Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
File: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft (raw, json)
Hash identifier: fWORdm0ZLfR/DeYqoRLgadeX5i2nZg75UG0TRRIJOUU=
Subject key identifier: 1F:45:61:16:7D:96:AE:2E:CC:8E:58:C4:78:97:FE:3D:64:E1:67:28
Authority key identifier: EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
Certificate issuer: /CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Certificate serial: 0198903558F1D7733F20BD20BC673C2C5466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
Manifest number: 162A
Signing time: Sat 09 Aug 2025 19:01:11 +0000
Manifest this update: Sat 09 Aug 2025 19:01:11 +0000
Manifest next update: Sun 10 Aug 2025 19:01:11 +0000
Files and hashes: 1: 7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl (hash: Zyh3ZP24iI/BwbZep3IOoLKtNrTpzYu9POStKa7AnOA=)
2: MOwk6-gNTotPX4medNv9DwpG-nY.roa (hash: 6Jb3ucO6IvrIBpfG+RtQ1ACJyD7qIWwk6gOaPXaKjcU=)
3: YTaACXpx54gDy9xvy1Yl2SVGqRU.roa (hash: LQglYAbCThbY5IKAki5TmwIb5w2DJ6WRR1u7/db90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:35:58:f1:d7:73:3f:20:bd:20:bc:67:3c:2c:54:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb1ea5a1050a829224ea486c0e22ebfc75d640c
Validity
Not Before: Aug 9 19:01:11 2025 GMT
Not After : Aug 10 19:01:11 2025 GMT
Subject: CN=1f4561167d96ae2ecc8e58c47897fe3d64e16728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f2:bd:d6:5c:2a:0d:24:a2:83:fb:b5:c8:c3:
34:b9:fa:4b:35:35:ca:d8:de:8a:03:df:fe:79:3a:
9a:92:8d:4c:82:3e:4a:3e:1a:ff:d5:26:d4:21:7c:
29:22:cd:e9:d6:7f:bc:3d:67:39:89:87:4e:59:56:
c4:2d:59:ef:ff:07:78:62:15:cb:fa:f8:e0:96:62:
a6:93:77:68:6e:6f:b7:28:32:b9:cf:c6:d2:cf:0b:
64:c0:c0:21:26:31:84:f5:19:77:00:4e:dd:01:85:
36:ae:ce:43:21:be:5c:4e:a1:57:da:61:b1:4a:ad:
a3:c2:b8:c3:f0:c0:4c:27:03:d2:d4:e9:75:18:84:
3e:ca:00:0b:18:0e:fb:46:fe:45:b2:65:30:89:ff:
d1:33:77:eb:8c:d8:37:a4:78:5c:88:be:4e:ea:ef:
8b:f9:2d:67:93:f1:95:6a:95:3e:c3:e7:96:aa:fb:
e5:24:10:fc:35:52:ee:ef:55:d2:5c:a1:ce:61:22:
d9:a0:b3:e0:a1:9c:40:52:cb:ab:18:34:3d:16:59:
b6:2f:36:a5:e7:0b:c9:df:35:b2:24:e5:d8:34:96:
3b:a9:ab:a0:d2:36:11:b1:8e:49:7c:a1:61:cd:67:
b5:6d:6e:70:f0:dc:e6:13:a6:76:cf:69:74:50:dd:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:45:61:16:7D:96:AE:2E:CC:8E:58:C4:78:97:FE:3D:64:E1:67:28
X509v3 Authority Key Identifier:
keyid:EC:B1:EA:5A:10:50:A8:29:22:4E:A4:86:C0:E2:2E:BF:C7:5D:64:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7LHqWhBQqCkiTqSGwOIuv8ddZAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/21a927-8dd3-48f7-92ce-02ffceff1acc/1/7LHqWhBQqCkiTqSGwOIuv8ddZAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1c:a8:e5:9f:a8:07:46:5f:0e:3a:9e:45:ae:54:fd:3a:d5:
ca:aa:86:a3:b8:34:35:cf:81:ec:95:0c:3c:03:cc:eb:4b:8d:
ec:d2:a6:89:c2:89:32:11:24:41:21:71:f1:18:72:bb:b3:f7:
fb:0e:5c:dc:92:cb:20:b4:15:38:a8:12:9b:58:0b:3a:3e:5d:
37:90:00:d8:6e:fb:b2:32:b1:4b:5f:23:c1:9a:d6:41:45:15:
53:53:c7:53:fb:7d:63:00:85:6b:d3:2b:ce:7e:f2:8b:9d:4e:
6c:48:31:79:25:a3:84:9e:75:13:94:af:04:03:88:e0:10:ef:
ff:d4:b8:d1:01:9f:b3:8c:66:52:b6:2c:c7:4d:77:cb:2f:85:
e3:fe:f1:56:43:23:37:d9:09:dd:8c:e2:44:ac:28:58:d6:6f:
a7:e4:61:cb:5d:14:6a:39:ad:6d:2d:07:a6:3e:46:6c:26:31:
ed:d8:5c:9a:dc:3f:9d:40:48:b2:8e:3e:71:5c:89:84:7c:b5:
04:5a:a5:6b:d7:19:b9:c9:ce:c6:1f:e9:0c:cf:ad:66:06:76:
ec:8d:7c:ed:be:30:91:ed:31:cd:dc:57:ec:5c:40:95:f6:1d:
45:cd:09:98:80:11:61:be:a7:d4:de:86:25:c3:14:59:06:21:
aa:d3:56:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:49 2025 by rpki-client