Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
File: ex9VfuJjyzWaGeos1_oOjJE563Y.mft (raw, json)
Hash identifier: hqX/gy48Kjx5OGZIkiABAxtSsKNo0LdppJ70t9TdrRI=
Subject key identifier: 03:38:EF:F3:D9:3F:F8:B6:03:67:B2:2C:83:D2:F9:FB:9D:59:77:25
Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
Certificate issuer: /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Certificate serial: 01987418E4D6AAA0B581F0264AE646618DB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
Manifest number: 161D
Signing time: Mon 04 Aug 2025 08:00:45 +0000
Manifest this update: Mon 04 Aug 2025 08:00:45 +0000
Manifest next update: Tue 05 Aug 2025 08:00:45 +0000
Files and hashes: 1: 6Sxszx8NiFM_JbWUMjBDeEvUps8.roa (hash: 8MVKcBrtv6jJ845AEcn3hP00h2PQrFrI39BtX0LnXv4=)
2: Ha78yg7qqGZ0v8W1DWmHUAWoLSA.roa (hash: mO1w4kIt1AKbmRPhw4OwRAWPyk0O9BdOZhhOqd4nLR0=)
3: ex9VfuJjyzWaGeos1_oOjJE563Y.crl (hash: hbSAzA7BKMFqmtlZperP7jlCmj5JY1VZG67L20IgQxQ=)
4: xVoWPteOkysGzMqfxgi3XvQDa0c.roa (hash: y5AR4qkIxHvuU7VtfK3TX7mIOGmTaWSa06ypi+bML3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:18:e4:d6:aa:a0:b5:81:f0:26:4a:e6:46:61:8d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Validity
Not Before: Aug 4 08:00:45 2025 GMT
Not After : Aug 5 08:00:45 2025 GMT
Subject: CN=0338eff3d93ff8b60367b22c83d2f9fb9d597725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3f:9f:59:f4:a2:cd:ca:f5:f1:9e:17:3c:35:
a9:ee:1f:ec:9e:6d:f8:bd:58:1d:74:65:0a:bb:a6:
43:32:3d:a3:20:32:3f:4e:7e:1b:20:d9:61:1e:b3:
a8:59:46:7f:7c:7f:a4:c6:19:53:6a:56:5b:88:1c:
d7:68:bd:6f:5c:5d:ba:50:ee:b5:3e:b4:eb:3c:78:
fc:c0:a5:ed:84:b4:be:72:46:7b:96:63:6a:8a:70:
c6:b6:b1:28:f6:a0:02:6e:fd:54:0c:aa:5b:30:6d:
e3:f8:6c:7f:74:42:eb:7c:75:cc:34:45:57:4f:da:
95:57:b1:75:6b:f0:58:04:4f:dc:44:f9:ac:2d:56:
cc:04:af:e4:4a:ca:c5:24:b4:bd:2c:0c:cd:3e:e8:
31:16:8f:17:a7:dc:78:e8:db:85:f1:d5:50:25:be:
90:67:01:8c:29:7c:52:1e:5d:78:bf:5b:f6:10:f3:
80:1a:3b:95:c0:d8:52:59:8d:e2:74:9a:bb:dd:4a:
69:c7:35:7c:a5:f8:63:bb:49:db:88:8b:3d:29:18:
21:e6:1e:d7:3e:0f:4c:ec:f5:fe:37:d2:1b:84:df:
3e:72:be:18:d0:53:3b:00:6c:a2:38:52:6a:a9:c1:
f6:fc:9d:db:f0:56:f0:51:18:77:84:95:53:d7:1f:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:38:EF:F3:D9:3F:F8:B6:03:67:B2:2C:83:D2:F9:FB:9D:59:77:25
X509v3 Authority Key Identifier:
keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:85:e1:ca:bc:e5:25:7e:68:40:a8:35:21:b3:a1:76:b7:85:
b8:57:ad:f7:15:2f:0f:72:92:4b:dc:19:f8:18:1c:a8:c2:0d:
ad:c2:24:70:c8:1b:c4:66:8f:9a:2f:75:1a:35:3c:be:07:8e:
7e:96:0d:e2:69:a9:14:8c:b6:40:b7:20:57:b8:38:30:b4:a6:
7f:01:e7:2a:11:f6:5a:49:c9:6f:4a:0b:a7:b2:0c:e8:b0:74:
65:6d:5a:f5:8d:e3:8f:49:4a:8c:f3:8f:7e:1c:5d:eb:0f:0b:
5f:9a:f3:cb:08:06:64:4c:a7:65:1b:9d:bf:b4:3d:5f:07:28:
74:62:df:39:0b:19:51:fd:c3:b1:b3:d2:26:d4:a8:1b:35:8b:
6d:6f:f8:f0:3d:03:56:57:bf:de:ae:58:ed:4c:fe:5f:a1:2f:
25:7f:6f:80:36:a0:77:0b:46:18:7e:ef:8a:aa:2f:11:49:1b:
cb:9e:2d:21:16:b6:5e:b7:c4:f1:ac:45:4b:3f:18:c9:4f:9a:
0b:af:a1:cb:34:95:19:7e:c7:49:2c:51:ce:b9:f6:a5:93:7e:
9e:f2:c0:b7:8f:a1:c0:ab:d3:d9:d7:7f:c7:cd:db:19:18:cb:
d7:58:b0:12:69:47:1b:4e:08:1e:ac:68:1f:c1:3a:2d:c8:49:
3b:98:13:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:17 2025 by rpki-client