
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
File: p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json)
Hash identifier: UOzWbtbCQLILm0SnHLLipLxO+h8olFbY204EHvjw2pk=
Subject key identifier: 14:AA:29:BA:2C:D0:F3:33:02:23:0D:13:71:03:72:50:B8:11:FB:43
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Certificate issuer: /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial: 019884D5B8AA5042B6E806AAE5D6D7AEF56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
Manifest number: 1620
Signing time: Thu 07 Aug 2025 14:00:55 +0000
Manifest this update: Thu 07 Aug 2025 14:00:55 +0000
Manifest next update: Fri 08 Aug 2025 14:00:55 +0000
Files and hashes: 1: Wh_K5Ot0PdOltJAZbDMBxaT8CJw.roa (hash: VIjWDHn3J2RwnBzOCzHWLW6nGxWdyzjrSq+KdnZiOMU=)
2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: bKlQAkSSdUYrL91gYQjXhwTbQWgD7peZ2UNL72kHDj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:d5:b8:aa:50:42:b6:e8:06:aa:e5:d6:d7:ae:f5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Validity
Not Before: Aug 7 14:00:55 2025 GMT
Not After : Aug 8 14:00:55 2025 GMT
Subject: CN=14aa29ba2cd0f33302230d1371037250b811fb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:7b:0e:c6:ea:ce:f2:9c:90:ee:eb:f4:ef:
3a:ed:27:39:ea:b2:42:58:cb:6e:30:d5:f2:f4:89:
ab:7d:5a:01:fd:d2:d0:73:45:20:3a:57:0b:28:fc:
39:61:aa:66:d7:ad:46:9c:b6:0c:50:26:f4:dd:80:
57:82:fd:0b:db:f2:20:53:a8:ca:7c:f0:58:b5:9d:
ea:49:b9:9f:c7:13:13:f1:c1:c4:81:a8:61:d5:36:
69:4a:6d:12:2e:9d:fc:f0:83:6b:73:92:05:75:3c:
d2:12:6c:f6:26:27:0c:60:de:e5:32:e8:dc:55:3c:
a5:2a:a4:45:8b:b3:df:46:4b:e0:39:06:7e:f1:9d:
f5:09:b0:ff:c3:66:d7:67:54:1a:68:bb:d7:34:3b:
f9:19:e9:6b:05:42:49:b6:e0:a2:25:50:8a:6b:78:
62:b4:22:8e:fc:be:9a:81:e7:c5:a2:16:5b:25:fb:
47:c2:26:cc:3e:6f:48:19:77:d4:b5:bd:0b:2b:6a:
fc:a4:c1:6a:ac:5b:24:c2:8e:7d:32:6d:a4:2c:9f:
d3:99:ec:4c:87:f8:f7:60:ee:3e:57:a6:53:69:3c:
10:b5:e3:e6:54:9d:64:bf:aa:88:46:b2:18:e8:49:
a5:a5:93:59:70:01:ad:cc:e2:81:72:6f:01:95:ba:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AA:29:BA:2C:D0:F3:33:02:23:0D:13:71:03:72:50:B8:11:FB:43
X509v3 Authority Key Identifier:
keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:17:08:6d:fe:56:f3:c9:2d:60:cd:15:ac:b4:b2:92:29:3b:
07:64:76:3f:dc:d5:33:54:37:f0:12:a6:66:92:50:b1:52:f1:
f1:d1:89:2f:13:a1:55:ce:f5:14:fe:98:ca:8b:07:72:87:c6:
00:e9:12:62:1e:f8:89:c0:e8:6a:ce:a8:6a:2a:67:6a:69:c8:
14:b8:a3:2c:9d:e4:28:14:0a:35:a9:23:17:89:aa:9a:83:1a:
99:3d:da:11:8f:7b:37:58:1d:08:73:9d:70:28:0b:43:a7:5e:
69:dd:3c:c4:37:55:4e:15:64:ac:e3:2d:0a:34:40:15:9d:a6:
48:b1:78:12:bf:3d:59:e9:16:e8:1b:67:6b:51:df:61:6d:bb:
6f:10:63:ad:8e:2d:32:e9:5c:75:70:a2:e6:eb:24:1f:ca:f9:
b0:91:16:f0:8e:db:44:7a:a8:61:a1:e0:dc:ae:0d:84:f6:6f:
66:26:06:14:e7:cb:16:bf:ca:ae:88:1b:82:9f:f9:f6:d1:63:
02:60:c4:67:df:d8:35:ac:fa:a4:75:1d:0f:cd:d8:10:f7:cc:
2b:69:24:6d:d5:7e:82:89:96:b6:1c:5a:78:21:f7:99:c4:68:
05:1e:1f:22:b5:c8:d5:3e:9b:1e:77:76:c7:f2:43:aa:f9:6d:
48:25:70:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:22:27 2025 by rpki-client