Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
File: 7tlXjkmCXELzwTG5TLD93lx5rXc.mft (raw, json)
Hash identifier: xE2PgXP0BN5xt5c8KbRvI2xab7bXqgJHoJeesXdzJrg=
Subject key identifier: 1F:DF:B1:3F:7D:5A:19:CE:88:C0:EC:E4:2C:52:37:6B:2C:81:ED:B5
Authority key identifier: EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
Certificate issuer: /CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Certificate serial: 019873E39A446B76461AD57915066DBC3602
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
Manifest number: 141C
Signing time: Mon 04 Aug 2025 07:02:32 +0000
Manifest this update: Mon 04 Aug 2025 07:02:32 +0000
Manifest next update: Tue 05 Aug 2025 07:02:32 +0000
Files and hashes: 1: 1zFu0RzpnnoDGJMwnKjinpXmRCA.roa (hash: ZQd8IBEmMebks+ONJAcNs9poavTsD9w6+Xw3hhWxaQ0=)
2: 7tlXjkmCXELzwTG5TLD93lx5rXc.crl (hash: /posErLi6oDxJTl74gfpr2VvsFJHr4w/dO7vwxjmnd8=)
3: HKJIsIJ7TQKVpo395xcD-UrLDIc.roa (hash: 5l8r3D44ewEJc+IhuEtnOq2QaEWlAtDCOHCZ14bO5AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:9a:44:6b:76:46:1a:d5:79:15:06:6d:bc:36:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed9578e49825c42f3c131b94cb0fdde5c79ad77
Validity
Not Before: Aug 4 07:02:32 2025 GMT
Not After : Aug 5 07:02:32 2025 GMT
Subject: CN=1fdfb13f7d5a19ce88c0ece42c52376b2c81edb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:19:a8:10:da:f2:ce:8b:5c:9e:38:64:2c:
63:44:96:92:56:4f:d9:2b:a4:c0:cd:7f:36:fe:e6:
fe:c8:3c:a1:c6:12:ab:a6:dc:b3:fc:a4:32:2b:9c:
3f:b6:27:ff:d4:de:fb:ce:3f:90:c2:99:ff:e6:e1:
ce:cc:46:d9:91:16:2e:18:cc:2c:f7:8a:06:ff:dc:
53:32:27:a1:aa:cc:01:2b:91:e9:89:e4:81:2b:98:
95:a0:63:28:c4:bb:b1:1f:95:b6:29:38:08:ea:7a:
35:49:1f:7a:ce:8c:30:1b:a5:04:73:20:c9:ab:a8:
9d:e1:9f:ab:25:a7:ae:64:ec:1d:09:96:8e:ca:a2:
ed:2f:ee:74:5a:05:2b:b1:00:97:b0:a4:e7:03:a8:
f2:07:c5:17:53:a1:9e:f0:cb:6d:b9:0e:5f:72:36:
44:3b:80:53:ad:33:62:3f:60:52:5b:a2:46:ca:3e:
33:36:0a:00:b1:35:e5:64:83:28:58:d1:5d:f5:2f:
4f:85:ee:52:25:e1:4c:ac:6c:0e:12:32:15:53:09:
b7:74:b2:a7:23:87:1d:a4:be:7c:df:81:64:ea:82:
1e:12:59:f3:dd:30:ca:62:ce:e2:14:8d:c7:9b:fc:
7d:bb:fa:e9:96:ee:dc:4b:72:cd:85:52:09:99:6e:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DF:B1:3F:7D:5A:19:CE:88:C0:EC:E4:2C:52:37:6B:2C:81:ED:B5
X509v3 Authority Key Identifier:
keyid:EE:D9:57:8E:49:82:5C:42:F3:C1:31:B9:4C:B0:FD:DE:5C:79:AD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tlXjkmCXELzwTG5TLD93lx5rXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/649b17-039d-42da-90f6-3e10d1ab7408/1/7tlXjkmCXELzwTG5TLD93lx5rXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:93:0b:55:50:ce:71:fd:ea:1b:51:7d:79:dd:b1:53:4c:b7:
7e:47:0e:50:a7:02:40:18:b3:c8:f2:cf:d7:77:8d:a7:c6:85:
4c:34:7c:42:21:1b:f4:ed:90:f5:1b:28:12:0e:8e:9b:6c:2a:
51:75:e8:16:ea:13:89:c2:66:47:24:d2:69:c0:0e:12:71:3b:
b6:3f:a5:86:2a:73:dc:3e:82:15:a8:73:39:3d:c5:1b:2c:4d:
c0:f4:f1:3f:aa:51:48:84:f9:5d:ad:56:75:82:7d:3a:d2:05:
8f:73:79:96:5d:85:df:d4:2f:25:e4:d5:a3:37:93:90:c5:21:
22:12:6b:bc:07:f2:ad:89:38:b7:9a:c8:bd:2f:05:c3:db:2e:
d9:1d:35:94:0e:c6:a0:75:5a:85:6f:a8:d4:51:fc:03:91:7a:
f0:7c:a3:14:68:51:42:c2:1f:fe:5e:8d:47:41:c4:a6:06:b9:
b9:f2:20:39:87:bd:53:01:9d:16:e7:65:fd:b9:51:d1:30:86:
ac:e2:30:ca:95:c6:70:c6:5b:26:c0:c3:63:06:9b:9e:6d:31:
f6:d5:39:59:8e:9d:eb:50:60:3e:f2:c8:35:c7:a5:1a:a4:32:
ec:a0:14:b3:20:6b:9a:60:62:d5:74:6d:73:39:3b:7a:f4:77:
16:18:fe:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:56 2025 by rpki-client