Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
File: 7hzOkB5ft8kvCakVz25lb2k7oQA.mft (raw, json)
Hash identifier: AxY/UDIPVvOrsDyYhlAMLR7CLUYXoyJaI+LpCQKDR5Q=
Subject key identifier: 76:EB:02:9F:38:81:87:57:2F:85:44:48:1E:10:92:30:DD:18:1C:31
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 0198745077A6F95FB5373C25AE65A4B20854
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
Manifest number: 1400
Signing time: Mon 04 Aug 2025 09:01:27 +0000
Manifest this update: Mon 04 Aug 2025 09:01:27 +0000
Manifest next update: Tue 05 Aug 2025 09:01:27 +0000
Files and hashes: 1: 1-YcJrvTRpLHaqQAFDly2XT4FqzM.roa (hash: P+X7bk4xVC2G2mv0GzrMdTNr5FMbR6w5BMTW58Igvfs=)
2: 7hzOkB5ft8kvCakVz25lb2k7oQA.crl (hash: LAX8m2LSOAUXKqu9ULhEYkKgMvqqXEZ9jEmxG4wgVgE=)
3: _GP8StenfvBJOKnQr7M_P7qAzf4.roa (hash: kdSVEH13j0prqXPkHz8Kr5u7PPDHiQCPmIC83dYc1oc=)
4: fzev7_a9OYyMIFNofQlw5RVoFZM.roa (hash: 10wzAQdx79ulrqhu3JqofOZW6+gKOGXZaHawTm1W9iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:77:a6:f9:5f:b5:37:3c:25:ae:65:a4:b2:08:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Aug 4 09:01:27 2025 GMT
Not After : Aug 5 09:01:27 2025 GMT
Subject: CN=76eb029f388187572f8544481e109230dd181c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:25:55:47:93:2d:4a:47:10:dd:d5:a6:50:
f4:92:18:c9:de:4f:1b:78:c8:43:de:d5:96:3d:84:
68:9a:3a:2e:fb:7e:e8:d9:83:42:d7:0c:5d:7d:72:
4d:07:b1:e1:d1:69:be:03:30:1b:8c:73:17:a6:a4:
c8:12:6e:61:4f:d3:b2:8f:2b:66:dd:9a:17:ff:ab:
b3:da:af:96:9d:50:db:05:5a:76:5d:25:7c:ad:a8:
70:a3:05:e9:de:96:63:45:0a:c7:ad:04:e1:a2:a8:
0d:a7:f9:88:28:2c:a3:64:37:6d:9d:e8:3b:d0:8e:
b7:0a:e7:89:85:03:50:a9:de:58:d6:82:79:72:e3:
67:cf:69:a6:a3:06:db:49:7b:cf:2e:4a:44:ac:f4:
98:bb:6a:4f:f2:7e:a0:0c:8e:b8:78:d9:b2:9f:07:
76:23:9c:69:eb:eb:ba:e5:98:a3:12:0f:e4:78:6a:
7f:aa:fc:84:08:94:2b:35:f1:f8:69:dc:56:99:42:
b9:ab:c1:40:9e:a7:37:d9:8f:4a:e0:e9:6a:f4:42:
90:f1:64:4d:0d:84:c4:43:e9:dd:32:d0:62:5b:96:
32:da:c4:4a:f3:7e:9e:2f:52:a8:75:56:0a:bc:31:
5c:48:f3:92:76:9d:32:f7:b9:cf:10:5e:e0:42:91:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:EB:02:9F:38:81:87:57:2F:85:44:48:1E:10:92:30:DD:18:1C:31
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6d:26:c7:35:ee:9b:c3:82:ee:07:28:06:54:16:d4:60:a2:
7e:cd:37:48:13:7d:05:2b:1d:70:c6:82:da:f6:20:3b:0e:71:
ce:ae:26:e7:e0:81:66:e5:ad:d7:6b:bf:b2:e0:9e:22:fb:93:
34:3c:50:18:09:e5:fc:fc:9e:73:97:ae:26:b0:46:d6:90:06:
cc:01:71:a2:b9:ef:12:e4:ed:72:42:17:04:6a:29:d2:37:65:
5c:af:06:93:9e:00:5c:3f:8a:5f:f2:a5:61:2d:76:36:a8:4a:
b8:79:d8:f4:a6:42:4d:53:9c:17:37:4d:c4:66:8b:6e:c1:a2:
bd:41:a1:1a:3d:51:cc:95:a8:d3:bc:39:5a:c6:d7:41:d0:96:
23:f4:17:a7:9f:a0:b0:78:da:48:6f:69:c5:10:5e:4c:42:74:
2d:c5:71:12:f5:d8:17:0b:ba:7a:a5:40:13:ea:d7:d2:af:84:
9f:46:ba:e0:f5:55:c5:43:95:e9:69:23:44:b9:44:1e:f9:d0:
53:1e:39:34:1f:7a:54:ce:2e:60:bb:a1:5a:e1:b1:9f:6e:80:
ba:fb:76:f8:9c:08:ba:98:8e:43:2f:32:66:4b:50:93:d8:39:
35:56:da:24:2a:9a:34:4b:08:3e:4b:62:fc:29:5d:74:c8:1e:
b7:5e:36:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:32 2025 by rpki-client