Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
File: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft (raw, json)
Hash identifier: /ppRA8PJ/1mGhaontX0EbJCGeqJo+smGZmteAAb5/9U=
Subject key identifier: 99:AE:BF:49:7E:D3:56:68:4B:6E:03:0E:AE:61:38:05:72:89:A3:57
Authority key identifier: EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
Certificate issuer: /CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Certificate serial: 0198529F0EEBC4F17F4346BF784822B8FBE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 20:00:12 +0000
Manifest this update: Mon 28 Jul 2025 20:00:12 +0000
Manifest next update: Tue 29 Jul 2025 20:00:12 +0000
Files and hashes: 1: 7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl (hash: aMaHzuad+uG91rRIwduHv/nE88iG1SxDyK4EAgNyx6Y=)
2: qrPDrPXSwyvVn-Qdl0rfUFtGg50.roa (hash: YwVpe+VwfLyswPBaEHJ3Hi4HwV3yhmlk88pkGuhRl44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:0e:eb:c4:f1:7f:43:46:bf:78:48:22:b8:fb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Validity
Not Before: Jul 28 20:00:12 2025 GMT
Not After : Jul 29 20:00:12 2025 GMT
Subject: CN=99aebf497ed356684b6e030eae6138057289a357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:8b:99:99:76:aa:4e:8f:d7:08:fd:93:06:
ee:4c:23:12:e9:50:a0:a3:41:64:03:cd:da:b6:95:
be:65:b0:13:19:94:24:25:37:71:66:08:95:33:9c:
a2:68:ae:69:55:e9:86:a1:a4:17:53:0c:7e:d6:a5:
eb:e5:a7:c1:6f:52:59:49:10:0e:8c:94:53:3a:47:
3d:68:43:8b:e4:ff:ce:8f:6e:a2:f8:61:85:36:d0:
6d:68:c3:f1:83:46:d1:e7:cc:82:33:bd:c3:e5:8e:
47:1a:48:90:de:9a:81:7f:af:fc:ec:42:a2:24:b5:
a9:ea:98:7c:e2:ce:9e:3a:91:6f:4d:89:9c:20:8a:
a6:ca:56:e8:1b:aa:13:1a:f4:88:3d:d4:3f:4a:0a:
86:a0:14:e3:8f:07:a2:65:3b:ce:82:5c:67:09:24:
a6:81:f4:9f:4e:df:c8:2d:bc:64:cc:5f:7d:7b:f3:
38:6b:db:f7:73:d3:47:2d:7b:2f:8a:08:c3:cf:d8:
a3:64:d3:6c:b0:09:ee:d8:9e:32:4c:e7:48:a1:74:
1d:5b:24:4b:65:ba:00:e2:f9:54:dc:64:9f:ca:70:
4d:23:0d:94:5d:59:29:dc:fc:d5:75:12:c9:5b:2c:
95:61:00:4d:8d:30:55:cb:17:5b:f7:21:1d:31:e6:
8a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AE:BF:49:7E:D3:56:68:4B:6E:03:0E:AE:61:38:05:72:89:A3:57
X509v3 Authority Key Identifier:
keyid:EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e1:56:88:3d:d4:a7:2b:6c:e9:e9:3e:95:bf:bb:52:dd:d7:
14:34:85:69:4e:7e:24:a7:6f:9b:45:e9:bd:75:ef:48:9e:cc:
06:67:16:79:82:ee:ef:0f:3d:fd:1c:fb:37:92:46:e1:7d:a8:
1d:0e:12:6f:61:08:e1:b6:04:a7:21:d1:b9:9b:2a:b5:20:80:
a7:a9:b7:4d:4f:83:e0:22:f9:b0:28:60:69:cc:31:22:0f:2f:
5e:37:d9:cd:89:81:b3:49:67:89:30:a0:d3:9b:73:58:9f:f5:
fe:1f:63:64:7f:04:a1:83:75:6f:27:f9:6a:df:57:c6:81:a9:
02:a6:a5:85:a8:47:d1:c9:6c:7e:33:cb:87:06:34:cd:b7:83:
43:9c:15:33:30:2a:df:01:35:85:da:51:cf:49:29:cd:b0:23:
57:9b:fe:03:f4:a6:85:f2:22:f0:81:ad:bd:0d:89:29:24:4e:
88:a2:51:51:5e:d4:ce:60:38:82:4c:36:9c:46:ec:1c:da:d0:
ff:67:72:1b:e9:9a:b0:45:ea:6e:47:4e:d0:0e:fd:ae:05:af:
1a:6e:c5:08:d8:1e:63:2b:0b:61:d2:c9:d9:72:28:02:93:16:
d9:58:00:4f:e5:a3:13:4a:b7:c1:5b:1b:60:e6:db:ce:53:40:
fc:86:03:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:24:52 2025 by rpki-client