Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json)
Hash identifier: DD5TFkNfBXQWPjBHlY4JncvHugWoSJj4VYHV9Hz0kow=
Subject key identifier: 1B:13:21:18:32:9F:E7:C7:44:A1:0B:D1:F2:32:4B:62:2E:36:79:7B
Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50
Certificate serial: 019846D243587D9A36F374D86B1CB5641E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
Manifest number: 1609
Signing time: Sat 26 Jul 2025 13:00:41 +0000
Manifest this update: Sat 26 Jul 2025 13:00:41 +0000
Manifest next update: Sun 27 Jul 2025 13:00:41 +0000
Files and hashes: 1: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: zA33hx30aXC9RQeYk5CX+QwzEIo9lOoYJMcajixdxKg=)
2: y2IPmXUvA-hOkWs492ksc-DWCKQ.roa (hash: qKtRuRd69clPPsqawIh09HUba2GRDePDsao1bLap4SI=)
3: zrX35UZIaDQ7gsBizHdrkf-Nup0.roa (hash: YG/4j+fW6PNSItLJkk/6gbwhIYXjKk9jfgVFuX7jzdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d2:43:58:7d:9a:36:f3:74:d8:6b:1c:b5:64:1e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50
Validity
Not Before: Jul 26 13:00:41 2025 GMT
Not After : Jul 27 13:00:41 2025 GMT
Subject: CN=1b132118329fe7c744a10bd1f2324b622e36797b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:78:10:6c:12:b1:f1:32:ff:2c:f5:19:6f:dd:
b4:31:7a:ec:bd:6e:6f:c0:62:06:7e:08:b8:18:c7:
f6:0c:e5:99:e5:e5:06:7a:a1:15:73:14:cf:6e:a9:
3f:4e:55:aa:c2:ca:7a:4c:32:ca:3f:6c:dc:84:25:
da:09:ae:f1:b4:73:43:87:89:e8:54:cd:66:ab:d0:
03:fe:79:02:02:29:02:e0:e1:f2:7f:85:18:b8:0d:
4f:a9:6c:3e:42:f6:63:f9:09:23:99:d3:3d:e1:91:
d2:1c:1a:d7:49:09:83:cb:09:64:66:e9:06:c5:e8:
f4:34:fc:23:51:4b:fa:b9:8c:4e:22:b2:5a:28:15:
f9:96:1d:d5:20:52:28:88:ef:cf:77:77:6c:6b:ad:
36:d1:33:05:62:d9:51:79:83:15:e7:6b:9b:bd:e0:
61:c6:b6:b7:2a:85:f4:39:2d:ce:f2:ea:dc:f7:63:
2e:0a:ab:08:ff:dc:12:43:5e:54:06:9b:8e:05:44:
77:b8:d5:fe:cb:97:50:d9:04:2d:36:73:95:57:b0:
65:fe:b3:34:7b:bd:38:b4:23:bd:e8:01:1a:d4:d4:
f4:6c:8d:a4:4a:3c:e2:f8:06:c2:8f:33:c3:ad:f4:
89:bc:23:32:60:2d:6e:2f:9d:89:7a:c3:16:a6:e0:
67:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:13:21:18:32:9F:E7:C7:44:A1:0B:D1:F2:32:4B:62:2E:36:79:7B
X509v3 Authority Key Identifier:
keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a9:f6:cd:dc:7b:55:9f:88:00:ea:81:48:28:3d:23:c6:bb:
f3:5b:83:25:ba:b5:3f:50:b8:b2:78:2b:fc:60:20:ae:a3:76:
80:a6:91:54:bc:2e:ef:32:ba:13:80:c4:f1:21:2b:12:63:85:
f4:ef:a4:9d:b9:b8:34:69:5a:ca:9b:d3:85:ab:90:30:dd:3d:
9c:a2:0e:76:38:69:ae:3f:c6:35:2f:8b:6f:18:94:38:88:a7:
10:b2:40:9f:cc:a7:57:43:b8:18:39:2a:32:5a:e5:56:48:9e:
ba:b8:a0:95:15:db:c3:39:33:b9:4c:5f:17:eb:4a:26:e1:86:
c4:b3:c5:ae:fe:b9:09:63:0d:d7:89:5b:c0:f2:85:ca:6f:69:
0c:b2:dc:c0:a0:e1:b5:e3:a0:ad:db:77:cc:ec:d9:3a:24:c2:
a0:15:19:ec:72:e5:41:9c:e6:ff:54:32:c2:45:5b:0a:98:39:
6f:cb:93:2a:b9:83:8f:77:ce:b7:36:dc:7d:d5:dc:92:2a:d9:
98:7f:df:19:69:b0:38:e5:e3:31:a1:78:f6:b4:fe:5b:47:3e:
40:80:76:55:8f:65:22:48:89:9a:81:36:c2:89:6f:e4:d4:d6:
04:82:f7:82:76:44:8c:d9:2b:c9:8f:8b:97:37:40:6a:aa:82:
37:c6:8b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:32:19 2025 by rpki-client