Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
File: 7hsImeOKlrVPxMvNEO9TnFTtTTg.mft (raw, json)
Hash identifier: 81s3E/sea1sBZ9LAKUbCjIlNi7f7WnxIc1dKhV10Txk=
Subject key identifier: AD:D4:BE:0A:B1:80:7E:54:69:3F:18:75:32:78:86:A8:54:1E:C1:A9
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 01984AE59CF023B95C4A3AC14FC46A18654D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 08:00:18 +0000
Manifest this update: Sun 27 Jul 2025 08:00:18 +0000
Manifest next update: Mon 28 Jul 2025 08:00:18 +0000
Files and hashes: 1: 7hsImeOKlrVPxMvNEO9TnFTtTTg.crl (hash: 5ivYPoI8+tY369+1VqxgxNbyIL64HiWkOXyiO2cjBDI=)
2: D0b1nmB_L5VEWf6cceZCeBQxCQo.roa (hash: 5aiQU00dPQtZA6c9t9iAvI3R/XjZbywVf6L+3WprENk=)
3: aayTQzRiJq9tAMzk8swFje4kTOA.roa (hash: sZC16XAD3EcE1zhIDvKbW1It71XSPS2OvJcF/8voOKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:9c:f0:23:b9:5c:4a:3a:c1:4f:c4:6a:18:65:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: Jul 27 08:00:18 2025 GMT
Not After : Jul 28 08:00:18 2025 GMT
Subject: CN=add4be0ab1807e54693f1875327886a8541ec1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:27:58:87:8e:bd:05:c1:6c:bc:84:b6:ab:
2c:7b:59:29:69:7e:a2:42:f0:97:ab:32:50:36:5f:
7e:02:9a:53:49:fa:75:cc:2e:38:30:ef:6e:5c:41:
ea:e5:56:a2:d4:8a:d4:7a:fb:ea:e0:a5:34:3b:1d:
67:ea:23:c2:83:68:bd:37:7a:b6:4b:8c:95:35:0d:
79:9f:2a:16:60:db:8c:d2:87:3d:3f:5c:58:ab:43:
6c:05:f8:03:c7:90:84:b2:34:6e:f0:1f:bf:46:0d:
40:35:7e:d3:33:69:59:dc:02:d1:28:20:5e:1b:c1:
38:fa:cb:d8:09:4a:cc:93:03:47:fa:16:fe:29:4c:
ee:cd:77:a0:33:2c:4b:44:30:44:d3:c6:95:9d:80:
31:2e:8b:52:db:44:76:0e:ec:4f:f6:8d:b7:e1:5f:
cb:e9:07:13:00:35:97:fb:dd:71:fc:2f:86:b8:8a:
a6:7d:a4:af:d9:3c:25:e0:63:65:8e:c2:05:7d:b0:
30:e4:47:b8:67:38:bf:18:d8:b6:b5:b7:71:79:71:
e8:36:6e:79:6a:5e:21:84:ce:5e:26:29:c1:5d:ca:
4b:62:61:e5:a5:0c:bf:2b:15:f6:d1:f4:61:99:52:
e6:e8:ae:c8:75:04:95:47:60:0c:b3:d9:e9:de:e2:
91:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D4:BE:0A:B1:80:7E:54:69:3F:18:75:32:78:86:A8:54:1E:C1:A9
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:44:b7:d0:42:95:c0:72:47:b7:5a:ae:2e:6e:0c:f0:d7:c6:
07:c2:24:b5:25:ff:63:03:9e:68:15:0f:f2:b6:1c:4b:e2:3f:
84:40:06:af:ef:4e:aa:9f:61:57:0e:48:37:78:f5:fd:20:72:
7e:18:b4:18:a5:69:68:83:b4:18:e8:d8:81:13:b1:ae:30:48:
56:0e:c8:18:ee:98:c1:c5:f8:76:d7:cf:60:b8:03:24:f9:24:
77:08:d8:b2:c4:54:6c:e4:5a:2c:f7:23:11:fc:d2:16:52:5a:
72:b4:89:7f:08:cb:34:99:20:1d:56:af:6b:5d:5a:c2:ef:a2:
cc:29:25:74:e1:54:f8:db:86:4f:a9:f3:a1:17:2a:5e:30:73:
6d:49:fd:9c:d8:05:7b:27:2f:21:bb:63:ea:ac:a3:27:46:00:
77:7c:d3:44:33:6b:f8:0c:81:dc:2e:88:98:73:65:98:01:34:
ea:e4:a1:4d:b6:e8:ab:16:6b:61:b9:d6:0d:4f:33:37:86:b1:
5e:bc:42:54:e8:85:dc:5e:61:65:e5:df:12:0b:96:9d:fe:c8:
87:41:0a:45:84:8c:10:e4:14:ad:03:e7:80:fe:a2:b9:5c:b1:
5b:d8:81:0e:ff:6d:fb:5e:d0:4d:51:5e:b3:be:8c:a5:e4:6a:
28:39:6a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:08:54 2025 by rpki-client