Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
File: 7hsImeOKlrVPxMvNEO9TnFTtTTg.mft (raw, json)
Hash identifier: MP+fImk6bpbL/iJieOz0rFCVlxM4a4NopL3x918Aefk=
Subject key identifier: 02:53:00:6E:BA:78:C3:BF:6A:7F:C1:47:8E:CA:91:39:F7:79:DB:86
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 019934926452165A8E773F3ACA2F279CF702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
Manifest number: 167D
Signing time: Wed 10 Sep 2025 17:00:33 +0000
Manifest this update: Wed 10 Sep 2025 17:00:33 +0000
Manifest next update: Thu 11 Sep 2025 17:00:33 +0000
Files and hashes: 1: 7hsImeOKlrVPxMvNEO9TnFTtTTg.crl (hash: KPJuhuGbPkii6Eg4yEuWq6RVAe2EjfqiZG90upsm6og=)
2: D0b1nmB_L5VEWf6cceZCeBQxCQo.roa (hash: 5aiQU00dPQtZA6c9t9iAvI3R/XjZbywVf6L+3WprENk=)
3: aayTQzRiJq9tAMzk8swFje4kTOA.roa (hash: sZC16XAD3EcE1zhIDvKbW1It71XSPS2OvJcF/8voOKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:92:64:52:16:5a:8e:77:3f:3a:ca:2f:27:9c:f7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: Sep 10 17:00:33 2025 GMT
Not After : Sep 11 17:00:33 2025 GMT
Subject: CN=0253006eba78c3bf6a7fc1478eca9139f779db86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:dd:bd:f0:39:ff:6f:90:1b:52:38:97:6b:40:
bc:f4:3d:af:ce:64:3f:e6:d8:7b:8f:95:d3:9c:43:
b6:78:04:9c:f8:27:f2:db:66:1d:54:01:42:d2:4d:
3d:1c:db:f7:db:c5:0e:63:78:22:9d:25:e3:90:0d:
54:bf:8e:ad:4c:16:70:3f:11:23:02:1e:89:83:a7:
1e:4f:e8:61:12:f6:ab:a9:15:73:e0:dd:26:cf:fe:
1f:4a:da:2b:28:fc:88:74:f7:74:ea:8a:a9:b8:c9:
f4:46:66:2a:4d:0e:9e:2b:ed:07:da:07:aa:56:7e:
37:e3:5d:00:7b:24:47:4b:c8:5d:95:0b:12:4a:7a:
b5:0c:22:34:13:fe:1d:4b:e9:76:c0:99:59:ef:b9:
c4:9d:05:19:a5:a2:48:4e:6a:58:17:84:4f:b2:e8:
64:67:16:43:bd:26:8d:69:8f:d1:72:66:24:4e:d6:
af:30:33:ac:84:a2:37:05:cf:a8:c4:65:2b:c8:bd:
f5:8d:7e:99:57:f1:f3:02:6a:0d:fc:ce:bd:c6:84:
6d:1c:86:0e:85:eb:14:25:73:3c:e6:1c:ac:32:ab:
32:6e:9e:68:10:61:a7:9d:2c:e2:6f:48:8a:04:6d:
1c:8b:2d:27:89:b4:49:0c:53:5a:fe:5a:36:08:16:
79:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:53:00:6E:BA:78:C3:BF:6A:7F:C1:47:8E:CA:91:39:F7:79:DB:86
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:16:89:76:a2:7b:b9:d7:0e:09:91:ef:16:cc:a7:4e:e4:5e:
5c:e9:f0:f1:68:9b:e1:dc:3f:4e:5b:4b:d3:5a:39:66:25:93:
8d:1f:b7:ec:80:7d:46:b0:8b:c5:3c:c4:a1:f4:06:27:35:14:
67:e4:7f:36:7a:10:ec:78:c7:71:e8:c2:71:bb:01:68:d0:68:
cb:44:08:5b:5a:ea:ea:a2:f1:40:b1:11:22:1b:7f:72:74:03:
58:a0:78:08:77:48:25:92:42:05:44:5e:a1:d9:db:38:e0:69:
d2:2f:50:af:58:8c:6d:e5:0c:1c:23:6d:9f:3c:72:46:d0:bf:
43:4d:73:cf:af:7c:ab:5b:1f:38:16:1f:98:47:8f:c2:72:d6:
a5:9c:f2:fb:a9:17:50:b1:7b:81:0b:5b:19:97:38:bb:13:9c:
e6:c8:91:4a:54:6e:9e:4b:05:2b:80:54:d6:c0:b3:32:ba:52:
94:ae:10:4c:bd:8d:1f:b3:2b:96:4a:ee:56:75:d4:0c:38:1c:
58:c4:90:fc:89:1f:cc:de:08:b5:2f:d7:d4:8e:e0:66:f8:94:
19:3e:3f:03:53:72:e9:0e:b0:e7:04:74:a7:a9:04:eb:d1:5e:
cd:51:85:25:0a:8c:3a:69:1e:f6:b3:ed:2a:14:cb:04:95:95:
32:b8:9a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:19:53 2025 by rpki-client