Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
File: h7E5b9Eccw7yBEgSmygoVqxQTLc.mft (raw, json)
Hash identifier: gpCLKGE6bgxcOvgeq/g+1LLsQmO0OBwsZnHU3TlHaJk=
Subject key identifier: 1E:55:3C:C7:DE:5D:E2:C8:BB:8A:A3:85:23:FB:36:58:5A:30:3C:78
Authority key identifier: 87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
Certificate issuer: /CN=87b1396fd11c730ef20448129b282856ac504cb7
Certificate serial: 019827105D050DB75CFB0CF077B808C24D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
Manifest number: 0506
Signing time: Sun 20 Jul 2025 09:00:40 +0000
Manifest this update: Sun 20 Jul 2025 09:00:40 +0000
Manifest next update: Mon 21 Jul 2025 09:00:40 +0000
Files and hashes: 1: PadXYOgLqVZA9ql5KBGvS89vmRo.roa (hash: nxJ2UXZ8SywJLT0Mr208cedxyBjVOFCCZZniGKgSLRU=)
2: X4DPqtKQyZOWAKBMlN7mRtcd1Ms.roa (hash: kXRcohahU5UXZUtKpTF4pyZvtQAWUIYvj9zgl+Pf9XM=)
3: h7E5b9Eccw7yBEgSmygoVqxQTLc.crl (hash: LGOlwunOoZvKihenOkvrz/K9+QkzXfkeeyfL3tdO9+k=)
4: i-NcdzW87JQ4S13PQa8zzViNhxY.roa (hash: 5KklHjluhn1HzYRZR4tDfo9d5WYKAm0X95RTT55u4EA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:10:5d:05:0d:b7:5c:fb:0c:f0:77:b8:08:c2:4d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87b1396fd11c730ef20448129b282856ac504cb7
Validity
Not Before: Jul 20 09:00:40 2025 GMT
Not After : Jul 21 09:00:40 2025 GMT
Subject: CN=1e553cc7de5de2c8bb8aa38523fb36585a303c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:6e:c2:15:db:c9:51:72:73:5e:e0:af:1f:
93:8f:b4:79:ba:46:66:67:63:5b:fa:01:08:83:a6:
2e:c3:4a:1c:8c:21:c1:38:2a:3e:da:cd:6b:b3:37:
25:e1:c5:39:9b:f8:b0:41:84:86:91:1f:f3:5f:83:
b5:33:aa:83:ec:1b:14:ef:16:66:36:57:a4:32:10:
74:e3:f7:c0:07:d8:91:15:6d:56:b6:56:4e:ed:85:
77:31:75:c0:e6:26:ed:aa:b0:04:15:60:0c:0f:92:
57:de:5d:c0:3b:1a:3f:3c:be:a2:fe:1c:b7:f7:93:
73:ba:c2:db:3b:19:69:9a:a0:32:8e:7f:6d:55:0f:
6e:c0:09:13:2a:8d:5a:5b:37:e3:fa:ec:d1:fc:1c:
64:a8:31:86:1e:e0:d6:f3:3d:3f:6c:85:39:8f:2d:
7a:c0:f5:1e:4b:63:02:30:02:e4:34:5e:12:c3:2d:
b0:ec:72:66:1c:28:f3:ba:99:a8:01:a5:c3:e6:03:
9d:43:28:22:b8:d4:c4:7a:db:79:4f:e2:b8:58:fb:
84:0a:e1:66:a9:07:9c:15:b5:a2:a7:bb:dd:22:af:
f7:de:aa:aa:80:7b:0e:4f:d9:ee:77:6d:f8:81:e8:
af:02:50:09:04:8e:fe:52:52:c2:92:cd:03:10:58:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:55:3C:C7:DE:5D:E2:C8:BB:8A:A3:85:23:FB:36:58:5A:30:3C:78
X509v3 Authority Key Identifier:
keyid:87:B1:39:6F:D1:1C:73:0E:F2:04:48:12:9B:28:28:56:AC:50:4C:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h7E5b9Eccw7yBEgSmygoVqxQTLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/38bc90-1d53-4d47-bbdb-f4e7c9cc43ff/1/h7E5b9Eccw7yBEgSmygoVqxQTLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0f:fe:9a:dc:bf:22:99:46:79:fb:54:ae:a4:f8:c8:c0:d7:
0e:f6:6e:ef:1f:e7:09:58:b1:50:a8:cf:cd:d8:b4:ad:2c:51:
7d:96:7b:ae:3b:a1:4b:4d:15:ce:8c:8a:ba:7a:f3:41:76:da:
7b:e9:b3:2e:58:6b:95:f1:84:61:be:53:c5:b9:88:d1:61:8e:
c1:e4:a6:ba:9f:35:31:fc:1c:20:03:6a:93:5b:62:2a:ec:d5:
e3:b8:df:26:8f:2c:b4:f2:a7:9c:92:81:22:24:ad:a6:01:a3:
9d:72:53:7b:94:8f:e4:d6:be:91:92:18:db:62:56:f6:c0:d9:
e6:90:73:9b:e9:6b:a7:99:2f:d9:b0:74:61:33:c4:3c:52:c9:
23:12:aa:6f:6e:65:00:15:2e:1f:ba:d3:49:37:36:26:8c:c7:
9f:48:8b:8b:fa:aa:0a:16:23:8a:1f:ec:63:08:5a:22:fb:2e:
3b:1a:43:50:2d:a9:ac:ae:36:6a:1e:98:eb:46:3a:da:08:d8:
59:cc:bc:74:c6:b4:9d:8e:e5:89:48:13:20:35:71:67:63:ee:
9c:5f:11:1c:eb:b7:4c:08:62:2a:1d:1c:9e:64:07:b1:45:87:
20:b7:9a:de:cd:59:bd:3a:a2:32:b3:93:ee:a9:1f:4c:73:18:
82:25:6c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:32 2025 by rpki-client