Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
File: 7hsImeOKlrVPxMvNEO9TnFTtTTg.mft (raw, json)
Hash identifier: sbsHQ7W7et+jJyhy243BX0GnLGy1Crrb9dytaEV+P9U=
Subject key identifier: AC:55:5D:47:9E:9C:F0:C7:F7:95:2E:58:00:47:13:1E:21:26:F8:93
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 01987D1C2A7BC8726B8D0601180A57F07C23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 02:00:54 +0000
Manifest this update: Wed 06 Aug 2025 02:00:54 +0000
Manifest next update: Thu 07 Aug 2025 02:00:54 +0000
Files and hashes: 1: 7hsImeOKlrVPxMvNEO9TnFTtTTg.crl (hash: CYKQ2uK5syVZ0d9CEca/FQZ+iv3mfwNlNpd6Nmc1/dY=)
2: D0b1nmB_L5VEWf6cceZCeBQxCQo.roa (hash: 5aiQU00dPQtZA6c9t9iAvI3R/XjZbywVf6L+3WprENk=)
3: aayTQzRiJq9tAMzk8swFje4kTOA.roa (hash: sZC16XAD3EcE1zhIDvKbW1It71XSPS2OvJcF/8voOKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:2a:7b:c8:72:6b:8d:06:01:18:0a:57:f0:7c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: Aug 6 02:00:54 2025 GMT
Not After : Aug 7 02:00:54 2025 GMT
Subject: CN=ac555d479e9cf0c7f7952e580047131e2126f893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:36:f9:2d:9f:8f:b0:82:b7:22:51:61:ce:f2:
b7:a0:20:6a:34:a7:fa:7b:2d:8d:e7:d0:2f:81:e1:
a5:4b:4e:01:1d:10:78:a0:a6:9f:10:66:14:36:97:
d8:f8:fc:e2:bb:ef:8e:92:94:71:47:9a:f7:b9:e3:
42:07:c6:76:d8:51:89:63:07:d6:e2:d4:42:9d:92:
bc:db:c6:bf:cf:e4:09:fc:27:3f:7c:a1:b0:46:02:
a2:a3:c9:f8:43:b9:25:f9:90:df:90:b1:89:4d:da:
bc:15:b2:fe:53:ee:aa:f7:bb:13:fc:72:12:04:f0:
90:26:1b:33:f7:69:7e:00:7c:04:5e:ab:80:4c:e1:
2a:42:f8:b3:f0:5e:e4:89:6c:39:5e:06:24:74:39:
7b:1e:d7:59:36:24:14:8a:86:5f:48:28:dd:9f:d8:
a0:b6:62:7f:6a:c9:1d:0e:a8:ee:7d:5c:d6:b4:41:
8d:df:7c:09:46:84:b0:e1:46:42:6c:15:e1:c7:61:
c0:80:5e:30:fa:c3:c1:65:37:e7:3d:30:d1:8d:a7:
c6:34:7d:5b:ef:94:7e:8a:89:8c:ba:07:1c:d7:16:
a9:58:2e:88:cc:83:72:7d:12:65:81:72:8f:0d:37:
63:5a:da:d0:3f:e5:84:9f:b0:6b:8c:ec:3f:0b:1f:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:55:5D:47:9E:9C:F0:C7:F7:95:2E:58:00:47:13:1E:21:26:F8:93
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5b:70:b8:0e:6c:e9:56:8f:21:c5:cd:b2:80:2a:d8:6a:d1:
42:3c:57:38:39:0f:95:53:a1:15:75:4a:ad:8d:50:02:cd:26:
fa:fa:b6:80:92:da:b5:67:90:d1:10:e9:ae:ed:ce:7f:65:3b:
2a:fa:65:60:7a:43:9d:d1:2b:b5:54:20:a5:83:78:64:9f:02:
96:e2:8a:c3:f7:82:68:44:d9:a2:73:af:0e:31:d3:04:66:14:
96:01:8a:6c:66:7c:7b:44:94:85:a0:05:76:59:c3:48:6a:17:
c3:1f:ba:b3:fa:be:43:d2:ff:ca:68:2b:24:0e:9d:01:5c:a0:
9a:b1:ac:50:32:17:d6:2d:ac:6e:94:49:2a:56:4e:3f:fc:22:
07:cf:c1:13:9f:25:72:c7:f7:7c:c9:e0:0b:9a:bf:fd:a2:da:
f6:fb:46:6e:eb:18:f2:e2:e4:5d:ef:4c:e0:af:09:a9:e4:fd:
49:6a:b8:c7:2f:a8:42:d4:6b:80:c3:8b:cb:40:60:9b:4b:14:
de:f6:1c:98:ab:7d:58:f4:08:1d:34:7a:22:6b:9d:b8:9f:4f:
24:37:c4:ae:cd:24:a0:d9:81:68:e5:f1:98:cd:0b:32:20:db:
2c:77:77:1b:67:51:ae:e3:21:29:e5:ee:c9:62:0c:67:48:25:
ed:b0:81:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:05:36 2025 by rpki-client