43:ad:16:
0f:5f:e9:fd:41:47:e8:86:5d:63:d3:b5:8b:29:c3:
a9:d6:08:1d:24:92:d8:72:e7:e2:0f:e4:e1:ab:88:
08:bd:f8:14:ec:d4:a5:ed:b5:3f:9b:67:c5:58:36:
61:e4:e9:41:31:72:c0:63:33:d1:6c:8a:b7:7a:59:
91:39:4d:7e:c2:71:9d:18:ea:c3:96:0d:db:28:8f:
ad:56:9c:e6:bd:10:97:d4:4f:de:46:cd:12:4a:8d:
fe:c2:17:e5:20:22:f4:7f:c9:e3:1f:23:76:b3:97:
73:6c:91:9f:b0:5b:8b:2b:ff:06:cc:7e:b1:23:5d:
65:2b:f9:6b:8b:8a:e9:a0:78:67:72:63:b7:77:c0:
a0:5c:d7:37:48:ca:7d:54:91:17:68:52:45:2f:bf:
01:26:5c:b1:a7:ac:2b:67:0d:e5:ac:c7:d4:fe:6d:
ab:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:42:1F:29:B9:61:ED:78:F3:AF:29:AE:91:1D:07:E1:44:CF:54:5D
X509v3 Authority Key Identifier:
keyid:EC:65:D3:14:40:BF:75:D2:5C:60:6F:79:15:C2:36:CA:61:44:64:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GXTFEC_ddJcYG95FcI2ymFEZKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2a6df5-8236-412d-ad79-e29589e8964a/1/7GXTFEC_ddJcYG95FcI2ymFEZKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:de:ab:60:c5:f7:c7:84:e1:49:77:cd:9a:6e:15:c7:08:c7:
71:82:fc:4c:b6:b6:d6:af:45:2a:e7:b0:f7:7a:eb:0f:31:b7:
37:32:14:f9:ef:32:b7:f8:96:16:09:01:85:6c:6e:3a:f2:37:
f0:61:63:16:e3:36:bc:f0:fa:48:e2:4c:9f:36:0b:75:ae:99:
1e:19:fe:ee:dc:9a:6e:44:10:1b:d0:89:a0:02:11:d0:cc:ca:
58:72:c1:e6:81:1f:73:b7:cf:5e:b8:68:9a:cf:c1:bc:68:8c:
eb:3c:5b:d9:63:a8:93:24:05:88:b2:f7:09:42:db:1e:af:38:
41:e6:ca:53:52:5b:a9:2a:10:3e:e0:4b:ab:4a:a7:2d:f7:b0:
e5:33:79:c5:91:ca:e1:62:37:2f:42:d8:60:09:39:cb:af:f0:
0e:95:92:8f:b2:1f:14:0b:dc:42:aa:27:a3:0c:d8:39:1d:47:
49:64:89:2e:34:0b:18:b5:97:ec:8c:1c:1e:c2:2b:7a:c7:fd:
fb:bf:27:46:b3:94:fa:8f:c4:5c:80:49:55:24:6f:64:32:40:
eb:73:8a:a0:7a:7d:79:4d:c6:36:80:cc:7b:d4:f5:f2:11:79:
d0:82:05:85:d1:3d:f7:79:72:f0:93:6f:6e:33:36:43:35:57:
b7:48:75:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:58 2025 by rpki-client