Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
File: 7cIhOMCvgcXL9DpPjd18jeE8cjA.mft (raw, json)
Hash identifier: Lm5sDkfp1FZRgziQitecGQsFTNsMYV/J3jlGlUsBzfs=
Subject key identifier: 21:1C:A6:82:0E:2A:F5:D1:15:D0:37:18:FF:30:97:15:5F:BA:6C:2A
Authority key identifier: ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
Certificate issuer: /CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Certificate serial: 01984B53F34C271304634BDA3BFB7A4F908B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 10:00:49 +0000
Manifest this update: Sun 27 Jul 2025 10:00:49 +0000
Manifest next update: Mon 28 Jul 2025 10:00:49 +0000
Files and hashes: 1: 1utcwuOmOI7txytHlcapG00bDWQ.roa (hash: KoDsbv2AuvIm5mO9VxRMXrTvsRyvxgVtQhUhy9Zv0J4=)
2: 7cIhOMCvgcXL9DpPjd18jeE8cjA.crl (hash: msmoz7dxlGojL4ZGPC1GoMlZhX6o4kE/GNdOKYCDD9c=)
3: TrlTZgPgCl4W0jfXLUtGOTnjCCI.roa (hash: SXaSky/YVlsAmsXgPwkA8PXkQ+jueu3hy97DblT9VwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:f3:4c:27:13:04:63:4b:da:3b:fb:7a:4f:90:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edc22138c0af81c5cbf43a4f8ddd7c8de13c7230
Validity
Not Before: Jul 27 10:00:49 2025 GMT
Not After : Jul 28 10:00:49 2025 GMT
Subject: CN=211ca6820e2af5d115d03718ff3097155fba6c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:f5:57:19:a5:9f:f8:e1:be:27:b3:de:56:
47:2a:3c:d8:0a:c6:84:34:1c:08:3e:09:80:67:e3:
e4:05:63:fb:34:72:c3:d1:79:03:6d:e7:85:c1:4d:
14:a5:71:59:1d:cc:fb:04:86:9a:10:b1:c9:f4:3f:
18:63:ad:1f:13:d4:4c:cf:b9:15:a6:0f:b6:59:1d:
5b:d6:4b:3e:42:1f:e3:46:9e:a3:a2:39:6c:95:0a:
92:f4:54:1b:fa:b8:e4:17:8f:c7:89:b5:ae:24:29:
11:5a:92:b2:93:84:62:78:9a:0d:76:8b:05:77:2b:
46:d8:85:ed:3c:74:53:87:94:38:fd:a1:fd:12:5d:
90:ef:02:8f:3a:54:34:2d:cc:e5:1c:f3:dc:ff:50:
15:c2:50:5a:c2:5d:bf:1e:e2:eb:b2:bc:bd:fc:98:
07:d8:40:38:e7:62:15:39:9e:cc:94:5b:63:3c:cf:
fe:e4:be:a5:f0:94:21:9d:ce:6a:d4:12:c8:30:a6:
2e:d5:1b:24:52:ac:36:fd:63:46:e7:95:db:b2:75:
c2:3c:f9:a2:b8:e5:b2:45:06:a2:1f:46:80:4f:0f:
0a:ae:75:25:2e:a5:dc:70:21:50:b4:a7:29:b0:7f:
54:84:a5:78:5d:9c:8c:1a:b5:aa:bc:48:71:74:0d:
7a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1C:A6:82:0E:2A:F5:D1:15:D0:37:18:FF:30:97:15:5F:BA:6C:2A
X509v3 Authority Key Identifier:
keyid:ED:C2:21:38:C0:AF:81:C5:CB:F4:3A:4F:8D:DD:7C:8D:E1:3C:72:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7cIhOMCvgcXL9DpPjd18jeE8cjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/649aeb-78dd-422f-89c6-5538dc0bb099/1/7cIhOMCvgcXL9DpPjd18jeE8cjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:c2:81:de:38:37:bb:32:4b:bb:42:20:20:11:f1:07:60:c7:
20:03:2e:b1:8a:b6:f3:f0:c4:bc:91:6c:45:db:1e:43:ac:ab:
2e:e9:5f:4c:de:ca:38:1d:8c:d0:75:48:72:e1:8e:0d:5a:f7:
d9:12:86:17:9d:82:0a:e1:29:b3:3d:12:81:27:a9:98:86:cb:
d1:9a:c9:ca:1b:32:7b:a8:d2:a4:fe:42:81:f9:ca:10:1b:4a:
61:ce:34:cd:9c:b0:7e:a0:65:04:b8:05:75:bb:19:c7:c2:28:
7f:b6:b1:28:cb:34:00:c1:6f:e5:fa:de:8d:79:c3:98:02:cc:
fb:c0:45:b2:12:d9:59:13:f6:d5:cc:9e:cb:7c:70:c0:6e:b8:
db:b3:30:18:1e:4f:f9:f0:a8:dd:f2:16:75:48:03:2a:85:a9:
51:ac:ab:38:9c:87:33:d2:91:16:01:60:dd:f4:00:5c:0e:92:
12:22:0c:0b:32:da:d8:1f:f0:d8:c6:82:cf:70:3b:e1:7c:7a:
7d:b3:46:57:f1:09:29:3c:38:14:cc:9d:2c:9f:91:e8:ca:2c:
5d:0b:0c:47:7b:42:57:d6:8c:df:8f:cf:88:83:cd:5c:78:03:
df:a4:3c:04:d9:32:94:89:76:de:1a:13:ea:47:b9:96:38:8a:
f9:19:1e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:15:13 2025 by rpki-client