Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: 5ut7fbO0YkoeVz224siTFziIJIcwS2dn9DuijDo2xRw=
Subject key identifier: 8D:3A:4D:E2:1A:3C:75:83:DC:47:3C:45:AD:02:53:01:4F:96:B8:38
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 01984F675C054A52413A7F1B53BBF831AE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 05:00:30 +0000
Manifest this update: Mon 28 Jul 2025 05:00:30 +0000
Manifest next update: Tue 29 Jul 2025 05:00:30 +0000
Files and hashes: 1: 697cAJc5ww3rq8-l1VuLwBpxIdc.roa (hash: btaRkUjrugna/WWsgPD4k728P+M+Z1FNlrq9vxtZCME=)
2: DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa (hash: K2abCfRZZHcX+YntqkfA1f/D7lChaJuQZeWDdJ7QE9s=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: UC0YjUqrurTlzpuYToH9YmelYLgOUNL+A7CUUHmaI2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:67:5c:05:4a:52:41:3a:7f:1b:53:bb:f8:31:ae:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Jul 28 05:00:30 2025 GMT
Not After : Jul 29 05:00:30 2025 GMT
Subject: CN=8d3a4de21a3c7583dc473c45ad0253014f96b838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:a3:5c:95:db:d8:6b:f8:91:a3:07:4f:b6:
8f:ca:6a:fa:55:98:23:84:e0:69:ef:16:74:be:a1:
38:99:92:2c:1c:95:0b:bd:99:e5:ac:26:8f:50:1b:
1f:e6:06:cb:78:c6:2c:f2:c6:cc:0c:0f:b4:03:06:
5c:09:1c:8e:8a:66:f1:b5:87:da:3a:16:bc:61:ff:
74:62:78:2d:fc:8f:de:0c:a3:a5:23:af:b9:d2:3f:
2e:f3:b4:55:1d:b8:66:95:b8:ce:da:12:1f:76:99:
e2:2c:a5:15:06:a9:07:a6:fa:c2:db:25:ef:48:59:
71:68:76:9b:c9:7c:be:d9:ca:51:ee:98:a0:c5:fb:
81:25:00:5c:b0:9d:d8:ca:d1:06:74:3b:b4:be:50:
f4:fa:cc:67:6e:2a:27:e9:b9:40:01:0c:2c:c0:3e:
b8:b4:06:14:fc:5a:50:b6:1b:cc:cd:cc:d2:05:56:
c5:10:e7:bb:e8:34:bb:e8:19:aa:44:f3:49:1c:80:
dc:ae:08:0b:0f:7a:58:bb:1a:12:0e:19:4b:d4:8c:
3c:cd:72:e5:d9:02:a7:02:b5:ce:81:c7:d5:7d:6f:
c9:d3:36:6a:93:2f:58:5d:c0:a6:5e:3b:1e:7c:b7:
63:e1:a6:25:8d:9a:e5:27:aa:73:e7:80:ec:7a:8c:
a8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:3A:4D:E2:1A:3C:75:83:DC:47:3C:45:AD:02:53:01:4F:96:B8:38
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:85:c7:c1:9d:7f:f0:a2:0d:d3:bc:5b:c4:de:2d:9f:74:14:
5c:43:93:f3:61:7b:73:c0:f1:13:c4:a2:8b:a3:b0:c9:1f:56:
71:2f:a0:df:dc:79:27:57:bb:fc:4a:55:36:41:64:7c:d2:c5:
84:e9:ad:7c:c7:b9:23:cf:bd:fa:ac:9e:17:99:40:87:90:e5:
1f:83:16:a8:f4:39:c0:67:2a:48:7e:3a:cd:ef:4d:31:eb:1b:
f1:ab:27:e0:6b:3e:ae:4a:92:08:fe:9e:fd:34:58:a9:be:32:
a6:c1:a1:b4:c3:3c:58:17:59:5d:76:3f:98:8e:2c:e9:1e:72:
8d:ba:9c:98:d2:b8:3c:22:e4:f6:de:1c:5a:ec:02:86:f5:a8:
a8:3c:a3:a4:1d:1a:d4:58:80:ba:c8:ef:0a:46:7c:3d:fc:24:
b6:f4:55:32:41:7a:1f:3b:e9:d2:8c:f5:9c:3e:87:c0:6d:ba:
50:83:97:ab:ab:de:c1:66:cd:ac:e6:0a:f2:60:a9:ff:8d:b7:
d3:58:43:fd:9b:f2:21:b0:f2:9b:d0:50:b0:f4:43:cb:b2:ad:
c0:f4:b7:89:3a:d3:a4:fa:4a:78:58:97:bd:c8:92:b9:88:4a:
3a:b6:05:d0:0e:59:f7:c8:be:eb:bd:d3:dd:69:1a:97:64:e8:
87:45:cf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 09:32:49 2025 by rpki-client