Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json)
Hash identifier: OjvHwOuyqYfQqeycv1tYYZ0EBWPYg4u4Ndj+/8z4+LU=
Subject key identifier: 9A:9D:B5:5C:AC:23:ED:AC:E2:72:64:94:A7:9C:3E:03:65:37:86:E0
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 01985532DD5BEFED35F799C3310A476068E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
Manifest number: 161A
Signing time: Tue 29 Jul 2025 08:00:53 +0000
Manifest this update: Tue 29 Jul 2025 08:00:53 +0000
Manifest next update: Wed 30 Jul 2025 08:00:53 +0000
Files and hashes: 1: H6es8_RNukCcmpKSU4VhKyWzlXU.roa (hash: MWVORumqBLMSV+ezNkSFN1TihrvCnAOWBchr7+/zYAg=)
2: dBMJpVLGRQoTKZQpQqDPu3BVMTw.roa (hash: y7lqJ7uW4lmOcL9eEyRfqx2SbaFMyQX43zjAsjfpk98=)
3: q9V7Xus9JaAOVqWDDUO8V0frUJg.roa (hash: BOqisVRqsjZEstDgk3UUu1R2Uohg8LTPrkUF2hoHl7o=)
4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: 6Iyh03fpNU3hZ9+SyWyoGqI4LBVVy1G95+9MXpHXm5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:32:dd:5b:ef:ed:35:f7:99:c3:31:0a:47:60:68:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Jul 29 08:00:53 2025 GMT
Not After : Jul 30 08:00:53 2025 GMT
Subject: CN=9a9db55cac23edace2726494a79c3e03653786e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7a:77:f7:dc:67:67:e7:95:c1:f5:09:99:f4:
d7:b8:63:34:e4:d7:73:df:d2:c8:b5:5f:d1:d4:16:
18:92:a5:15:fb:4b:13:0b:60:76:00:66:6f:e8:7d:
b9:50:68:4a:26:d6:57:5e:5e:1f:5b:fc:6b:f4:19:
58:8e:de:07:6d:ac:ca:99:4d:ca:84:d8:1f:af:36:
ab:48:48:b7:ef:c8:5a:ea:ee:42:49:0f:04:98:a6:
a0:c8:de:eb:77:ab:5b:00:fa:c0:8c:39:a4:85:fb:
34:23:98:74:07:26:75:bf:6a:7e:32:d9:04:19:e7:
dd:52:b8:a0:5e:9a:d3:bc:82:26:76:3d:32:de:45:
1a:91:cd:ab:41:84:d7:6f:f4:c5:52:7a:7d:fe:96:
6a:ee:e2:5d:f9:5a:ab:e0:9b:0b:81:1a:09:18:b1:
86:ac:a6:ed:42:76:73:86:7d:ca:ad:92:f9:53:6d:
7c:aa:7e:bd:b8:3b:60:fc:d9:1e:90:3f:03:8b:e5:
1a:8f:a5:d0:a0:d3:d1:c6:0d:74:85:c9:db:c7:c5:
f7:f8:60:94:b3:f3:d4:23:04:4a:bd:99:6b:6e:19:
1a:34:5c:2e:3e:81:e6:31:63:17:41:3c:a6:15:a7:
92:b8:31:ea:b7:18:bf:b3:ae:14:dc:5c:50:84:e3:
08:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9D:B5:5C:AC:23:ED:AC:E2:72:64:94:A7:9C:3E:03:65:37:86:E0
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b7:28:75:d5:0b:57:91:bc:46:29:3a:70:2d:84:ce:cc:93:
58:0c:13:c1:0d:ca:77:be:6e:5b:4a:bd:e1:90:bb:2b:d2:ed:
c1:a9:6c:7e:d2:58:87:b5:a5:db:91:3c:29:60:7e:96:1d:d3:
a0:c5:76:fc:25:90:72:e5:44:2a:cb:cd:4f:c3:1a:db:8a:67:
42:a9:d2:7c:b4:10:37:be:10:05:9a:67:d4:44:a0:57:be:1e:
bb:97:9f:f7:de:4a:b5:a4:1d:4d:50:78:84:07:d4:49:d7:ef:
d6:d1:84:0c:e5:15:e2:a1:43:07:74:de:0d:17:c0:8e:eb:51:
4a:85:1d:47:14:a6:bd:8e:41:36:45:e2:a9:ff:95:5a:91:cd:
30:83:52:08:33:96:d3:cd:3c:9d:71:96:87:49:23:ac:9f:b8:
1c:0b:c5:06:2b:49:f3:6e:5b:f2:60:79:2d:5c:12:23:b4:5a:
b8:d9:e5:dc:63:a5:d9:e3:27:fb:af:54:87:4d:91:70:e4:b7:
4a:36:5f:ca:35:0a:9a:06:82:97:15:d1:ab:78:c1:f9:99:6b:
e2:11:20:5d:d3:31:97:8a:ca:cd:73:fd:92:16:85:7f:94:fb:
54:96:66:27:73:64:11:f6:9b:30:56:e6:21:f0:93:65:fc:a2:
fc:16:8e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:19:13 2025 by rpki-client