Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: Ye1I7rdB83tAy+oQf86SLQ5fiOmDmX1Mn0mlZZzrGRI=
Subject key identifier: 02:45:24:C3:49:B4:7A:D4:FF:4C:C7:72:FF:41:06:9D:47:13:02:D2
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 019873E2D8E132C68CE87810510212C1DAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 07:01:43 +0000
Manifest this update: Mon 04 Aug 2025 07:01:43 +0000
Manifest next update: Tue 05 Aug 2025 07:01:43 +0000
Files and hashes: 1: DWjeKEhsrCMQSkqXSu5F6-_lK2c.roa (hash: E/1JJ03/M4DXDyCYKLov4LZTD3sgsbYcGtynvXI+0ao=)
2: GhpTpgW64tSFuaS0pbKl89opsq8.roa (hash: 2Wron93LANvS77WOvmwaTogfUqhlP0TlDWCOGE4biV0=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: kAlQ0B7EabFlIIFMnsHQAseknaIUGWcLv3/rYjuZOPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:d8:e1:32:c6:8c:e8:78:10:51:02:12:c1:da:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Aug 4 07:01:43 2025 GMT
Not After : Aug 5 07:01:43 2025 GMT
Subject: CN=024524c349b47ad4ff4cc772ff41069d471302d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:89:d8:13:68:09:61:ac:aa:20:5b:fb:b1:
8f:a7:33:dc:31:1d:fb:7b:74:c3:76:3f:43:d7:31:
01:9a:03:0c:ff:d7:46:6b:7c:1f:a9:e2:17:c2:ae:
2f:00:c0:bc:c7:7d:d3:3e:4b:52:c6:7d:4f:c9:2b:
04:6b:9c:3e:32:1a:55:ac:95:9a:da:cc:b6:92:3a:
f1:c2:c6:0f:0e:b5:eb:3f:c2:06:44:bf:50:f9:3a:
02:0a:95:19:15:2b:a7:a0:da:b0:22:74:4d:33:7c:
b6:ea:b7:7a:2a:2f:36:f9:39:d3:d7:a0:a3:52:49:
6b:48:17:25:ff:cd:f7:6a:11:ee:bf:5b:00:71:47:
54:a3:13:3a:a1:fd:b2:29:f4:72:0b:46:3b:0d:5c:
55:d6:88:7a:8e:f5:bc:cc:ea:24:fb:83:eb:38:50:
c4:bb:c7:8d:0f:3e:e0:73:5e:a6:27:93:bb:26:51:
ad:47:25:f9:29:6d:93:9e:8d:2d:51:a5:d0:e0:59:
ef:cc:b3:eb:c6:a7:46:6b:44:26:a1:9b:df:d9:22:
78:0a:73:17:ff:cd:f6:7f:c2:f5:65:0a:1d:6d:9b:
c5:90:3c:c2:5c:92:9c:ef:55:26:1b:8c:97:3f:c5:
b1:ee:34:11:3c:60:9f:91:e6:73:76:3b:c2:1e:c9:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:45:24:C3:49:B4:7A:D4:FF:4C:C7:72:FF:41:06:9D:47:13:02:D2
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f1:3a:07:a8:f1:4f:f6:c8:b0:99:e7:2a:38:d1:6a:0b:c0:
d3:d8:05:0a:f5:4b:9e:8f:af:f0:6e:00:b8:9a:12:25:0a:cd:
b6:fa:c2:40:d8:7a:aa:13:d3:a8:8b:b3:36:9f:bf:92:09:15:
ab:77:9b:6f:9c:d3:19:04:d1:92:63:74:da:62:49:8f:b8:89:
67:39:b0:a9:e3:9c:ae:21:37:a9:fa:8d:7f:68:ed:47:9e:ca:
df:75:69:11:4e:aa:f7:8e:4d:f1:8c:2a:42:69:10:e6:4b:b2:
47:8a:ae:38:13:fc:7a:c6:ef:99:17:cb:9a:4f:d2:95:0a:08:
76:55:00:9e:78:4f:04:f9:7b:04:02:67:46:a5:5f:81:a6:7d:
97:87:04:1a:12:51:53:2b:6f:94:53:ce:4f:c7:cc:6c:f1:be:
fe:43:b6:fe:ff:80:e5:aa:ca:a4:ce:55:86:1d:b9:59:8a:06:
7b:cd:d2:4e:c7:59:b0:47:21:ba:0e:1f:0c:e4:84:2b:76:78:
b7:c8:6a:73:8d:44:43:10:91:d5:48:2c:f5:60:45:cd:ba:8a:
ed:89:6d:81:62:52:86:22:9e:86:b5:b1:dc:82:a2:a4:3b:7a:
86:52:37:2c:55:ae:3b:06:ac:ef:9e:1c:c2:69:b3:36:cd:c8:
11:19:93:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:48 2025 by rpki-client