Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.mft (raw, json)
Hash identifier: TkjH3BepXEQoHD53cmjchLze3uR3EARLU03aBcQu/YE=
Subject key identifier: EC:25:C5:23:FE:19:DB:CB:BE:BF:B6:AE:66:97:F1:C3:53:2B:EF:FC
Authority key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Certificate issuer: /CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Certificate serial: 019855695912E9D47D8CA4D87C5CE8890694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
Manifest number: 160C
Signing time: Tue 29 Jul 2025 09:00:24 +0000
Manifest this update: Tue 29 Jul 2025 09:00:24 +0000
Manifest next update: Wed 30 Jul 2025 09:00:24 +0000
Files and hashes: 1: 7-aRQnxuQYBvbOseIYp9xjIP3u0.crl (hash: Sx6MKWJ3bXR1CtF1nhY4QGnII05BPcF6VTESP9FHlZo=)
2: EytKkp-cHU6YafCnB0z54OPcAnc.roa (hash: qXa8VJW5qO7AGM9oVgWuxQ8fPmA9SdZQmj6ClsTDzLA=)
3: SSk5EJ2eeCxHqtRI36s4YAa6XHE.roa (hash: Qy4Hae6uxNoX2t2wWLKuUW7INir6rrE0SB0/N7PGSAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:69:59:12:e9:d4:7d:8c:a4:d8:7c:5c:e8:89:06:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Validity
Not Before: Jul 29 09:00:24 2025 GMT
Not After : Jul 30 09:00:24 2025 GMT
Subject: CN=ec25c523fe19dbcbbebfb6ae6697f1c3532beffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e2:5b:1a:21:d3:6a:37:89:a7:60:e5:05:8f:
08:c0:bb:0a:66:d8:e9:ae:f4:fa:78:e8:e3:68:fd:
90:e6:f0:6e:a4:a3:6f:a8:a3:f8:c5:be:e1:d4:36:
3f:96:46:ba:a6:32:29:68:15:ae:0f:c8:9b:ca:36:
16:fc:e2:80:91:04:1e:5b:43:5d:e3:1f:4b:c6:de:
e5:fb:5b:d0:e0:a6:85:d2:19:0b:6b:a4:af:82:18:
52:8b:f4:7b:76:ef:1d:a1:4a:0b:29:77:ab:aa:06:
dd:a7:ea:02:bd:ae:c5:fc:7d:b2:72:6d:2f:c6:d2:
f3:46:13:f1:b0:7c:44:4b:b7:0d:d8:0a:05:f0:73:
54:7f:d9:03:87:d2:35:95:b0:f4:bc:69:41:d5:79:
62:c8:77:e8:04:62:f2:6b:85:7d:12:ae:8b:c8:bb:
0c:6e:b8:7e:e6:2f:eb:59:33:c1:7a:06:04:fd:24:
80:ae:9d:f7:bb:07:0c:bf:5e:d1:32:f1:2c:48:11:
a3:8f:72:e4:cd:4b:82:49:aa:e1:ef:88:2e:84:55:
a1:5b:2f:4d:63:bd:2b:9b:c8:ff:01:f2:2a:1b:63:
d8:b1:84:29:ca:4c:ef:51:69:a5:4c:8d:5f:f4:b5:
b8:3a:47:22:e4:e6:b1:98:3a:18:a3:28:3e:9a:0b:
da:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:25:C5:23:FE:19:DB:CB:BE:BF:B6:AE:66:97:F1:C3:53:2B:EF:FC
X509v3 Authority Key Identifier:
keyid:EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8a:4f:4d:0d:e5:2e:51:ae:4d:95:65:4a:f0:1c:73:d8:e6:
c9:84:7b:3b:fa:b2:25:e9:50:a3:13:2e:6b:3e:ce:4c:96:f4:
2b:7b:8b:eb:89:83:d1:99:c2:bc:c6:0e:6b:bf:4c:82:fa:e0:
ca:da:5a:8b:b7:20:38:65:44:e3:ef:ad:c9:ab:e7:c7:7b:68:
a9:3a:b3:45:6e:06:91:e2:3f:d0:13:3d:3b:1d:1c:13:ad:29:
9b:3e:d6:c8:8e:6a:5e:58:84:15:39:7a:ca:8a:74:42:f0:98:
f9:8f:14:67:f5:35:f4:ef:89:02:79:96:5d:e5:f4:8d:69:cf:
bd:9f:6f:f5:36:e6:c9:28:40:24:83:e0:31:c9:f8:c6:75:80:
64:5e:ce:9e:36:e1:6a:46:1e:69:37:35:06:eb:ff:17:5a:a2:
d6:a6:dc:c4:23:f6:0e:36:11:43:41:f8:5c:8e:6b:da:4a:14:
c2:f7:cc:04:b8:e4:ad:8a:65:a9:9d:39:ab:c5:cd:4b:f4:4f:
f6:6b:23:c8:90:ef:4e:27:e4:8e:ab:ab:b5:64:d4:21:9a:43:
bf:51:d7:a7:d6:55:b8:95:60:57:15:eb:78:0f:89:0b:42:e0:
d0:a0:f6:0a:ca:6d:a9:87:d0:4d:bd:46:ea:6f:18:9b:a3:6f:
60:d7:88:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:43:35 2025 by rpki-client