Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
File: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft (raw, json)
Hash identifier: o7XkF6Viuk5MNjc0X3EVZ+BDOI1dQkwHihgu5OpN1j4=
Subject key identifier: EA:3F:BB:FE:35:6C:92:65:36:4B:8C:11:A1:A3:93:AF:39:E4:E5:5F
Authority key identifier: F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
Certificate issuer: /CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Certificate serial: 01988731F2F87D6CAAE752E2597D1DF6D10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
Manifest number: 160A
Signing time: Fri 08 Aug 2025 01:00:54 +0000
Manifest this update: Fri 08 Aug 2025 01:00:54 +0000
Manifest next update: Sat 09 Aug 2025 01:00:54 +0000
Files and hashes: 1: 9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl (hash: TKphzvd75L0bhPHpq1b3Yh/FikZVgFdZpKKV+tdaWGY=)
2: SJe0yiKrFFgre-LwlA373na16-M.roa (hash: W+lZ86QtGfH27JSeGBvOgaus0tZU6nh0IODmn6TYevo=)
3: rXYQihXZcHzDYDPfOCw2uf0QxOs.roa (hash: mgxpGPq3j8kcIVwK/lsmtpT+En8AA3E9GG8LueVY7g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:31:f2:f8:7d:6c:aa:e7:52:e2:59:7d:1d:f6:d1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e679e58e4b8bf63e95002b54be471d634b9506
Validity
Not Before: Aug 8 01:00:54 2025 GMT
Not After : Aug 9 01:00:54 2025 GMT
Subject: CN=ea3fbbfe356c9265364b8c11a1a393af39e4e55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:45:29:d8:29:95:c5:15:dc:aa:c1:48:88:
9c:2a:a7:02:a0:9f:8b:c6:10:17:ec:32:15:c7:1b:
16:cc:ba:53:6e:f6:fc:62:04:1e:d1:55:ea:79:29:
dc:5a:30:8c:e9:21:7e:ce:08:8d:07:95:17:d9:cc:
c4:c0:2e:7d:65:8b:b4:06:c9:59:1c:de:f8:e8:0a:
b4:f8:12:91:74:06:c6:e8:1c:60:8e:f4:b7:ba:28:
5e:88:35:9f:31:5e:85:7c:95:6d:ce:10:ab:e6:4c:
0f:f5:3e:91:83:b1:4d:fc:39:f2:bd:a9:27:c1:f0:
c5:b1:f9:a8:b2:f0:ca:5c:03:56:fc:bb:b1:a8:70:
50:c4:2e:9f:b1:20:d2:61:11:d7:7b:66:f9:2f:13:
52:9d:59:cf:1d:23:7d:48:9a:5f:b2:d2:21:3e:2b:
e0:f6:94:40:55:b0:1f:69:6c:7e:53:84:3e:68:11:
16:91:e1:78:82:f4:d9:7a:4c:52:a7:74:a8:6d:f9:
74:41:9e:19:95:ba:67:3b:a3:34:ad:8a:c0:33:dd:
ee:13:25:92:4b:01:22:16:46:19:f3:99:36:ac:a4:
89:a5:ef:cc:ca:2a:64:c2:37:c7:07:32:93:ae:26:
55:97:af:9c:cd:85:e2:bf:da:cc:02:1e:1e:13:64:
d0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:3F:BB:FE:35:6C:92:65:36:4B:8C:11:A1:A3:93:AF:39:E4:E5:5F
X509v3 Authority Key Identifier:
keyid:F7:E6:79:E5:8E:4B:8B:F6:3E:95:00:2B:54:BE:47:1D:63:4B:95:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4fc787-e681-4e16-b1ec-a1c5d7eb4bd7/1/9-Z55Y5Li_Y-lQArVL5HHWNLlQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fb:21:39:ce:e5:73:61:be:c7:07:d5:73:bf:81:ed:32:8f:
f8:04:83:c3:71:7c:62:b2:0a:60:9e:2d:65:9a:dc:75:2a:16:
ee:86:2b:2e:ac:5e:72:ac:7f:c4:82:f1:a8:32:0f:48:45:f6:
2d:de:9a:19:be:68:b2:e1:83:b8:42:b5:bd:cb:61:6c:f8:04:
03:08:f1:8c:09:b6:3c:93:72:eb:79:a8:a8:c1:47:3d:a3:c5:
f3:07:b5:07:b4:be:62:cb:62:a2:f3:6e:6f:e5:80:a4:34:40:
5e:74:f0:2e:cd:fe:1b:f0:fb:09:da:83:8c:78:24:d5:1c:43:
d7:15:44:fd:0f:1b:e1:83:ae:ba:83:42:1b:bf:cd:7b:4d:f9:
05:25:6d:05:73:20:41:28:59:31:bb:ee:3c:c8:6e:28:6c:b4:
3f:91:ba:f1:38:c3:ce:25:db:e6:d8:57:14:8d:90:e5:e3:07:
81:b0:d1:12:b6:73:14:0f:58:40:34:2f:50:9f:f9:c3:79:5c:
4d:49:68:fc:83:b6:92:ab:b0:f7:ea:59:a2:2d:9a:db:2a:c3:
4a:50:ca:1b:dd:ca:fb:73:c1:0f:a0:c3:9d:91:f6:84:04:38:
22:89:4a:93:65:5a:43:65:5a:98:ec:42:d6:24:48:12:95:a0:
77:02:fc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:09:53 2025 by rpki-client