Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
File: eXpIzBPiAOLT84r4MxjRvK9vYzE.mft (raw, json)
Hash identifier: t+j9hBWFqPs3az+f9DsrE7A3NrglFA3c7kB6X/4taFA=
Subject key identifier: 73:DB:CA:7D:51:EC:DD:9D:F6:FB:30:D8:48:D6:A1:00:29:B6:FF:82
Authority key identifier: 79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
Certificate issuer: /CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Certificate serial: 019855DEF84A70BA0099EDC960D587A70CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
Manifest number: 160A
Signing time: Tue 29 Jul 2025 11:08:52 +0000
Manifest this update: Tue 29 Jul 2025 11:08:52 +0000
Manifest next update: Wed 30 Jul 2025 11:08:52 +0000
Files and hashes: 1: 7BO8TZ7ATCsCuTGlJnm0y-khSyU.roa (hash: x6i25XfL4F0gRp6H2u4+rOMQs65WiJ45VD9+0G2z3+I=)
2: FWiPIHCHDr0uKdyZ_foi8pOa3qE.roa (hash: DmpIUKQykitdg60h0JYisIxDWolUrUFXqS52YO726hw=)
3: aNixjFy8ziG3vjf15zAVaRB-c8A.roa (hash: EnnotKECMV4Ndd6+GZEZZLejmbdDUCzQTSAS/USoOkg=)
4: eXpIzBPiAOLT84r4MxjRvK9vYzE.crl (hash: nbup0hn+8eBL/auYUrwad7Gc7lzEyfmF7mqrd/zAIqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:de:f8:4a:70:ba:00:99:ed:c9:60:d5:87:a7:0c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=797a48cc13e200e2d3f38af83318d1bcaf6f6331
Validity
Not Before: Jul 29 11:08:52 2025 GMT
Not After : Jul 30 11:08:52 2025 GMT
Subject: CN=73dbca7d51ecdd9df6fb30d848d6a10029b6ff82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:78:37:85:cb:41:ca:f4:36:b2:3a:3a:6d:
c0:18:0b:f0:cc:4b:17:36:61:42:fc:6f:10:c8:e1:
43:98:73:32:aa:ad:d6:95:90:b6:cc:52:a8:7b:6a:
0e:63:fd:8a:8a:02:04:9f:d5:70:25:28:a1:25:12:
c7:ea:f0:eb:c7:e7:f4:12:39:75:00:f8:41:d3:36:
e3:67:97:53:94:60:ec:e8:01:82:a7:f5:88:fa:ad:
0a:4c:32:02:e8:95:ea:34:cf:85:a7:07:2e:31:34:
8d:6d:a1:f6:ad:ff:58:ec:98:5e:7b:2c:e3:55:7a:
66:b3:a5:f0:e0:fb:8a:77:2a:0b:ba:06:04:02:bd:
91:21:1b:ec:78:7e:38:85:3c:7d:4c:12:c2:1f:91:
7e:2d:35:31:ec:ec:7c:c3:ba:83:15:e6:c9:23:53:
14:f3:a0:63:5f:77:dd:1c:eb:97:f4:e4:a4:a9:26:
5f:28:78:35:2a:f1:e8:bc:e4:2d:44:fa:49:02:28:
c7:d0:74:7d:04:42:a8:77:33:cb:52:2f:84:bd:59:
f1:c5:7d:b2:c1:d2:b2:2c:b4:1a:91:34:56:0b:3f:
96:ef:44:13:6a:0f:9f:85:35:bd:23:58:08:05:94:
e7:8c:9d:34:97:b5:fd:03:11:6b:0a:0e:e9:4a:af:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DB:CA:7D:51:EC:DD:9D:F6:FB:30:D8:48:D6:A1:00:29:B6:FF:82
X509v3 Authority Key Identifier:
keyid:79:7A:48:CC:13:E2:00:E2:D3:F3:8A:F8:33:18:D1:BC:AF:6F:63:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXpIzBPiAOLT84r4MxjRvK9vYzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9cea0-6928-4584-b321-7d7f4b634849/1/eXpIzBPiAOLT84r4MxjRvK9vYzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:30:16:c0:fc:1a:cc:c3:c2:5a:75:38:4f:e7:cf:f4:2b:a4:
0a:e0:cd:c9:2b:34:62:40:87:6b:b2:af:b7:1e:e9:7a:5e:5a:
39:ba:30:7f:47:6d:22:2f:26:7d:0e:2a:29:3d:20:94:12:55:
00:46:e8:23:03:41:18:68:04:b6:98:6e:9f:2f:fb:da:6d:31:
0a:62:d3:ff:56:35:ad:89:76:d4:a0:35:77:c3:ee:54:1a:65:
4f:f0:55:e6:39:28:31:f0:0b:fd:14:7e:f0:f8:b5:f8:5a:a8:
ce:5d:0f:fd:45:f1:7c:0f:4f:ec:e6:86:8e:a6:79:97:c4:cc:
00:a7:a1:e2:15:1c:c8:6f:83:6e:13:af:d0:da:8d:a9:20:98:
5f:ae:92:af:9c:f0:34:22:f1:de:64:17:b3:f6:be:c8:fe:fe:
2d:3f:03:d4:eb:54:77:c1:b9:24:01:a7:48:36:9f:57:fa:f7:
57:3c:fc:6d:f4:f3:be:46:38:a8:0a:45:ab:f6:a7:02:30:30:
89:b4:d0:89:a5:c3:1b:82:f4:9c:dc:75:22:0d:f1:9e:c3:4b:
7c:f8:08:f2:f9:a5:64:78:7b:f5:14:56:2b:ea:b8:f7:a0:38:
c3:b3:27:27:40:d1:4e:5b:e8:46:65:ac:1d:c4:a8:ac:da:b6:
a3:23:1a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:53:55 2025 by rpki-client