Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
File: cH89q67iT8Q7hlqvo_PJwvNkv8k.mft (raw, json)
Hash identifier: 0w7TolnSOThm8shZgU8szxX29i26JJSFbXsY72e5kXU=
Subject key identifier: D7:CE:1C:6E:AF:AD:75:D1:F0:C2:1E:EC:95:39:72:D7:CB:56:C5:8D
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 0198439B3F4E99E9F8A63344685C2EFFBD16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
Manifest number: 1591
Signing time: Fri 25 Jul 2025 22:01:44 +0000
Manifest this update: Fri 25 Jul 2025 22:01:44 +0000
Manifest next update: Sat 26 Jul 2025 22:01:44 +0000
Files and hashes: 1: MmMjPcmgSnmpat_UrnnkwrG8N3M.roa (hash: P+6oU+/zVxV3KfOFEMlrjbqkg2yguA/0UthTHnReUm8=)
2: cH89q67iT8Q7hlqvo_PJwvNkv8k.crl (hash: St2kfB4x3zwaHAKwj2fycRDa8VS4+2GQkN4+lK/QNAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:9b:3f:4e:99:e9:f8:a6:33:44:68:5c:2e:ff:bd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Jul 25 22:01:44 2025 GMT
Not After : Jul 26 22:01:44 2025 GMT
Subject: CN=d7ce1c6eafad75d1f0c21eec953972d7cb56c58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:88:88:f2:2d:80:de:2d:16:86:be:c6:b0:3f:
33:ee:85:43:7a:77:78:55:84:39:31:d9:1e:5b:9e:
8c:dd:e7:ed:10:74:34:10:8b:74:66:55:7e:ec:c8:
46:4b:06:5a:16:fe:08:84:4d:0b:19:d9:aa:d1:a1:
55:30:c4:22:d6:2c:be:fa:a3:be:b0:9e:c6:18:a4:
15:1e:44:71:2d:32:b6:58:d5:ff:0d:ce:df:38:9d:
b2:5c:40:ee:67:1d:22:a5:85:7e:cd:c3:72:30:5c:
9a:44:32:ab:ea:e2:0d:72:4c:62:e8:20:7f:7e:2d:
e4:bc:3d:63:3f:71:41:28:41:2b:75:ec:dd:ec:0d:
80:33:d4:18:11:ba:42:b2:6a:47:8c:cb:c4:b6:83:
b5:7c:b8:93:88:67:55:d8:31:c5:66:d3:87:d2:fb:
ae:62:a4:b0:2a:98:9f:03:26:fb:27:bf:d6:96:78:
75:0e:bd:05:66:33:7a:0b:00:b3:90:2b:b8:40:21:
a2:ee:34:b8:29:80:03:d8:16:65:2f:c8:c5:f7:58:
e1:2b:00:5c:8c:0f:52:17:da:76:06:14:70:2e:f5:
4b:4a:d3:4c:9d:9c:89:90:04:7e:aa:1b:cc:9c:78:
01:0a:fc:52:f2:2e:7a:df:78:93:75:e0:d8:7e:00:
3b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CE:1C:6E:AF:AD:75:D1:F0:C2:1E:EC:95:39:72:D7:CB:56:C5:8D
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f2:d5:af:b0:d5:66:18:da:2f:6d:35:10:10:1e:47:bf:7b:
81:2c:28:f7:72:df:3b:9b:4e:1f:51:7b:5b:ce:0e:40:e0:16:
30:d0:85:a3:8b:ae:b7:74:48:6b:8f:18:c6:3a:88:40:9a:a1:
99:f9:fc:45:2e:c8:14:02:98:5c:5f:b4:a9:f8:c8:ec:38:2d:
4e:94:fd:59:7f:97:15:57:fa:ba:ae:91:aa:e2:00:8c:d0:46:
91:34:8a:1c:63:95:2d:73:c3:48:e6:af:6c:4d:a2:92:d1:75:
33:76:3c:10:0b:41:b6:11:ef:61:a6:bf:42:76:11:93:e5:06:
9b:d7:83:84:f2:e8:27:d6:86:0d:28:03:78:ae:58:46:b0:ac:
52:ea:3a:18:82:95:ed:a7:70:de:20:3e:74:25:0f:29:bd:0e:
03:46:66:1f:4b:d5:3a:49:6a:27:f0:71:69:10:25:3f:01:aa:
78:e4:48:06:2c:9f:f8:f2:09:cd:43:5c:6a:9a:6c:64:81:dc:
b9:bd:72:f7:7d:c3:a8:07:d6:11:e1:39:f4:59:3e:99:91:ff:
90:9f:96:05:b3:84:53:5c:cb:d8:fc:14:1d:e3:f9:83:47:94:
f1:f7:c5:ac:a8:94:aa:e4:b7:d4:08:e1:34:c1:60:f4:8d:6b:
f8:03:0f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:51:06 2025 by rpki-client