Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
File: fZ4KWRzFKRTMcA44de11qR7JjCg.mft (raw, json)
Hash identifier: tnpIzHZ8X2RBSHRcy1NL1u8Z1GoTudRhgbpsQIaVTZI=
Subject key identifier: 78:49:72:E7:60:3E:B6:F0:41:A9:D6:69:BF:6A:78:20:C6:D1:56:14
Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
Certificate issuer: /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Certificate serial: 019877BEC5D29094A680D67C13E7E17067FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
Manifest number: 161D
Signing time: Tue 05 Aug 2025 01:00:47 +0000
Manifest this update: Tue 05 Aug 2025 01:00:47 +0000
Manifest next update: Wed 06 Aug 2025 01:00:47 +0000
Files and hashes: 1: fZ4KWRzFKRTMcA44de11qR7JjCg.crl (hash: xGv2H9hm1QWaHSwq3eHDpry2N1VJZL/a8MwbvgqjYek=)
2: k81sGP_nTYcnr-ydvL_qIPOJOvk.roa (hash: 5IYqtPSCzWY5rft+/OTv7pak8S3Yrmu5rpVtbzra1bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 00:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:77:be:c5:d2:90:94:a6:80:d6:7c:13:e7:e1:70:67:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28
Validity
Not Before: Aug 5 01:00:47 2025 GMT
Not After : Aug 6 01:00:47 2025 GMT
Subject: CN=784972e7603eb6f041a9d669bf6a7820c6d15614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:b1:e8:28:30:52:c1:02:b7:43:75:d4:3f:
ec:70:55:f4:24:63:50:54:56:7a:04:a8:43:0d:30:
36:4c:4f:70:2c:31:25:21:20:fb:bf:7a:e3:d2:34:
4a:b2:d3:1d:3f:99:12:83:6f:b8:fe:ce:92:98:0d:
03:2d:d9:08:fa:68:ed:5a:1c:4f:04:65:ce:30:24:
98:8b:67:94:c1:79:b1:8c:69:13:cc:26:99:50:62:
dc:c7:a3:7c:77:51:d4:2f:3a:29:03:3b:58:57:2b:
80:78:94:43:cd:80:5d:44:65:17:3f:ad:77:cf:ed:
77:b8:60:ba:70:9f:03:b3:fb:e9:be:49:c9:2d:d7:
f9:7b:8e:31:f5:c1:3d:fe:d9:2e:c0:66:ce:9f:b9:
dc:ca:39:f7:85:72:f5:01:ba:c1:a5:53:ea:58:e7:
73:6b:48:69:34:37:b0:55:4d:b5:10:c2:af:96:89:
1e:f2:b6:e1:bc:bf:a0:e1:63:26:57:a8:37:d5:11:
2a:69:3c:b6:81:90:91:b2:8f:9a:65:c5:15:f4:fa:
69:73:90:c6:a4:23:1d:8d:b8:e5:e1:9a:ae:9d:16:
03:44:bb:12:33:2d:ef:8d:39:8d:fb:31:93:8f:3e:
56:d3:13:47:7a:12:17:a8:2e:57:78:d0:b5:23:af:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:49:72:E7:60:3E:B6:F0:41:A9:D6:69:BF:6A:78:20:C6:D1:56:14
X509v3 Authority Key Identifier:
keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:10:df:85:54:f5:db:ce:fd:65:9e:75:02:22:de:53:ec:3e:
49:f5:91:d6:a0:ec:e4:a4:db:e5:82:59:45:94:5b:f3:18:61:
f2:fe:08:80:4a:5f:fa:3d:bc:83:ef:d9:7e:d7:a2:37:5f:98:
d6:3a:e5:38:b4:9a:c6:27:ce:ce:46:5e:db:2f:37:e8:1e:29:
32:62:a4:96:75:3c:82:18:5b:11:8e:c7:bd:db:61:fa:51:f5:
69:40:ae:20:40:fe:3c:dd:43:8d:49:db:77:41:1b:70:89:ed:
5d:16:2d:63:19:44:5a:26:a7:84:a6:02:56:63:1f:ec:93:56:
b2:47:61:ef:d6:9a:35:bf:e6:fa:1b:74:c3:84:8c:91:fe:16:
04:40:5c:55:ce:38:2e:2b:03:d9:d2:d0:49:d5:65:cc:4e:10:
ef:e8:13:82:88:9e:61:21:28:b4:71:86:6d:bd:46:e9:73:e2:
23:6d:2b:d8:38:ee:7f:b9:48:17:16:18:68:c0:d3:9c:77:42:
c5:f5:2f:4a:aa:b2:58:55:fe:80:0d:f6:11:69:1f:20:89:90:
45:e8:07:e2:74:a2:38:4f:6b:7f:f2:6f:f5:23:a3:33:06:67:
d3:b3:c7:f5:bf:66:d2:5a:88:b0:29:2d:9b:6d:f7:a8:12:62:
8f:bf:78:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:10:14 2025 by rpki-client