Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier: qgjI7gexkbXDsz2HINcSJLgbNMr1egSnriscgxs8+Ho=
Subject key identifier: 40:C3:3F:0E:4E:97:5B:D2:D9:29:64:FD:7E:31:17:3B:8C:4D:D9:10
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer: /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial: 019875D1D3A530524DD9D8706A55887EBF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number: 161A
Signing time: Mon 04 Aug 2025 16:02:22 +0000
Manifest this update: Mon 04 Aug 2025 16:02:22 +0000
Manifest next update: Tue 05 Aug 2025 16:02:22 +0000
Files and hashes: 1: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: Ky2r/1aDqgKxKXHUwwhBO2QvZLmfoAt2T2kImUcrn+8=)
2: fwhTjjRIhEdJ6uOffHkJ9IbiBcc.roa (hash: uAg9kNvS0wjEdBKrNfsh4Pl1caTWWUTWPoPoJJEyRFk=)
3: tmBvyCU9dS1RGbck9AhZ77ixbZ4.roa (hash: LYRTheb+KiohViLX8r9l59ZvW37F3uyl1qPERmyYOaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:d3:a5:30:52:4d:d9:d8:70:6a:55:88:7e:bf:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Validity
Not Before: Aug 4 16:02:22 2025 GMT
Not After : Aug 5 16:02:22 2025 GMT
Subject: CN=40c33f0e4e975bd2d92964fd7e31173b8c4dd910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:29:3c:ad:1a:c0:dd:31:8a:78:f8:90:e8:14:
6e:e2:33:07:f4:97:96:ee:51:6b:61:89:3e:65:72:
13:14:ba:8a:d9:25:7f:10:6e:3f:cb:86:64:d8:bc:
2d:46:b5:32:b4:ab:0e:a4:eb:1e:e5:53:da:64:fd:
6e:56:f8:67:03:2e:66:69:95:70:ce:26:2b:a9:f8:
92:62:4b:c1:3b:ac:74:08:e0:34:bb:b5:3d:8a:a5:
27:78:a5:13:75:fa:58:7e:36:a6:73:0f:50:80:4b:
95:9d:c0:a7:a1:b2:37:31:c3:fb:ab:34:44:f6:eb:
3f:aa:90:b6:80:e8:24:db:d9:05:ec:e9:62:5c:d3:
53:b3:65:a7:95:8f:96:cf:82:2d:dd:88:95:fb:18:
74:bb:89:be:15:b9:dc:c9:99:48:b7:d1:fd:31:49:
85:a7:2e:e2:fc:72:14:e2:e9:1b:e5:bd:2d:e6:31:
59:98:55:a8:0d:4e:33:51:d4:a2:a9:20:b5:be:d4:
d4:63:10:a8:e1:15:e3:bf:54:d4:8b:d4:93:86:5e:
53:48:c3:a9:7f:56:b2:d5:18:7d:24:b5:0c:89:e4:
56:3a:67:9e:0e:bf:f2:a4:c7:2c:4d:92:f6:e0:a4:
40:c4:06:a5:c8:30:6b:34:b3:68:dd:aa:f4:68:b6:
80:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C3:3F:0E:4E:97:5B:D2:D9:29:64:FD:7E:31:17:3B:8C:4D:D9:10
X509v3 Authority Key Identifier:
keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:49:ac:ed:b3:1d:95:90:71:a2:c3:78:d2:90:08:4f:29:5e:
50:f8:d0:1c:00:79:2b:b4:fe:66:3b:49:bc:98:66:41:06:4b:
00:a2:05:a0:3e:d7:c9:5a:a7:08:49:07:27:bf:e5:a7:10:31:
80:ca:92:08:45:f2:07:b9:14:b1:fd:05:92:b4:c2:8d:5b:f3:
49:f3:e3:72:d2:17:bc:52:ac:ed:e5:3a:a2:0e:97:59:d7:51:
04:dc:ae:4e:94:60:8a:44:58:07:4f:d7:e9:75:03:66:7f:2a:
51:66:79:68:c5:6a:bf:b7:53:61:3c:40:60:ff:a9:d6:a0:34:
72:91:9d:1b:32:4a:7d:d3:2f:ce:db:7f:63:b0:af:c7:ea:da:
cc:fa:54:d7:b5:ff:db:6d:94:24:57:78:60:e0:a5:2c:53:d9:
57:69:b9:6d:ec:aa:49:49:56:de:a4:71:12:ec:ca:15:2d:4c:
fc:3d:e7:70:e6:1c:2c:0d:fe:d4:4d:48:93:01:e4:71:f1:2a:
f9:f1:af:2e:a2:64:b6:f4:39:b2:cb:ba:ee:5d:45:d2:22:d9:
0e:7a:87:c4:d6:c2:30:4d:1d:17:fe:24:02:fb:15:2a:20:f2:
ef:31:7c:8c:78:28:7c:2d:be:5c:fe:bf:66:96:62:ab:30:48:
e9:f0:b4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:27:39 2025 by rpki-client